This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/FC895C72C39F11F095CC9914C4F9AE02.roa File: FC895C72C39F11F095CC9914C4F9AE02.roa (raw, json) Hash identifier: YdZWGfY9XadiIE/MER0+GesxrYKkH9qV4qLzj2G/+zY= Subject key identifier: E7:53:A0:2D:2F:86:0E:EE:65:52:50:F8:DF:87:1F:47:9F:21:B0:16 Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0BF2 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/FC895C72C39F11F095CC9914C4F9AE02.roa Signing time: Tue 02 Dec 2025 03:35:14 +0000 ROA not before: Tue 02 Dec 2025 03:35:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138915 IP address blocks: 59.153.156.0/24 maxlen: 24 59.153.157.0/24 maxlen: 24 59.153.158.0/24 maxlen: 24 59.153.159.0/24 maxlen: 24 103.84.108.0/24 maxlen: 24 103.84.109.0/24 maxlen: 24 103.84.110.0/24 maxlen: 24 103.84.111.0/24 maxlen: 24 103.136.248.0/22 maxlen: 22 103.136.248.0/24 maxlen: 24 103.136.249.0/24 maxlen: 24 103.136.250.0/24 maxlen: 24 103.136.251.0/24 maxlen: 24 103.145.72.0/24 maxlen: 24 103.145.73.0/24 maxlen: 24 103.151.138.0/23 maxlen: 23 103.151.138.0/24 maxlen: 24 103.151.139.0/24 maxlen: 24 103.152.14.0/24 maxlen: 24 103.152.15.0/24 maxlen: 24 103.152.98.0/24 maxlen: 24 103.152.99.0/24 maxlen: 24 103.154.242.0/24 maxlen: 24 103.154.243.0/24 maxlen: 24 103.198.200.0/24 maxlen: 24 103.198.201.0/24 maxlen: 24 103.198.202.0/24 maxlen: 24 103.198.203.0/24 maxlen: 24 175.176.192.0/24 maxlen: 24 175.176.193.0/24 maxlen: 24 175.176.194.0/24 maxlen: 24 175.176.195.0/24 maxlen: 24 2404:a140::/32 maxlen: 32 2404:a140:2::/48 maxlen: 48 2404:a140:3::/48 maxlen: 48 2404:a140:4::/48 maxlen: 48 2404:a140:5::/48 maxlen: 48 2404:a140:6::/48 maxlen: 48 2404:a140:7::/48 maxlen: 48 2404:a140:8::/48 maxlen: 48 2404:a140:9::/48 maxlen: 48 2404:a140:a::/48 maxlen: 48 2404:a140:b::/48 maxlen: 48 2404:a140:c::/48 maxlen: 48 2404:a140:d::/48 maxlen: 48 2404:a140:e::/48 maxlen: 48 2404:a140:f::/48 maxlen: 48 2404:a140:10::/48 maxlen: 48 2404:a140:11::/48 maxlen: 48 2404:a140:12::/48 maxlen: 48 2404:a140:13::/48 maxlen: 48 2404:a140:14::/48 maxlen: 48 2404:a140:15::/48 maxlen: 48 2404:a140:16::/48 maxlen: 48 2404:a140:17::/48 maxlen: 48 2404:a140:18::/48 maxlen: 48 2404:a140:19::/48 maxlen: 48 2404:a140:1a::/48 maxlen: 48 2404:a140:1b::/48 maxlen: 48 2404:a140:1c::/48 maxlen: 48 2404:a140:1d::/48 maxlen: 48 2404:a140:1e::/48 