This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/230E492ECB6711F0991B7E4FC4F9AE02.roa File: 230E492ECB6711F0991B7E4FC4F9AE02.roa (raw, json) Hash identifier: M7DPbOG45eZHQqrP0j+lb07O1Ass56QxDbwI6RBmTIw= Subject key identifier: A6:E5:92:92:0C:E7:D4:3C:99:9E:01:A0:71:DE:B6:EC:AD:CF:49:6F Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 5B Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/230E492ECB6711F0991B7E4FC4F9AE02.roa Signing time: Thu 27 Nov 2025 08:00:52 +0000 ROA not before: Thu 27 Nov 2025 08:00:52 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4651 IP address blocks: 61.19.0.0/24 maxlen: 24 61.19.1.0/24 maxlen: 24 61.19.2.0/24 maxlen: 24 61.19.4.0/24 maxlen: 24 61.19.7.0/24 maxlen: 24 61.19.9.0/24 maxlen: 24 61.19.14.0/24 maxlen: 24 122.155.224.0/24 maxlen: 24 122.155.225.0/24 maxlen: 24 122.155.226.0/24 maxlen: 24 122.155.227.0/24 maxlen: 24 122.155.228.0/24 maxlen: 24 122.155.230.0/24 maxlen: 24 122.155.232.0/24 maxlen: 24 122.155.236.0/24 maxlen: 24 122.155.237.0/24 maxlen: 24 122.155.238.0/24 maxlen: 24 122.155.243.0/24 maxlen: 24 122.155.244.0/22 maxlen: 24 202.47.253.0/24 maxlen: 24 2001:c38:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 27 08:00:52 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69280534-f75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:a4:06:04:87:6b:c8:28:5b:b1:ad:6a:1c: 01:5e:2d:a3:1e:e6:26:d5:e0:26:7a:1a:e7:d6:00: 58:70:c9:8a:fb:b7:f6:7e:ce:18:3a:08:d7:dd:e0: 05:0d:c6:7d:d4:52:29:20:95:19:82:03:5d:7d:78: 73:64:01:e8:cc:4c:55:8e:df:ee:a4:b0:15:a2:1f: bd:77:6c:ef:17:b6:b1:d4:27:e3:86:50:03:20:85: 97:7b:9f:06:dc:6f:03:80:35:e4:81:e8:d4:92:b4: 87:53:7b:b0:9d:ec:3c:a4:15:7a:3a:f6:d0:d0:2d: 87:56:36:16:ac:47:61:54:3e:67:8d:1b:4e:0d:a0: f6:67:64:2b:8a:6f:7e:82:b7:6d:ee:e0:44:6b:14: 5d:96:e7:f3:b8:1f:2b:b7:84:43:ac:de:45:9d:40: 6d:59:1a:a4:38:05:0b:c7:ac:1d:27:4e:3a:15:33: aa:85:e6:db:77:c8:54:da:73:11:ce:d1:b2:9c:be: 91:a9:45:0e:88:55:3d:12:d8:59:68:e7:59:04:4c: d6:eb:9c:2f:c1:32:d3:16:3c:20:ec:64:cf:7c:d2: 40:58:23:c9:4a:15:91:a8:52:3e:67:9e:be:16:11: 2a:84:bb:ef:49:6e:a2:78:3b:e1:75:58:50:1a:52: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E5:92:92:0C:E7:D4:3C:99:9E:01:A0:71:DE:B6:EC:AD:CF:49:6F X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/230E492ECB6711F0991B7E4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.19.0.0-61.19.2.255 61.19.4.0/24 61.19.7.0/24 61.19.9.0/24 