This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/580C1024EA9411F09F457C8C536F56BC.roa File: 580C1024EA9411F09F457C8C536F56BC.roa (raw, json) Hash identifier: RIG9HaUnCgvERmCKj88KiD+UhZNAqIzRdaFBO0NljlE= Subject key identifier: C2:27:54:C0:24:F7:AA:98:CB:8C:23:E6:B4:A7:48:87:F3:C9:19:F9 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3B65 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/580C1024EA9411F09F457C8C536F56BC.roa Signing time: Tue 06 Jan 2026 00:12:10 +0000 ROA not before: Tue 06 Jan 2026 00:12:10 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 209242 IP address blocks: 119.59.0.0/20 maxlen: 20 119.59.0.0/24 maxlen: 24 119.59.1.0/24 maxlen: 24 119.59.2.0/24 maxlen: 24 119.59.3.0/24 maxlen: 24 119.59.4.0/24 maxlen: 24 119.59.5.0/24 maxlen: 24 119.59.6.0/24 maxlen: 24 119.59.7.0/24 maxlen: 24 119.59.8.0/24 maxlen: 24 119.59.9.0/24 maxlen: 24 119.59.10.0/24 maxlen: 24 119.59.11.0/24 maxlen: 24 119.59.12.0/24 maxlen: 24 119.59.13.0/24 maxlen: 24 119.59.14.0/24 maxlen: 24 119.59.15.0/24 maxlen: 24 119.59.16.0/24 maxlen: 24 119.59.17.0/24 maxlen: 24 119.59.19.0/24 maxlen: 24 119.59.20.0/24 maxlen: 24 119.59.21.0/24 maxlen: 24 119.59.22.0/24 maxlen: 24 119.59.23.0/24 maxlen: 24 210.126.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 23:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15205 (0x3b65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jan 6 00:12:10 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=695c535a-a231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:df:d5:a9:a1:76:83:9d:43:d4:95:e6:77:c0: 91:b2:9b:7c:5a:ff:2c:9c:33:4e:f8:4a:e2:fa:e4: b3:ed:4e:af:de:7b:e4:ec:c7:eb:28:5f:4e:0e:e1: da:b8:eb:38:45:5d:25:24:0f:18:a9:25:95:ce:02: f1:80:75:19:9f:e0:20:bc:5a:f2:9c:c6:b2:7b:02: b9:6a:d5:ff:00:1b:32:ef:61:3c:a7:5f:14:ab:c8: 53:19:22:eb:94:9e:74:54:f0:7b:90:4b:82:e5:16: dc:63:94:1a:09:ed:9e:52:71:36:79:66:b6:86:88: 78:02:40:49:44:c1:e8:da:51:92:c3:72:3d:21:84: 6d:1a:64:63:a5:7d:8d:e9:c6:9a:e1:89:d5:4f:33: 97:78:7c:14:d6:7c:55:23:7e:d2:fb:8f:0b:61:29: fd:cd:af:ed:5d:16:a1:5b:ec:c3:8e:ae:8f:04:fe: 8a:0d:e6:cf:f0:0f:32:63:c0:52:18:7e:0d:81:d7: aa:a6:09:11:96:46:f8:bb:60:c8:5a:0c:f8:ba:9b: c8:de:d0:5b:7c:aa:2b:77:8d:49:c9:b1:88:8b:8d: c9:d4:fc:8c:3d:17:b0:4c:78:04:e6:7d:3e:26:02: 36:da:9f:e6:5a:9a:9b:62:1e:6b:58:11:4f:8b:37: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:27:54:C0:24:F7:AA:98:CB:8C:23:E6:B4:A7:48:87:F3:C9:19:F9 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/580C1024EA9411F09F457C8C536F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.59.0.0-119.59.17.255 119.59.19.0-119.59.23.255 210.126.126.0/24 Signature Algorithm: sha256WithRSAEncryption aa:b7:ef:b3:ae:31:b9:3c:2a:07:0c:81:1a:8e:1f:7d:3d:8b: 1b:84:22:9c:62:d2:53:d3:bb:3a:54:ad:74:ce:4a:3b:52:51: 28:95:f4:a3:ea:30:4d:f7:7f:33:78:93:31:da:a6:58:af:a8: 31:03:91:b5:69:71:d3:f4:67:96:5f:99:3e:22:02:10:8a:a9: 95:a0:69:53:48:9f:08:b9:37:7a:5a:f6:64:f1:d8:f6:38:0d: 22:cf:6e:f0:d9:ec:8d:52:1e:00:26:05:82:c3:c4:d5:c1:ce: 5f:27:a5:8d:72:a8:46:97:72:82:19:6a:79:25:00:f3:eb:52: 3f:d7:6c:e9:3b:33:e0:56:7f:ac:c5:57:e9:23:ce:89:8e:da: 03:00:b4:49:88:7d:46:95:61:07:2d:26:1a:d0:f3:27:3a:4d: b9:5f:ff:04:ff:e4:51:dd:99:ad:01:fe:25:28:bf:eb:94:b2: d3:97:33:9f:d2:a7:cf:17:c0:25:db:98:d0:b0:ec:6a:17:51: 9d:92:11:b8:58:3a:02:dc:f6:31:e8:13:82:3e:73:7a:2a:a8: a9:1c:be:8b:30:aa:37:ed:75:b7:1c:29:96:51:94:5a:06:0a: 82:32:7e:57:d6:1e:5d:a1:03:47:9d:a7:e3:2e:f7:b2:68:02: 63:86:8a:39 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICO2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwMTA2MDAxMjEwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVjNTM1YS1hMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3d/VqaF2g51D1JXmd8CRspt8Wv8snDNO+Eri+uSz7U6v3nvk7MfrKF9ODuHa uOs4RV0lJA8YqSWVzgLxgHUZn+AgvFrynMayewK5atX/ABsy72E8p18Uq8hTGSLr lJ50VPB7kEuC5RbcY5QaCe2eUnE2eWa2hoh4AkBJRMHo2lGSw3I9IYRtGmRjpX2N 6caa4YnVTzOXeHwU1nxVI37S+48LYSn9za/tXRahW+zDjq6PBP6KDebP8A8yY8BS GH4NgdeqpgkRlkb4u2DIWgz4upvI3tBbfKord41JybGIi43J1PyMPRewTHgE5n0+ JgI22p/mWpqbYh5rWBFPizdZAQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMInVMAk 96qYy4wj5rSnSIfzyRn5MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNTgwQzEwMjRF QTk0MTFGMDlGNDU3QzhDNTM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMCcEAgABMCEwCwMDAHc7AwQBdzsQMAwDBAB3OxMDBAN3OxADBADSfn4wDQYJ KoZIhvcNAQELBQADggEBAKq377OuMbk8KgcMgRqOH309ixuEIpxi0lPTuzpUrXTO SjtSUSiV9KPqME33fzN4kzHaplivqDEDkbVpcdP0Z5ZfmT4iAhCKqZWgaVNInwi5 N3pa9mTx2PY4DSLPbvDZ7I1SHgAmBYLDxNXBzl8npY1yqEaXcoIZanklAPPrUj/X bOk7M+BWf6zFV+kjzomO2gMAtEmIfUaVYQctJhrQ8yc6Tblf/wT/5FHdma0B/iUo v+uUstOXM5/Sp88XwCXbmNCw7GoXUZ2SEbhYOgLc9jHoE4I+c3oqqKkcvoswqjft dbccKZZRlFoGCoIyflfWHl2hA0edp+Mu97JoAmOGijk= -----END CERTIFICATE-----Generated at Fri Jan 23 02:19:26 2026 by rpki-client