This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/B94BEEA036D811ECB5BD1470C4F9AE02.roa File: B94BEEA036D811ECB5BD1470C4F9AE02.roa (raw, json) Hash identifier: H1FuH2ZNH03uYQtNzb3TWzIjcp7o0St6uGtbs7VdGro= Subject key identifier: A0:76:A0:E0:8F:8B:A0:38:5B:38:C5:B6:4F:4F:52:10:45:41:77:C4 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 086C Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/B94BEEA036D811ECB5BD1470C4F9AE02.roa Signing time: Thu 04 Dec 2025 20:03:22 +0000 ROA not before: Thu 04 Dec 2025 20:03:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38325 IP address blocks: 27.106.216.0/21 maxlen: 22 27.106.216.0/24 maxlen: 24 27.106.217.0/24 maxlen: 24 27.106.218.0/24 maxlen: 24 27.106.219.0/24 maxlen: 24 27.106.220.0/24 maxlen: 24 27.106.221.0/24 maxlen: 24 27.106.222.0/24 maxlen: 24 27.106.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2156 (0x86c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Dec 4 20:03:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6931e90a-b27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:85:08:12:54:51:7e:b6:43:d4:79:32:5a: bf:65:d7:56:11:65:0e:f2:21:b3:b3:08:7d:28:4b: 2d:19:f3:49:41:d9:5a:b0:c9:f2:c7:f7:60:01:6b: cb:c8:ee:17:75:a0:36:ab:a8:be:21:5b:53:79:3d: 94:9f:42:15:68:19:46:fb:ca:4a:2e:2c:7f:72:91: 10:10:b0:ba:41:54:53:7b:35:ae:62:e4:29:42:e4: 04:7c:22:01:8e:f1:3a:48:4a:8f:aa:af:20:79:c9: 51:e9:f7:62:21:99:ff:70:03:b3:22:78:53:2e:d6: ab:7a:f2:47:59:a2:af:94:11:9c:b3:2b:45:14:3e: fa:d6:75:e6:74:95:e7:a9:c3:b3:4a:1c:65:3f:f0: 00:fa:51:91:5a:a7:9f:e9:f5:f4:5e:94:3a:aa:fa: c2:9d:ec:d9:75:af:aa:35:40:c1:df:d7:1e:01:d3: 73:15:b8:8e:a2:0d:d9:27:48:b0:69:7c:41:2f:94: c5:57:8d:d6:3c:69:e6:08:47:8c:b3:c0:c4:88:e9: f8:c1:63:a8:80:df:8b:72:c6:0d:86:dd:9f:fd:f2: 3a:7c:ef:cc:68:cd:bd:31:0d:31:a9:30:3a:85:23: 5c:39:9c:bd:d1:7f:7b:e4:48:5d:6d:f3:10:7d:f8: 52:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:76:A0:E0:8F:8B:A0:38:5B:38:C5:B6:4F:4F:52:10:45:41:77:C4 X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/B94BEEA036D811ECB5BD1470C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.106.216.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:d3:d7:a7:05:fd:f0:1c:63:97:a3:d1:d3:bc:40:a5:9d:f3: e4:a1:7e:1b:76:22:91:c7:65:c7:14:28:c7:d4:ee:cb:48:54: f9:83:f8:c9:79:47:f6:51:ac:3b:ba:9b:61:91:91:56:a0:67: ab:e2:0b:65:a2:cf:fb:5c:87:06:09:c4:f1:c4:3e:7d:57:82: 8d:64:e9:d7:d8:d3:7e:fe:b1:52:f1:16:7a:9e:7f:a0:46:3b: 7d:36:6b:d5:9d:b7:fc:93:31:f2:7c:08:be:d5:e0:b7:00:3e: 5d:e7:b6:68:c8:d3:4a:ea:0e:7c:e3:57:9e:6f:ff:e9:28:7a: 58:95:ff:68:c2:1f:cb:89:64:57:c9:8e:14:61:4f:64:34:99: d4:c1:f9:fc:48:66:2d:31:21:88:8a:b6:25:bd:c4:e8:cd:8b: ef:84:fc:6d:0f:ad:48:8d:eb:00:f5:c1:4a:90:2c:ef:c7:ad: 78:ef:92:7e:d3:73:31:17:81:00:2b:5d:57:16:c4:09:87:a8: 43:cd:0e:4f:e3:53:75:60:b0:cc:f8:20:f7:ba:2e:88:48:ef: 9c:e0:f2:6c:08:26:82:3d:1c:23:e9:ab:e2:48:c0:bc:d7:dc: a8:a8:a3:c3:9b:4c:f4:78:bf:9d:d8:45:3d:f2:6b:26:5a:80: 79:a8:a4:dc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjUxMjA0MjAwMzIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxZTkwYS1iMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtV2FCBJUUX62Q9R5Mlq/ZddWEWUO8iGzswh9KEstGfNJQdlasMnyx/dgAWvL yO4XdaA2q6i+IVtTeT2Un0IVaBlG+8pKLix/cpEQELC6QVRTezWuYuQpQuQEfCIB jvE6SEqPqq8geclR6fdiIZn/cAOzInhTLtarevJHWaKvlBGcsytFFD761nXmdJXn qcOzShxlP/AA+lGRWqef6fX0XpQ6qvrCnezZda+qNUDB39ceAdNzFbiOog3ZJ0iw aXxBL5TFV43WPGnmCEeMs8DEiOn4wWOogN+LcsYNht2f/fI6fO/MaM29MQ0xqTA6 hSNcOZy90X975EhdbfMQffhSrwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKB2oOCP i6A4WzjFtk9PUhBFQXfEMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ1MzkvQzEyNjVEQzBFMzg5MTFFQUI3M0EzNjU5QzRGOUFFMDIvQjk0QkVFQTAz NkQ4MTFFQ0I1QkQxNDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAMbatgwDQYJKoZIhvcNAQELBQADggEBADrT16cF/fAcY5ej 0dO8QKWd8+Shfht2IpHHZccUKMfU7stIVPmD+Ml5R/ZRrDu6m2GRkVagZ6viC2Wi z/tchwYJxPHEPn1Xgo1k6dfY037+sVLxFnqef6BGO302a9Wdt/yTMfJ8CL7V4LcA Pl3ntmjI00rqDnzjV55v/+koeliV/2jCH8uJZFfJjhRhT2Q0mdTB+fxIZi0xIYiK tiW9xOjNi++E/G0PrUiN6wD1wUqQLO/HrXjvkn7TczEXgQArXVcWxAmHqEPNDk/j U3VgsMz4IPe6LohI75zg8mwIJoI9HCPpq+JIwLzX3Kioo8ObTPR4v53YRT3yayZa gHmopNw= -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:55 2025 by rpki-client