61.19.14.0/24 122.155.224.0-122.155.228.255 122.155.230.0/24 122.155.232.0/24 122.155.236.0-122.155.238.255 122.155.243.0-122.155.247.255 202.47.253.0/24 IPv6: 2001:c38:5000::/48 Signature Algorithm: sha256WithRSAEncryption 95:48:c8:11:9d:84:9c:e3:6c:32:be:76:c6:fe:97:dd:5a:b3: 84:fa:10:a0:29:3f:ae:44:ac:7a:55:cb:b9:b9:9c:46:5a:10: ac:ea:28:e9:c3:14:11:10:2f:2a:9c:16:0b:a4:31:0d:2c:26: ab:43:37:c7:e8:d2:28:1c:ab:6a:ae:69:90:04:e3:e7:47:b7: 16:c3:0e:e3:16:69:33:92:94:c2:fd:1d:bd:4f:d7:17:c5:55: 50:d7:e1:0a:c0:3b:fb:dd:da:c7:a8:10:15:85:40:2c:4b:a8: 9f:f3:9d:05:a7:62:d3:a6:f5:a4:03:cd:ab:64:59:8f:45:33: e4:a0:49:28:5a:50:f0:4f:3f:cf:a6:fc:a3:ef:13:0e:a6:60: 89:68:a5:ea:c5:b5:51:7c:e6:7a:11:85:ed:2a:96:fb:5d:35: f7:c0:f9:5e:50:40:3a:57:8f:e2:0e:7f:dd:cc:9d:a4:17:8f: 7b:3a:55:18:fc:dd:db:8a:66:45:11:95:c6:02:34:a4:8b:23: 09:dc:6c:bd:72:a5:e6:21:85:eb:33:79:f1:ef:9f:75:1c:a6: 2c:5f:b1:db:da:25:97:f4:b0:ee:66:04:ef:0e:cf:35:d2:20: ef:61:03:31:bc:ed:2c:ed:61:49:94:3f:f3:c7:5b:b8:db:2e: 3c:fb:76:16 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjcwODAwNTJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjgwNTM0LWY3NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC02qQGBIdryChbsa1qHAFeLaMe5ibV4CZ6GufWAFhwyYr7t/Z+zhg6CNfd4AUN xn3UUikglRmCA119eHNkAejMTFWO3+6ksBWiH713bO8XtrHUJ+OGUAMghZd7nwbc bwOANeSB6NSStIdTe7Cd7DykFXo69tDQLYdWNhasR2FUPmeNG04NoPZnZCuKb36C t23u4ERrFF2W5/O4Hyu3hEOs3kWdQG1ZGqQ4BQvHrB0nTjoVM6qF5tt3yFTacxHO 0bKcvpGpRQ6IVT0S2Flo51kETNbrnC/BMtMWPCDsZM980kBYI8lKFZGoUj5nnr4W ESqEu+9JbqJ4O+F1WFAaUls3AgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQUpuWSkgzn 1DyZngGgcd627K3PSW8wHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi8yMzBFNDkyRUNC NjcxMUYwOTkxQjdFNEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDCBiwYIKwYBBQUHAQcBAf8E fDB6MGcEAgABMGEwCwMDAD0TAwQAPRMCAwQAPRMEAwQAPRMHAwQAPRMJAwQAPRMO MAwDBAV6m+ADBAB6m+QDBAB6m+YDBAB6m+gwDAMEAnqb7AMEAHqb7jAMAwQAepvz AwQDepvwAwQAyi/9MA8EAgACMAkDBwAgAQw4UAAwDQYJKoZIhvcNAQELBQADggEB AJVIyBGdhJzjbDK+dsb+l91as4T6EKApP65ErHpVy7m5nEZaEKzqKOnDFBEQLyqc FgukMQ0sJqtDN8fo0igcq2quaZAE4+dHtxbDDuMWaTOSlML9Hb1P1xfFVVDX4QrA O/vd2seoEBWFQCxLqJ/znQWnYtOm9aQDzatkWY9FM+SgSShaUPBPP8+m/KPvEw6m YIloperFtVF85noRhe0qlvtdNffA+V5QQDpXj+IOf93MnaQXj3s6VRj83duKZkUR lcYCNKSLIwncbL1ypeYhheszefHvn3UcpixfsdvaJZf0sO5mBO8OzzXSIO9hAzG8 7SztYUmUP/PHW7jbLjz7dhY= -----END CERTIFICATE-----Generated at Sat Dec 6 04:35:06 2025 by rpki-client