This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/E43E6586CFED11F09F3F0D6FC4F9AE02.roa File: E43E6586CFED11F09F3F0D6FC4F9AE02.roa (raw, json) Hash identifier: pVI4eumeE0no6BJmy/4NOLSYYw3Bn5NN3GULCe7/XkA= Subject key identifier: 72:E6:D2:AA:BF:E0:F7:38:EA:E9:4A:27:E2:F4:8B:9E:26:BE:02:5B Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0B6F Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/E43E6586CFED11F09F3F0D6FC4F9AE02.roa Signing time: Wed 03 Dec 2025 02:15:29 +0000 ROA not before: Wed 03 Dec 2025 02:15:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9908 IP address blocks: 61.10.0.0/16 maxlen: 16 61.10.0.0/17 maxlen: 17 61.10.0.0/18 maxlen: 20 61.10.64.0/18 maxlen: 18 61.10.64.0/19 maxlen: 20 61.10.68.0/23 maxlen: 24 61.10.96.0/19 maxlen: 20 61.10.128.0/17 maxlen: 20 61.15.0.0/19 maxlen: 20 61.15.32.0/19 maxlen: 19 61.15.32.0/20 maxlen: 20 61.15.48.0/20 maxlen: 20 61.15.64.0/18 maxlen: 18 61.15.64.0/19 maxlen: 19 61.15.64.0/20 maxlen: 20 61.15.80.0/20 maxlen: 20 61.15.84.0/22 maxlen: 22 61.15.94.0/23 maxlen: 23 61.15.96.0/19 maxlen: 19 61.15.96.0/20 maxlen: 20 61.15.104.0/22 maxlen: 22 61.15.112.0/20 maxlen: 20 61.15.128.0/17 maxlen: 20 61.18.0.0/16 maxlen: 16 61.18.0.0/17 maxlen: 20 61.18.128.0/17 maxlen: 20 125.59.0.0/16 maxlen: 20 203.83.64.0/18 maxlen: 18 203.168.220.0/24 maxlen: 24 203.168.222.0/23 maxlen: 24 203.168.236.0/23 maxlen: 24 203.168.254.0/23 maxlen: 24 218.252.0.0/16 maxlen: 16 218.252.0.0/17 maxlen: 20 218.252.128.0/17 maxlen: 20 218.253.0.0/18 maxlen: 20 222.166.0.0/16 maxlen: 20 222.167.0.0/19 maxlen: 20 222.167.41.0/24 maxlen: 24 222.167.42.0/23 maxlen: 23 222.167.44.0/22 maxlen: 22 222.167.48.0/20 maxlen: 20 222.167.64.0/19 maxlen: 24 222.167.128.0/19 maxlen: 24 222.167.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 02:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2927 (0xb6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Dec 3 02:15:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=692f9d41-37e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:d6:7d:87:15:7b:a3:ce:91:f6:43:ea:dc: 09:ee:37:31:38:22:e5:3e:42:1d:19:01:07:ee:18: 1b:3c:77:11:ba:b2:9c:03:3b:5a:a9:42:26:33:af: b6:b6:82:31:d0:4a:bd:1f:71:d9:d4:22:8f:4b:ec: 47:c7:8d:bd:e2:1c:19:a3:04:da:db:9d:b1:57:32: 7f:ef:6f:f6:b8:4e:4c:47:41:54:31:e3:e9:34:03: 19:c8:4a:18:19:43:17:5c:53:ba:12:3e:df:0d:f8: fb:b2:68:fc:01:40:a7:1c:8c:cf:45:f5:ec:f7:37: 71:d9:b8:50:2d:5c:c7:5e:56:8e:3d:b3:cb:2e:0b: 59:47:0d:8b:aa:ee:75:e3:61:f1:17:d6:5b:49:4c: 42:6f:97:e6:8c:c0:f2:75:95:79:bd:ed:71:6a:67: 41:06:e3:09:18:77:0e:a9:35:be:b1:06:47:33:2c: 3d:4e:0d:f1:bd:13:7e:f1:87:4f:f4:8c:86:4e:83: 3e:d0:2c:5a:3d:ad:3a:54:90:89:db:5b:31:a7:37: c1:8a:4a:ce:a1:04:32:9e:ea:35:08:fb:6a:f7:c5: d2:87:d3:71:fc:ea:d2:c7:74:93:fb:04:85:72:c4: 