This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/5537463AC91911F0AFA34C6DC4F9AE02.roa File: 5537463AC91911F0AFA34C6DC4F9AE02.roa (raw, json) Hash identifier: LZgCqON6rHgVqUf9z12TYfdTuWCZr+gIXpomnS/txSc= Subject key identifier: F6:26:5F:04:92:D5:46:2C:87:F5:CB:8E:0E:B1:4E:7F:5E:87:4C:71 Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 38 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/5537463AC91911F0AFA34C6DC4F9AE02.roa Signing time: Mon 24 Nov 2025 10:46:24 +0000 ROA not before: Mon 24 Nov 2025 10:46:24 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135566 IP address blocks: 122.155.26.0/24 maxlen: 24 122.155.27.0/24 maxlen: 24 202.139.197.0/24 maxlen: 24 202.139.198.0/24 maxlen: 24 202.139.199.0/24 maxlen: 24 202.139.200.0/24 maxlen: 24 202.139.201.0/24 maxlen: 24 202.139.202.0/24 maxlen: 24 202.139.203.0/24 maxlen: 24 202.139.204.0/24 maxlen: 24 202.139.205.0/24 maxlen: 24 202.139.206.0/24 maxlen: 24 202.139.207.0/24 maxlen: 24 202.139.208.0/24 maxlen: 24 202.139.209.0/24 maxlen: 24 202.139.210.0/24 maxlen: 24 202.139.211.0/24 maxlen: 24 202.139.212.0/24 maxlen: 24 202.139.213.0/24 maxlen: 24 202.139.215.0/24 maxlen: 24 202.139.216.0/24 maxlen: 24 202.139.217.0/24 maxlen: 24 2001:c38:90a0::/44 maxlen: 44 2001:c38:90a9::/48 maxlen: 48 2001:c38:90ae::/48 maxlen: 48 2001:c38:90af::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 10:46:24 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69243780-05c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:86:15:18:fd:57:34:8a:43:92:93:43:e4: d0:7a:09:1d:75:b1:54:53:e1:6d:92:5e:17:26:8a: 8c:9b:70:1f:ef:23:47:65:b0:ed:dc:3b:69:f8:6a: 78:8b:4f:b6:df:53:12:6d:bf:48:0d:c3:20:72:fc: cb:52:f0:eb:2e:4c:1a:09:34:34:9d:8b:54:4d:59: 01:35:ae:7c:9c:ea:7e:6e:c3:9d:29:2c:62:f7:90: af:17:d8:b1:81:72:56:09:a4:72:fa:58:f6:9f:80: 0d:cf:4d:00:51:2e:44:97:0e:93:8f:17:bc:73:a6: 16:d0:36:54:e7:6b:4a:93:50:fc:5b:1e:3f:8a:44: 52:c5:7c:62:e5:d9:7f:f2:a6:5b:67:d0:11:00:42: bb:a6:62:42:3c:10:18:c0:90:4d:33:5a:50:a7:ad: a8:34:4f:59:8d:6b:e9:e3:fb:16:fb:47:7e:d2:38: ca:fc:ff:3a:e7:48:21:fe:84:34:34:18:58:b4:da: d4:70:8b:fd:bf:62:da:88:6c:17:17:13:d4:5d:dc: 91:0f:52:db:b4:5e:83:73:8c:98:ef:2c:7e:02:8b: b0:e9:ed:68:16:8b:77:a7:60:c3:6d:73:35:fc:92: b3:5e:b3:e5:dc:6f:9d:76:31:36:7c:de:18:ae:03: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:26:5F:04:92:D5:46:2C:87:F5:CB:8E:0E:B1:4E:7F:5E:87:4C:71 