This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/230E492ECB6711F0991B7E4FC4F9AE02.roa File: 230E492ECB6711F0991B7E4FC4F9AE02.roa (raw, json) Hash identifier: 6d5n7M8pSFp7P26pMS5zNtebxU08KLIm0l23wm1+nS8= Subject key identifier: 01:68:63:D6:0C:08:53:18:B7:02:D1:2C:0A:D2:6F:B1:FA:8B:76:35 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 8E Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/230E492ECB6711F0991B7E4FC4F9AE02.roa Signing time: Tue 13 Jan 2026 05:26:42 +0000 ROA not before: Tue 13 Jan 2026 05:26:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4651 IP address blocks: 61.19.0.0/24 maxlen: 24 61.19.1.0/24 maxlen: 24 61.19.2.0/24 maxlen: 24 61.19.4.0/24 maxlen: 24 61.19.7.0/24 maxlen: 24 61.19.9.0/24 maxlen: 24 61.19.14.0/24 maxlen: 24 122.155.224.0/24 maxlen: 24 122.155.225.0/24 maxlen: 24 122.155.226.0/24 maxlen: 24 122.155.227.0/24 maxlen: 24 122.155.228.0/24 maxlen: 24 122.155.229.0/24 maxlen: 24 122.155.230.0/24 maxlen: 24 122.155.232.0/24 maxlen: 24 122.155.236.0/24 maxlen: 24 122.155.237.0/24 maxlen: 24 122.155.238.0/24 maxlen: 24 122.155.243.0/24 maxlen: 24 122.155.244.0/22 maxlen: 24 202.47.253.0/24 maxlen: 24 2001:c38:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 06:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Jan 13 05:26:42 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6965d792-c49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:d6:8f:45:57:5f:be:fd:b4:4f:e8:30:3f: aa:2b:24:f6:21:28:01:df:d5:c5:a6:ad:ab:52:30: 58:a9:58:c9:5b:7a:fb:44:71:2f:80:7e:ff:ea:f3: d0:88:76:0f:aa:55:7e:35:99:87:47:aa:be:45:70: 74:2c:ec:aa:cf:42:91:f5:6b:3f:f3:32:bc:74:5d: 35:c3:6a:09:44:f4:9d:73:ab:d6:ab:49:d5:40:a2: ad:c5:14:aa:ad:cf:b1:ff:f8:30:14:1b:d4:05:88: 91:08:dc:41:56:ec:52:0e:ea:06:0d:a5:85:70:af: 3a:b5:fe:6d:25:bf:c7:e4:b6:db:f7:bd:b0:76:09: 2b:e3:15:c1:b2:f6:8c:43:b3:c5:a8:97:e4:5b:10: 9b:d9:35:53:11:43:2e:52:a8:c6:7e:60:de:1a:13: 25:3e:e4:db:66:bb:74:16:0b:d8:3e:3f:6b:f9:8a: 66:03:aa:d2:ac:e0:c1:ac:bb:88:cb:26:e9:bc:6e: a3:6f:a9:82:ea:96:36:33:ff:9d:56:a4:72:f9:5f: b4:9e:4d:bc:bc:a1:84:96:9d:37:e9:b5:7c:9b:be: 23:ef:71:a5:2a:82:62:37:ce:b1:24:1a:94:95:ed: b5:d5:36:26:24:9e:2c:1d:f1:76:2c:16:8f:39:d1: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:68:63:D6:0C:08:53:18:B7:02:D1:2C:0A:D2:6F:B1:FA:8B:76:35 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/230E492ECB6711F0991B7E4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.19.0.0-61.19.2.255 61.19.4.0/24 61.19.7.0/24 61.19.9.0/24 61.19.14.0/24 122.155.224.0-122.155.230.255 122.155.232.0/24 