maxlen: 48 2404:a140:1f::/48 maxlen: 48 2404:a140:20::/48 maxlen: 48 2404:a140:21::/48 maxlen: 48 2404:a140:22::/48 maxlen: 48 2404:a140:23::/48 maxlen: 48 2404:a140:24::/48 maxlen: 48 2404:a140:25::/48 maxlen: 48 2404:a140:26::/48 maxlen: 48 2404:a140:27::/48 maxlen: 48 2404:a140:28::/48 maxlen: 48 2404:a140:29::/48 maxlen: 48 2404:a140:2a::/48 maxlen: 48 2404:a140:2b::/48 maxlen: 48 2404:a140:2c::/48 maxlen: 48 2404:a140:2d::/48 maxlen: 48 2404:a140:2e::/48 maxlen: 48 2404:a140:2f::/48 maxlen: 48 2404:a140:30::/48 maxlen: 48 2404:a140:32::/48 maxlen: 48 2404:a140:33::/48 maxlen: 48 2404:a140:38::/48 maxlen: 48 2404:a140:39::/48 maxlen: 48 2404:a140:3a::/48 maxlen: 48 2404:a140:3b::/48 maxlen: 48 2404:a140:3c::/48 maxlen: 48 2404:a140:3d::/48 maxlen: 48 2404:a140:3e::/48 maxlen: 48 2404:a140:3f::/48 maxlen: 48 2404:a140:42::/48 maxlen: 48 2404:a140:43::/48 maxlen: 48 2404:a140:44::/48 maxlen: 48 2404:a140:45::/48 maxlen: 48 2404:a140:46::/48 maxlen: 48 2404:a140:47::/48 maxlen: 48 2404:a140:4a::/48 maxlen: 48 2404:a140:4b::/48 maxlen: 48 2404:a140:4c::/48 maxlen: 48 2404:a140:4d::/48 maxlen: 48 2404:a140:4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Dec 2 03:35:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=692e5e72-123f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:0d:65:ce:d5:da:dc:ec:7e:a7:7e:50:d7: 3b:a3:01:d5:36:6e:86:b8:23:d3:5a:01:d2:98:22: 73:68:e1:11:d9:e0:92:7d:44:6d:8e:94:d6:1d:3a: 19:83:11:53:c2:75:82:62:b9:d4:55:e7:2c:3f:cd: cf:71:2e:cf:99:44:cd:7a:18:c5:60:67:c7:8a:6f: 7f:01:24:3d:94:0b:85:06:54:48:57:f6:6a:6c:21: 72:cd:62:57:5e:78:c4:ea:cc:92:17:06:ce:45:02: 6e:f3:b3:17:03:dd:f9:56:9c:8f:45:bd:fe:19:77: 75:b4:a6:59:24:81:8b:d5:73:a9:7d:e9:3c:38:da: 7b:66:06:ef:d4:01:17:6b:09:18:ef:6c:6e:20:bc: 62:5a:51:2e:11:3c:f0:a7:9c:49:0c:7e:aa:e3:42: 28:1f:37:bd:48:75:5a:ca:2b:6e:cb:01:45:f5:f6: 07:b5:2c:89:e7:08:92:db:2e:e6:af:dc:72:5c:88: 0a:c8:00:c5:7d:0b:8a:b5:bb:b2:8c:9e:5f:c3:9f: 71:ba:0b:44:10:df:3b:b7:77:ab:63:ef:e1:d2:af: 15:79:7f:ca:66:52:c5:30:0a:90:99:ae:ba:3e:a9: f2:b7:d6:8e:29:3b:86:5f:06:5b:92:57:f4:4b:08: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:53:A0:2D:2F:86:0E:EE:65:52:50:F8:DF:87:1F:47:9F:21:B0:16 X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/FC895C72C39F11F095CC9914C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.156.0/22 