This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/64541796EA9411F0ABDAFDB7536F56BC.roa File: 64541796EA9411F0ABDAFDB7536F56BC.roa (raw, json) Hash identifier: MQ9HqUBQLP0SmQ4zSMcQ/VUwmZ3c8O+BP/6mM5K6zmI= Subject key identifier: 88:42:C0:3E:F6:2A:7A:C3:73:05:85:04:A6:F4:D5:36:2D:62:10:F3 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3B67 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/64541796EA9411F0ABDAFDB7536F56BC.roa Signing time: Tue 06 Jan 2026 00:12:31 +0000 ROA not before: Tue 06 Jan 2026 00:12:31 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139648 IP address blocks: 61.107.200.0/22 maxlen: 24 119.59.0.0/20 maxlen: 20 119.59.0.0/24 maxlen: 24 119.59.1.0/24 maxlen: 24 119.59.2.0/24 maxlen: 24 119.59.3.0/24 maxlen: 24 119.59.4.0/24 maxlen: 24 119.59.5.0/24 maxlen: 24 119.59.6.0/24 maxlen: 24 119.59.7.0/24 maxlen: 24 119.59.8.0/24 maxlen: 24 119.59.9.0/24 maxlen: 24 119.59.10.0/24 maxlen: 24 119.59.11.0/24 maxlen: 24 119.59.12.0/24 maxlen: 24 119.59.13.0/24 maxlen: 24 119.59.14.0/24 maxlen: 24 119.59.15.0/24 maxlen: 24 119.59.16.0/24 maxlen: 24 119.59.17.0/24 maxlen: 24 119.59.19.0/24 maxlen: 24 119.59.20.0/24 maxlen: 24 119.59.21.0/24 maxlen: 24 119.59.22.0/24 maxlen: 24 119.59.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 14:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15207 (0x3b67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jan 6 00:12:31 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=695c536f-9f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:f5:0a:47:4e:05:8b:95:66:ef:b7:f1:00: bf:fb:39:bd:de:46:7b:1b:1f:97:75:59:3e:af:bb: 7b:cc:7d:c5:a3:e3:e9:6b:c0:ce:f5:50:13:7f:25: 22:34:09:03:9f:50:09:d6:81:60:95:8f:aa:72:b4: 65:af:8f:dc:f8:76:6e:cc:14:8d:c3:55:e7:a0:53: fb:6c:eb:53:e1:a7:9f:2a:3f:7d:55:66:39:e7:fb: 67:fc:55:fb:c6:cd:88:23:d0:66:38:73:b2:7b:03: 38:7c:ba:c7:ca:a2:08:6b:8c:4d:ea:d2:78:c9:6a: 04:56:fe:ef:2b:69:4d:df:80:cc:5e:07:e4:6c:45: da:03:cd:69:c1:19:a8:47:27:e7:ae:e7:e0:2a:7e: d9:11:b9:c1:70:4d:a7:3c:99:06:24:52:3d:4d:ba: b7:ca:ed:bc:b2:a3:f3:93:04:86:16:64:23:7f:f8: ed:5d:c2:96:c9:aa:5b:68:2f:7a:b1:61:86:cc:df: f6:61:f7:87:a0:bb:2e:ba:45:3b:62:ad:fc:75:d1: 57:4d:04:a2:85:e8:e9:34:cd:e9:cb:88:3f:b2:b2: 8c:52:ca:18:67:50:2e:01:e4:74:91:ae:ff:e2:fc: a1:80:7b:95:5f:76:eb:17:46:ee:0e:92:ea:93:8f: f9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:42:C0:3E:F6:2A:7A:C3:73:05:85:04:A6:F4:D5:36:2D:62:10:F3 