This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/BF80484C737D11E8950B2925C4F9AE02.roa File: BF80484C737D11E8950B2925C4F9AE02.roa (raw, json) Hash identifier: RmG7qVZKqqoe6wvo/m5+iQq9+vaZb1nQorT14L5h7XM= Subject key identifier: CB:06:E9:BC:17:DF:F0:00:9D:0F:53:DE:91:F9:42:DA:1E:25:BB:C3 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2AF7 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/BF80484C737D11E8950B2925C4F9AE02.roa Signing time: Fri 02 Jan 2026 16:13:00 +0000 ROA not before: Fri 02 Jan 2026 16:13:00 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134240 IP address blocks: 27.254.4.0/24 maxlen: 24 27.254.11.0/24 maxlen: 24 27.254.15.0/24 maxlen: 24 27.254.22.0/24 maxlen: 24 27.254.31.0/24 maxlen: 24 27.254.177.0/24 maxlen: 24 27.254.185.0/24 maxlen: 24 27.254.186.0/24 maxlen: 24 27.254.205.0/24 maxlen: 24 27.254.231.0/24 maxlen: 24 27.254.233.0/24 maxlen: 24 49.229.88.0/23 maxlen: 23 49.229.90.0/23 maxlen: 23 58.64.24.0/24 maxlen: 24 58.64.27.0/24 maxlen: 24 58.137.6.0/24 maxlen: 24 58.137.26.0/24 maxlen: 24 103.20.204.0/22 maxlen: 24 110.49.141.0/24 maxlen: 24 110.49.142.0/23 maxlen: 24 2405:9800:d000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10999 (0x2af7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Jan 2 16:13:00 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6957ee8c-c33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:e9:f3:54:50:3e:1f:ef:9e:52:30:fb:1b: e1:94:05:68:e7:63:84:92:ad:3f:7a:ab:5f:59:c8: 1d:37:25:3c:9d:42:b5:3e:a5:e7:d5:9c:b3:81:e8: 14:ab:59:54:a6:f3:b4:24:01:1d:df:f9:8f:7a:79: 31:da:f7:21:3e:42:7a:31:c6:ec:04:0e:f0:79:0e: ab:dd:f7:58:4c:d5:08:e3:10:91:ea:2c:13:9e:a7: 65:6a:ac:94:08:d8:3f:da:fe:45:dd:37:c8:04:1b: 5a:64:8b:f4:c9:7c:5c:c0:1b:58:c1:d6:83:a9:ae: 5a:a9:ee:d9:5c:14:f6:af:46:34:08:ba:47:e8:c2: 57:b6:c0:1d:04:75:91:5a:6a:9d:4e:87:5c:5e:16: 69:d0:17:e7:7b:be:46:c9:99:b3:e1:c3:ce:b1:74: 62:c5:08:46:70:30:03:a4:e5:2c:aa:58:27:a7:7d: 64:0e:91:4a:35:56:ff:62:6c:d5:c1:bf:33:ef:58: b0:26:e9:41:6b:39:f1:05:96:80:d9:37:e7:6a:77: c0:05:84:70:d1:d3:f5:c6:45:24:c6:67:8c:de:8d: 35:fe:25:b2:16:0c:3e:41:4f:c3:75:3d:f6:5e:6f: 8c:ac:9f:de:a8:83:7b:d7:22:38:da:7f:18:d1:93: 7f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:06:E9:BC:17:DF:F0:00:9D:0F:53:DE:91:F9:42:DA:1E:25:BB:C3 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/BF80484C737D11E8950B2925C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.254.4.0/24 27.254.11.0/24 27.254.15.0/24 27.254.22.0/24 