60:2e:fc:ff:78:63:98:7b:72:6c:18:8b:55:1d:9b: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E6:D2:AA:BF:E0:F7:38:EA:E9:4A:27:E2:F4:8B:9E:26:BE:02:5B X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/E43E6586CFED11F09F3F0D6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.10.0.0/16 61.15.0.0/16 61.18.0.0/16 125.59.0.0/16 203.83.64.0/18 203.168.220.0/24 203.168.222.0/23 203.168.236.0/23 203.168.254.0/23 218.252.0.0-218.253.63.255 222.166.0.0-222.167.31.255 222.167.41.0-222.167.95.255 222.167.128.0/18 Signature Algorithm: sha256WithRSAEncryption ae:d3:cb:fc:72:d0:a5:a6:e2:f5:3e:24:b6:47:0c:f8:a2:d6: 66:93:8c:60:db:e0:6e:79:1b:0f:2c:c2:3f:eb:ac:ed:65:bc: 8c:59:b6:81:8b:d8:88:c8:0a:29:22:c6:94:3f:dd:9a:c6:4e: 89:b8:79:52:63:6d:a5:58:27:b2:e7:c4:0b:36:ec:81:07:e1: 19:44:81:63:c1:ca:b2:5a:68:c4:0e:fd:14:6b:22:99:3e:06: cb:e1:f3:d6:e9:9f:09:f6:50:40:d1:64:e3:30:35:d3:c7:d9: 12:3a:4f:d5:96:77:01:b3:50:31:ab:2c:99:31:ce:2f:31:1b: 27:f0:61:26:d9:0a:a4:50:b7:18:8a:f7:d1:39:cb:aa:d4:d9: d4:db:57:91:57:16:88:bd:8d:3b:78:03:5a:05:73:a7:f5:5e: d0:ff:f0:1d:58:a3:13:38:4a:3e:89:3b:fa:81:1f:81:1b:38: 59:6c:3f:fd:6b:2c:25:2a:1d:94:b4:74:8b:5d:75:81:64:1e: 1c:95:d0:b1:75:ec:29:ba:a3:9d:c1:16:0b:b8:5f:df:bc:6c: 19:28:67:c4:67:24:af:21:e4:b3:9d:ec:ed:b2:90:61:23:6f: 39:f8:6c:7d:13:3a:3f:6b:62:d5:0a:71:eb:0e:e5:61:00:8b: 3c:40:1f:d5 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgICC28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUxMjAzMDIxNTI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmOWQ0MS0zN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1rWfYcVe6POkfZD6twJ7jcxOCLlPkIdGQEH7hgbPHcRurKcAztaqUImM6+2 toIx0Eq9H3HZ1CKPS+xHx4294hwZowTa252xVzJ/72/2uE5MR0FUMePpNAMZyEoY GUMXXFO6Ej7fDfj7smj8AUCnHIzPRfXs9zdx2bhQLVzHXlaOPbPLLgtZRw2Lqu51 42HxF9ZbSUxCb5fmjMDydZV5ve1xamdBBuMJGHcOqTW+sQZHMyw9Tg3xvRN+8YdP 9IyGToM+0CxaPa06VJCJ21sxpzfBikrOoQQynuo1CPtq98XSh9Nx/OrSx3ST+wSF csRgLvz/eGOYe3JsGItVHZs0bQIDAQABo4IC7zCCAuswHQYDVR0OBBYEFHLm0qq/ 4Pc46ulKJ+L0i54mvgJbMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvRTQzRTY1ODZD RkVEMTFGMDlGM0YwRDZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwweQYIKwYBBQUHAQcBAf8E ajBoMGYEAgABMGADAwA9CgMDAD0PAwMAPRIDAwB9OwMEBstTQAMEAMuo3AMEAcuo 3gMEAcuo7AMEAcuo/jALAwMC2vwDBAba/QAwCwMDAd6mAwQF3qcAMAwDBADepykD BAXep0ADBAbep4AwDQYJKoZIhvcNAQELBQADggEBAK7Ty/xy0KWm4vU+JLZHDPii 1maTjGDb4G55Gw8swj/rrO1lvIxZtoGL2IjICikixpQ/3ZrGTom4eVJjbaVYJ7Ln xAs27IEH4RlEgWPByrJaaMQO/RRrIpk+Bsvh89bpnwn2UEDRZOMwNdPH2RI6T9WW dwGzUDGrLJkxzi8xGyfwYSbZCqRQtxiK99E5y6rU2dTbV5FXFoi9jTt4A1oFc6f1 XtD/8B1YoxM4Sj6JO/qBH4EbOFlsP/1rLCUqHZS0dItddYFkHhyV0LF17Cm6o53B Fgu4X9+8bBkoZ8RnJK8h5LOd7O2ykGEjbzn4bH0TOj9rYtUKcesO5WEAizxAH9U= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:13 2025 by rpki-client