X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/5537463AC91911F0AFA34C6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.155.26.0/23 202.139.197.0-202.139.213.255 202.139.215.0-202.139.217.255 IPv6: 2001:c38:90a0::/44 Signature Algorithm: sha256WithRSAEncryption 97:6b:b3:20:31:e5:f6:7f:cc:ec:05:f8:86:3f:0b:45:83:20: ff:52:4c:82:bf:b2:65:ca:a0:91:0d:08:60:45:fc:4f:30:13: 09:f6:f7:d4:b1:70:cc:43:53:1b:ee:f4:5e:3e:f5:54:65:12: 24:51:be:7a:48:15:8f:5f:44:ef:b6:fc:6d:14:06:55:d2:e2: 63:7f:df:bc:e0:df:aa:a2:8d:fb:6a:3e:1e:d6:82:f6:fa:0c: b6:1c:b7:d3:d1:23:51:44:75:c3:04:24:98:ad:e1:1d:12:ac: 1d:f8:4e:2a:77:bf:3b:5f:cc:f1:55:8d:a5:77:c9:b5:28:0c: b0:d5:b6:d6:48:a2:77:69:f0:5f:de:84:b4:d0:5f:5d:25:57: 4e:ee:c5:9f:cf:5d:be:55:20:6b:c6:a3:3a:d4:58:d9:60:8c: b6:67:b6:c5:43:84:7e:88:d1:02:ae:b9:4f:5d:4c:09:08:c2: f1:f5:01:2b:29:9d:f6:74:7e:6b:e7:43:51:e2:ef:fb:1e:18: 67:eb:2d:9b:0b:2d:a6:5b:c6:78:20:3a:88:eb:53:cd:05:4f: 2a:f7:84:04:bc:bd:87:e3:dc:d3:de:d1:aa:b1:7a:04:4b:56: 6a:19:b7:54:93:25:70:27:50:38:19:76:9e:a6:a2:4b:e8:46: 29:9c:06:9f -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQxMDQ2MjRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQzNzgwLTA1YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0CIYVGP1XNIpDkpND5NB6CR11sVRT4W2SXhcmioybcB/vI0dlsO3cO2n4aniL T7bfUxJtv0gNwyBy/MtS8OsuTBoJNDSdi1RNWQE1rnyc6n5uw50pLGL3kK8X2LGB clYJpHL6WPafgA3PTQBRLkSXDpOPF7xzphbQNlTna0qTUPxbHj+KRFLFfGLl2X/y pltn0BEAQrumYkI8EBjAkE0zWlCnrag0T1mNa+nj+xb7R37SOMr8/zrnSCH+hDQ0 GFi02tRwi/2/YtqIbBcXE9Rd3JEPUtu0XoNzjJjvLH4Ci7Dp7WgWi3enYMNtczX8 krNes+Xcb512MTZ83hiuA1ctAgMBAAGjggLCMIICvjAdBgNVHQ4EFgQU9iZfBJLV RiyH9cuODrFOf16HTHEwHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi81NTM3NDYzQUM5 MTkxMUYwQUZBMzRDNkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBMBggrBgEFBQcBBwEB/wQ9 MDswKAQCAAEwIgMEAXqbGjAMAwQAyovFAwQByovUMAwDBADKi9cDBAHKi9gwDwQC AAIwCQMHBCABDDiQoDANBgkqhkiG9w0BAQsFAAOCAQEAl2uzIDHl9n/M7AX4hj8L RYMg/1JMgr+yZcqgkQ0IYEX8TzATCfb31LFwzENTG+70Xj71VGUSJFG+ekgVj19E 77b8bRQGVdLiY3/fvODfqqKN+2o+HtaC9voMthy309EjUUR1wwQkmK3hHRKsHfhO Kne/O1/M8VWNpXfJtSgMsNW21kiid2nwX96EtNBfXSVXTu7Fn89dvlUga8ajOtRY 2WCMtme2xUOEfojRAq65T11MCQjC8fUBKymd9nR+a+dDUeLv+x4YZ+stmwstplvG eCA6iOtTzQVPKveEBLy9h+Pc097RqrF6BEtWahm3VJMlcCdQOBl2nqaiS+hGKZwG nw== -----END CERTIFICATE-----Generated at Sat Dec 6 04:35:03 2025 by rpki-client