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/64541796EA9411F0ABDAFDB7536F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.107.200.0/22 119.59.0.0-119.59.17.255 119.59.19.0-119.59.23.255 Signature Algorithm: sha256WithRSAEncryption 64:01:3d:d3:c7:62:5e:d2:0a:eb:b4:7f:eb:4c:a0:8e:d1:f5: 24:46:85:fe:84:b8:63:f3:f3:8c:c9:db:dc:a5:1e:3e:32:dd: 0b:8b:16:1d:de:f7:bd:a0:21:47:e8:da:9f:7b:f9:ca:c5:bc: 43:3d:88:c9:7e:63:22:7e:88:95:3e:14:fc:69:7d:0c:48:67: 36:05:b0:e1:9e:c5:ad:98:39:c5:36:4f:f2:dd:e7:8e:d3:4e: e7:7b:fd:fd:76:e0:14:49:c5:4b:f8:4e:b1:cd:6a:6f:1f:dc: d3:cb:63:39:af:78:9e:9e:3a:ba:77:83:a5:06:da:35:37:88: e1:a1:cc:28:52:2a:07:3f:44:c2:22:9e:98:17:a1:50:86:53: 43:dc:32:2b:66:fc:4c:47:ab:88:92:62:cf:e0:b5:c6:37:3a: 7e:d1:34:f9:3c:81:a5:c1:3d:26:7f:28:f1:63:89:43:fc:03: e5:04:4e:70:09:87:b1:f3:78:97:db:2a:8e:eb:78:02:a0:de: 7a:4e:c2:ce:44:4d:d6:1a:2f:69:f8:18:7b:cb:9d:06:e2:9c: 36:53:2c:5c:9a:21:af:e2:6a:60:c1:65:d2:78:bd:a0:54:4d: 67:24:82:af:5d:a3:de:fd:e7:3c:80:2c:13:23:de:ac:b2:2d: 0c:7b:20:b7 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICO2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjYwMTA2MDAxMjMxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVjNTM2Zi05ZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ/1CkdOBYuVZu+38QC/+zm93kZ7Gx+XdVk+r7t7zH3Fo+Ppa8DO9VATfyUi NAkDn1AJ1oFglY+qcrRlr4/c+HZuzBSNw1XnoFP7bOtT4aefKj99VWY55/tn/FX7 xs2II9BmOHOyewM4fLrHyqIIa4xN6tJ4yWoEVv7vK2lN34DMXgfkbEXaA81pwRmo RyfnrufgKn7ZEbnBcE2nPJkGJFI9Tbq3yu28sqPzkwSGFmQjf/jtXcKWyapbaC96 sWGGzN/2YfeHoLsuukU7Yq38ddFXTQSihejpNM3py4g/srKMUsoYZ1AuAeR0ka7/ 4vyhgHuVX3brF0buDpLqk4/56QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIhCwD72 KnrDcwWFBKb01TYtYhDzMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNjQ1NDE3OTZF QTk0MTFGMEFCREFGREI3NTM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMCcEAgABMCEDBAI9a8gwCwMDAHc7AwQBdzsQMAwDBAB3OxMDBAN3OxAwDQYJ KoZIhvcNAQELBQADggEBAGQBPdPHYl7SCuu0f+tMoI7R9SRGhf6EuGPz84zJ29yl Hj4y3QuLFh3e972gIUfo2p97+crFvEM9iMl+YyJ+iJU+FPxpfQxIZzYFsOGexa2Y OcU2T/Ld547TTud7/f124BRJxUv4TrHNam8f3NPLYzmveJ6eOrp3g6UG2jU3iOGh zChSKgc/RMIinpgXoVCGU0PcMitm/ExHq4iSYs/gtcY3On7RNPk8gaXBPSZ/KPFj iUP8A+UETnAJh7HzeJfbKo7reAKg3npOws5ETdYaL2n4GHvLnQbinDZTLFyaIa/i amDBZdJ4vaBUTWckgq9do9795zyALBMj3qyyLQx7ILc= -----END CERTIFICATE-----Generated at Thu Jan 22 23:34:16 2026 by rpki-client