122.155.236.0-122.155.238.255 122.155.243.0-122.155.247.255 202.47.253.0/24 IPv6: 2001:c38:5000::/48 Signature Algorithm: sha256WithRSAEncryption b1:8e:12:14:3d:f6:18:34:7a:15:4c:a1:fb:58:be:f5:b7:9d: 3a:4e:38:75:de:2a:45:43:81:b2:3f:ff:c0:90:3f:df:76:6d: 7f:fc:18:0f:74:10:c4:28:58:04:30:d6:ea:7e:30:30:92:e3: 9f:0f:95:ed:9b:7b:9e:ea:db:9b:ed:84:45:fd:7b:a0:9e:81: 69:7b:ed:41:f4:cb:8e:6d:da:36:0e:29:cc:34:e0:f4:bf:82: 19:e8:f8:92:5b:79:02:90:3a:db:73:1b:3e:9b:49:a2:4a:f6: a1:29:c2:ce:b1:05:6f:70:31:f7:fc:69:be:5a:f7:7c:ac:9c: 6f:7a:2a:e2:8c:02:59:4f:5e:d4:c1:bb:a5:8c:15:50:db:0e: 2c:b1:26:b4:5c:8c:99:2a:09:9e:53:92:fa:91:73:c9:7c:42: ad:f8:f7:3f:5f:6d:2c:f2:25:b0:7c:da:d8:cd:ce:01:c0:df: e0:35:58:da:ea:d3:fa:fb:2b:8a:3b:e8:b5:79:3e:09:23:ec: aa:1a:c8:f4:a5:30:a1:37:ae:99:f3:69:1c:f3:c6:0e:e6:36: 59:af:b9:b6:76:79:b4:8d:bc:86:2a:87:9d:96:07:a8:10:e7: 5e:9b:52:6c:0d:33:dd:d3:da:30:1c:b4:4d:5c:db:0a:8d:3d: 49:6b:40:54 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBCOEM0OUY0QzAx MDBDODUzOTEwHhcNMjYwMTEzMDUyNjQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY1ZDc5Mi1jNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqt7Wj0VXX779tE/oMD+qKyT2ISgB39XFpq2rUjBYqVjJW3r7RHEvgH7/6vPQ iHYPqlV+NZmHR6q+RXB0LOyqz0KR9Ws/8zK8dF01w2oJRPSdc6vWq0nVQKKtxRSq rc+x//gwFBvUBYiRCNxBVuxSDuoGDaWFcK86tf5tJb/H5Lbb972wdgkr4xXBsvaM Q7PFqJfkWxCb2TVTEUMuUqjGfmDeGhMlPuTbZrt0FgvYPj9r+YpmA6rSrODBrLuI yybpvG6jb6mC6pY2M/+dVqRy+V+0nk28vKGElp036bV8m74j73GlKoJiN86xJBqU le211TYmJJ4sHfF2LBaPOdHPKQIDAQABo4IC/DCCAvgwHQYDVR0OBBYEFAFoY9YM CFMYtwLRLArSb7H6i3Y1MB8GA1UdIwQYMBaAFJo6Z+3c0Jd1M6mguMSfTAEAyFOR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9CODg1MzFDQUM4 RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwzVXpxYUM0eEo5TUFRRElV NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU5OEQvQjg4NTMxQ0FDOEVDMTFGMEEzNDRBQjQ1QzRGOUFFMDIvMjMwRTQ5MkVD QjY3MTFGMDk5MUI3RTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYUGCCsGAQUFBwEHAQH/ BHYwdDBhBAIAATBbMAsDAwA9EwMEAD0TAgMEAD0TBAMEAD0TBwMEAD0TCQMEAD0T DjAMAwQFepvgAwQAepvmAwQAepvoMAwDBAJ6m+wDBAB6m+4wDAMEAHqb8wMEA3qb 8AMEAMov/TAPBAIAAjAJAwcAIAEMOFAAMA0GCSqGSIb3DQEBCwUAA4IBAQCxjhIU PfYYNHoVTKH7WL71t506Tjh13ipFQ4GyP//AkD/fdm1//BgPdBDEKFgEMNbqfjAw kuOfD5Xtm3ue6tub7YRF/XugnoFpe+1B9MuObdo2DinMNOD0v4IZ6PiSW3kCkDrb cxs+m0miSvahKcLOsQVvcDH3/Gm+Wvd8rJxveirijAJZT17UwbuljBVQ2w4ssSa0 XIyZKgmeU5L6kXPJfEKt+Pc/X20s8iWwfNrYzc4BwN/gNVja6tP6+yuKO+i1eT4J I+yqGsj0pTChN66Z82kc88YO5jZZr7m2dnm0jbyGKoedlgeoEOdem1JsDTPd09ow HLRNXNsKjT1Ja0BU -----END CERTIFICATE-----Generated at Tue Jan 20 11:27:10 2026 by rpki-client