103.84.108.0/22 103.136.248.0/22 103.145.72.0/23 103.151.138.0/23 103.152.14.0/23 103.152.98.0/23 103.154.242.0/23 103.198.200.0/22 175.176.192.0/22 IPv6: 2404:a140::/32 Signature Algorithm: sha256WithRSAEncryption 79:07:cd:a4:b3:eb:09:70:8b:0c:84:16:7e:dd:49:a6:15:d6: 8c:f3:1e:90:f2:8e:a3:a3:4d:fe:4f:5c:bd:2b:e3:17:d9:15: 0c:b1:fb:8e:6a:0f:b7:71:40:41:ce:fd:9e:b1:69:ab:21:30: f3:2c:5c:03:e1:4e:2e:d5:4a:39:3c:a2:26:1e:c3:c4:b5:df: 8a:34:88:91:7d:d0:2b:80:03:95:f6:c4:73:3f:f1:99:e9:5a: cb:3e:b8:7e:52:af:88:0d:12:11:99:27:c1:9c:57:9e:e5:d4: a8:74:73:72:15:dd:c1:8b:77:7a:c2:d8:7e:cc:02:77:62:c1: a5:e9:5c:e6:17:88:2b:25:96:d2:70:4b:d6:13:9d:81:b9:ab: 30:71:44:95:46:d0:f7:91:0e:51:0f:a5:54:8d:0f:4d:49:91: e7:b8:f7:1e:85:9b:e2:ee:4f:89:33:3c:d7:2a:5c:73:ba:ce: 3a:e8:4d:34:c4:43:df:06:89:9a:09:77:c9:ec:a1:62:d3:4e: d6:23:05:7e:27:13:77:33:00:b4:c3:77:41:4c:03:29:f0:ff: e5:b7:e7:c1:fb:05:bb:12:9c:92:6f:13:f5:52:c7:3d:a0:b1: e3:ba:dc:a3:69:c4:7c:37:32:0b:cd:f9:61:7a:d2:39:04:6a: c5:e3:26:8c -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUxMjAyMDMzNTE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJlNWU3Mi0xMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvP0NZc7V2tzsfqd+UNc7owHVNm6GuCPTWgHSmCJzaOER2eCSfURtjpTWHToZ gxFTwnWCYrnUVecsP83PcS7PmUTNehjFYGfHim9/ASQ9lAuFBlRIV/ZqbCFyzWJX XnjE6sySFwbORQJu87MXA935VpyPRb3+GXd1tKZZJIGL1XOpfek8ONp7Zgbv1AEX awkY72xuILxiWlEuETzwp5xJDH6q40IoHze9SHVayituywFF9fYHtSyJ5wiS2y7m r9xyXIgKyADFfQuKtbuyjJ5fw59xugtEEN87t3erY+/h0q8VeX/KZlLFMAqQma66 Pqnyt9aOKTuGXwZbklf0SwiXTwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFOdToC0v hg7uZVJQ+N+HH0efIbAWMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvRkM4OTVDNzJD MzlGMTFGMDk1Q0M5OTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZAYIKwYBBQUHAQcBAf8E VTBTMEIEAgABMDwDBAI7mZwDBAJnVGwDBAJniPgDBAFnkUgDBAFnl4oDBAFnmA4D BAFnmGIDBAFnmvIDBAJnxsgDBAKvsMAwDQQCAAIwBwMFACQEoUAwDQYJKoZIhvcN AQELBQADggEBAHkHzaSz6wlwiwyEFn7dSaYV1ozzHpDyjqOjTf5PXL0r4xfZFQyx +45qD7dxQEHO/Z6xaashMPMsXAPhTi7VSjk8oiYew8S134o0iJF90CuAA5X2xHM/ 8ZnpWss+uH5Sr4gNEhGZJ8GcV57l1Kh0c3IV3cGLd3rC2H7MAndiwaXpXOYXiCsl ltJwS9YTnYG5qzBxRJVG0PeRDlEPpVSND01Jkee49x6Fm+LuT4kzPNcqXHO6zjro TTTEQ98GiZoJd8nsoWLTTtYjBX4nE3czALTDd0FMAynw/+W358H7BbsSnJJvE/VS xz2gseO63KNpxHw3MgvN+WF60jkEasXjJow= -----END CERTIFICATE-----Generated at Fri Dec 5 01:45:33 2025 by rpki-client