27.254.31.0/24 27.254.177.0/24 27.254.185.0-27.254.186.255 27.254.205.0/24 27.254.231.0/24 27.254.233.0/24 49.229.88.0/22 58.64.24.0/24 58.64.27.0/24 58.137.6.0/24 58.137.26.0/24 103.20.204.0/22 110.49.141.0-110.49.143.255 IPv6: 2405:9800:d000::/36 Signature Algorithm: sha256WithRSAEncryption 3b:aa:e6:6a:b6:ca:cd:d2:ec:27:86:8d:96:66:5a:b0:01:2c: df:49:e6:d5:e0:34:5e:4a:72:45:36:7b:05:bb:5c:ed:35:3d: eb:af:0b:e3:5b:ff:cb:f6:86:41:ad:da:5e:d4:b1:6c:e6:72: 94:af:f6:4e:81:b6:5d:11:5c:18:d2:4e:a5:29:f0:82:05:4e: b1:e1:db:73:95:2c:20:a5:dc:64:97:a1:9d:f5:3c:30:e8:3a: 5e:44:50:fe:b7:75:f7:37:aa:59:54:1d:65:1c:3f:9f:6d:9b: fd:07:0b:36:5c:64:c8:54:22:3d:2f:93:40:74:8a:72:f1:7e: f2:60:d8:92:22:8d:69:13:65:62:2a:49:ce:62:e4:a3:5c:74: fd:5e:2f:97:17:0e:a7:11:04:7f:5a:8e:87:39:7e:41:5b:50: 79:9e:90:68:81:5b:3c:02:53:c9:b0:2f:99:df:33:37:be:dc: 3d:4d:62:94:5d:3f:b1:97:22:5b:9f:fc:3d:33:d1:4a:77:25: c4:ed:64:63:02:b1:30:c5:c8:1c:d6:e0:98:57:20:14:a8:e6: 2c:16:91:d0:4a:c4:fe:27:a1:fc:97:43:90:89:0d:aa:ac:b0: 9e:ac:f8:d8:4a:ad:96:92:0b:ca:5f:3c:63:4c:cd:aa:dc:33: eb:ff:93:84 -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgICKvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU3ZWU4Yy1jMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qbp81RQPh/vnlIw+xvhlAVo52OEkq0/eqtfWcgdNyU8nUK1PqXn1ZyzgegU q1lUpvO0JAEd3/mPenkx2vchPkJ6McbsBA7weQ6r3fdYTNUI4xCR6iwTnqdlaqyU CNg/2v5F3TfIBBtaZIv0yXxcwBtYwdaDqa5aqe7ZXBT2r0Y0CLpH6MJXtsAdBHWR WmqdTodcXhZp0Bfne75GyZmz4cPOsXRixQhGcDADpOUsqlgnp31kDpFKNVb/YmzV wb8z71iwJulBaznxBZaA2TfnanfABYRw0dP1xkUkxmeM3o01/iWyFgw+QU/DdT32 Xm+MrJ/eqIN71yI42n8Y0ZN/UwIDAQABo4IDGDCCAxQwHQYDVR0OBBYEFMsG6bwX 3/AAnQ9T3pH5QtoeJbvDMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQkY4MDQ4NEM3 MzdEMTFFODk1MEIyOTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgaEGCCsGAQUFBwEHAQH/ BIGRMIGOMHwEAgABMHYDBAAb/gQDBAAb/gsDBAAb/g8DBAAb/hYDBAAb/h8DBAAb /rEwDAMEABv+uQMEABv+ugMEABv+zQMEABv+5wMEABv+6QMEAjHlWAMEADpAGAME ADpAGwMEADqJBgMEADqJGgMEAmcUzDAMAwQAbjGNAwQEbjGAMA4EAgACMAgDBgQk BZgA0DANBgkqhkiG9w0BAQsFAAOCAQEAO6rmarbKzdLsJ4aNlmZasAEs30nm1eA0 XkpyRTZ7Bbtc7TU9668L41v/y/aGQa3aXtSxbOZylK/2ToG2XRFcGNJOpSnwggVO seHbc5UsIKXcZJehnfU8MOg6XkRQ/rd19zeqWVQdZRw/n22b/QcLNlxkyFQiPS+T QHSKcvF+8mDYkiKNaRNlYipJzmLko1x0/V4vlxcOpxEEf1qOhzl+QVtQeZ6QaIFb PAJTybAvmd8zN77cPU1ilF0/sZciW5/8PTPRSnclxO1kYwKxMMXIHNbgmFcgFKjm LBaR0ErE/ieh/JdDkIkNqqywnqz42EqtlpILyl88Y0zNqtwz6/+ThA== -----END CERTIFICATE-----Generated at Wed Jan 21 06:18:49 2026 by rpki-client