This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/C2A410D4ADA011F08E990C1DC4F9AE02.roa File: C2A410D4ADA011F08E990C1DC4F9AE02.roa (raw, json) Hash identifier: nVgw0WH227rtkmYtH0OHv+U/jPWrOk8pxANV8eFKPGY= Subject key identifier: D5:58:5E:34:74:65:96:32:A4:48:C6:47:8B:1B:8C:3F:CB:33:43:FE Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 09F5 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/C2A410D4ADA011F08E990C1DC4F9AE02.roa Signing time: Tue 06 Jan 2026 14:04:56 +0000 ROA not before: Tue 06 Jan 2026 14:04:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135377 IP address blocks: 43.224.65.0/24 maxlen: 24 43.224.66.0/24 maxlen: 24 45.253.246.0/24 maxlen: 24 45.255.133.0/24 maxlen: 24 45.255.134.0/24 maxlen: 24 45.255.135.0/24 maxlen: 24 61.29.241.0/24 maxlen: 24 61.29.249.0/24 maxlen: 24 61.29.251.0/24 maxlen: 24 103.216.100.0/24 maxlen: 24 103.216.101.0/24 maxlen: 24 157.119.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2549 (0x9f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Jan 6 14:04:56 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=695d1688-0acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:43:1b:b5:ae:da:f0:75:cf:b0:db:b6:8e:d9: 7b:1c:e6:0d:b9:a3:9c:0a:cc:21:9e:74:7b:9b:80: d0:b7:87:56:98:47:b3:59:43:cb:73:42:7d:72:69: 31:76:71:26:ae:14:0c:46:4f:19:77:00:b1:b8:86: 7e:99:e4:83:dc:70:07:04:a8:35:f2:2b:c1:e5:e2: 24:e5:85:f5:70:39:42:4a:0c:f2:a7:4c:8f:59:b4: 8b:cc:e8:d8:45:23:da:80:ad:27:b2:1d:08:b7:50: 65:92:bc:7f:31:d2:6e:92:dc:ca:a7:73:11:50:6a: ad:58:a1:2e:d9:ed:ab:08:aa:0f:dc:29:0d:22:82: 47:91:05:cc:f1:da:10:86:1d:ff:14:9f:c2:2e:47: 1f:96:35:11:e4:49:a1:e3:e8:d4:69:14:20:00:9e: 8f:0d:28:7b:b7:4e:b1:ab:da:3e:e4:e7:aa:25:51: 05:8f:7b:71:3c:b3:00:40:08:ef:57:84:95:2e:e3: 23:c9:20:49:97:e8:a5:b7:33:b5:ff:1f:45:8d:45: 20:cc:19:5d:35:e8:21:ee:09:35:b6:15:7b:f2:b2: 38:c2:34:60:aa:9b:7d:46:ac:ab:f1:5a:e3:77:30: 89:5f:ec:3b:75:6f:4a:55:43:cd:7c:f1:65:7d:1d: 47:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:58:5E:34:74:65:96:32:A4:48:C6:47:8B:1B:8C:3F:CB:33:43:FE X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/C2A410D4ADA011F08E990C1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.65.0-43.224.66.255 45.253.246.0/24 45.255.133.0-45.255.135.255 61.29.241.0/24 61.29.249.0/24 61.29.251.0/24 103.216.100.0/23 157.119.233.0/24 Signature Algorithm: sha256WithRSAEncryption 72:ed:66:51:f6:bd:12:16:50:f6:61:89:78:87:4c:ad:3e:0e: ea:28:64:6f:c0:b3:d9:34:e1:8c:48:06:fd:f2:63:ef:95:eb: 5d:88:94:d7:43:85:31:9a:85:53:76:83:e0:dd:cc:fa:e8:b6: 00:1b:b0:90:fc:2f:3a:90:91:48:fa:a5:45:c4:c5:76:81:50: e1:74:ba:50:92:95:e8:59:3b:f1:3f:c3:f8:83:4d:bd:28:29: a1:78:4d:3a:b9:c1:b7:bd:c9:d5:84:ea:58:f4:e0:f6:a8:ec: f2:50:42:50:9d:bd:1c:51:ad:cd:91:74:96:a7:97:49:d2:09: a9:20:fd:a2:eb:e2:ad:a0:7e:ee:39:24:1b:39:1f:10:00:9b: 06:b6:22:1d:bb:ce:c9:7a:66:ef:5c:42:1e:af:25:1c:5a:a0: 80:87:68:87:ac:21:ae:28:ea:b9:c8:a8:2f:70:cc:95:24:64: a8:59:41:d6:99:ce:bc:da:04:0c:64:ee:08:87:ca:c8:f1:40: 30:65:24:02:1b:f1:d3:38:67:fc:04:9a:90:6b:4d:61:9d:9d: 61:f2:bf:bd:10:a3:97:52:40:e5:1d:d4:90:0e:7a:ad:a3:14: 87:68:99:b2:04:e2:0b:08:3c:12:f3:d9:67:50:10:e0:32:4c: 42:ac:17:8d -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgICCfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjYwMTA2MTQwNDU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVkMTY4OC0wYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UMbta7a8HXPsNu2jtl7HOYNuaOcCswhnnR7m4DQt4dWmEezWUPLc0J9cmkx dnEmrhQMRk8ZdwCxuIZ+meSD3HAHBKg18ivB5eIk5YX1cDlCSgzyp0yPWbSLzOjY RSPagK0nsh0It1Blkrx/MdJuktzKp3MRUGqtWKEu2e2rCKoP3CkNIoJHkQXM8doQ hh3/FJ/CLkcfljUR5Emh4+jUaRQgAJ6PDSh7t06xq9o+5OeqJVEFj3txPLMAQAjv V4SVLuMjySBJl+iltzO1/x9FjUUgzBldNegh7gk1thV78rI4wjRgqpt9Rqyr8Vrj dzCJX+w7dW9KVUPNfPFlfR1H8wIDAQABo4ICzzCCAsswHQYDVR0OBBYEFNVYXjR0 ZZYypEjGR4sbjD/LM0P+MB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU1MDkvNzlFQTU5MUVBN0JEMTFFQUFBQTYyOTQ4QzRGOUFFMDIvQzJBNDEwRDRB REEwMTFGMDhFOTkwQzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWQYIKwYBBQUHAQcBAf8E SjBIMEYEAgABMEAwDAMEACvgQQMEACvgQgMEAC399jAMAwQALf+FAwQDLf+AAwQA PR3xAwQAPR35AwQAPR37AwQBZ9hkAwQAnXfpMA0GCSqGSIb3DQEBCwUAA4IBAQBy 7WZR9r0SFlD2YYl4h0ytPg7qKGRvwLPZNOGMSAb98mPvletdiJTXQ4UxmoVTdoPg 3cz66LYAG7CQ/C86kJFI+qVFxMV2gVDhdLpQkpXoWTvxP8P4g029KCmheE06ucG3 vcnVhOpY9OD2qOzyUEJQnb0cUa3NkXSWp5dJ0gmpIP2i6+KtoH7uOSQbOR8QAJsG tiIdu87JembvXEIeryUcWqCAh2iHrCGuKOq5yKgvcMyVJGSoWUHWmc682gQMZO4I h8rI8UAwZSQCG/HTOGf8BJqQa01hnZ1h8r+9EKOXUkDlHdSQDnqtoxSHaJmyBOIL CDwS89lnUBDgMkxCrBeN -----END CERTIFICATE-----Generated at Wed Jan 21 01:33:41 2026 by rpki-client