This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa File: B8D1EFFECFF111F085D0CF76C4F9AE02.roa (raw, json) Hash identifier: OKHo5PlaRkuq1valJ2KLlI42leF/3R3vRaJtQrRDfSg= Subject key identifier: 0E:83:45:29:34:0D:BE:BA:53:CC:0D:75:51:60:2E:E0:4A:4F:4F:11 Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0BF3 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa Signing time: Fri 09 Jan 2026 03:27:47 +0000 ROA not before: Fri 09 Jan 2026 03:27:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132203 IP address blocks: 43.128.222.0/23 maxlen: 23 43.128.224.0/19 maxlen: 19 43.128.241.0/24 maxlen: 24 43.129.32.0/20 maxlen: 20 43.129.48.0/20 maxlen: 20 43.130.0.0/17 maxlen: 24 43.130.128.0/18 maxlen: 24 43.130.224.0/19 maxlen: 19 43.131.0.0/18 maxlen: 24 43.131.224.0/19 maxlen: 24 43.132.12.0/22 maxlen: 22 43.132.16.0/22 maxlen: 22 43.132.28.0/22 maxlen: 22 43.132.32.0/22 maxlen: 22 43.132.40.0/22 maxlen: 22 43.132.52.0/22 maxlen: 22 43.132.68.0/24 maxlen: 24 43.132.96.0/19 maxlen: 24 43.132.128.0/17 maxlen: 24 43.133.0.0/19 maxlen: 19 43.133.128.0/20 maxlen: 20 43.133.144.0/20 maxlen: 20 43.133.160.0/19 maxlen: 19 43.133.192.0/19 maxlen: 19 43.134.0.0/18 maxlen: 18 43.134.64.0/18 maxlen: 18 43.134.128.0/18 maxlen: 18 43.134.138.0/24 maxlen: 24 43.134.139.0/24 maxlen: 24 43.135.58.0/24 maxlen: 24 43.135.187.0/24 maxlen: 24 43.135.192.0/19 maxlen: 19 43.135.221.0/24 maxlen: 24 43.152.74.0/23 maxlen: 23 43.152.76.0/22 maxlen: 22 43.152.80.0/22 maxlen: 22 43.152.92.0/23 maxlen: 23 43.152.96.0/19 maxlen: 24 43.152.192.0/19 maxlen: 19 43.152.224.0/19 maxlen: 19 43.153.0.0/18 maxlen: 18 43.153.64.0/18 maxlen: 18 43.153.128.0/18 maxlen: 18 43.153.164.0/24 maxlen: 24 43.153.187.0/24 maxlen: 24 43.153.192.0/18 maxlen: 18 43.153.250.0/23 maxlen: 23 43.154.0.0/18 maxlen: 18 43.154.64.0/18 maxlen: 18 43.154.128.0/18 maxlen: 18 43.154.192.0/18 maxlen: 18 43.155.0.0/17 maxlen: 18 43.155.127.0/24 maxlen: 24 43.155.128.0/17 maxlen: 18 43.155.149.0/24 maxlen: 24 43.156.0.0/18 maxlen: 18 43.156.64.0/18 maxlen: 18 43.156.128.0/18 maxlen: 18 43.156.192.0/18 maxlen: 18 43.156.252.0/24 maxlen: 24 43.156.254.0/24 maxlen: 24 43.157.0.0/17 maxlen: 24 43.157.128.0/18 maxlen: 24 43.157.192.0/18 maxlen: 24 43.158.0.0/16 maxlen: 16 43.158.0.0/17 maxlen: 24 43.158.128.0/18 maxlen: 24 43.158.192.0/18 maxlen: 24 43.159.0.0/16 maxlen: 16 43.159.0.0/20 maxlen: 24 43.159.16.0/20 maxlen: 24 43.159.32.0/19 maxlen: 24 43.159.76.0/24 maxlen: 24 43.159.128.0/18 maxlen: 24 43.159.192.0/18 maxlen: 24 43.160.0.0/16 maxlen: 24 43.161.0.0/17 maxlen: 24 43.161.128.0/17 maxlen: 24 43.162.0.0/17 maxlen: 24 43.162.128.0/17 maxlen: 24 43.163.0.0/16 maxlen: 16 43.163.0.0/17 maxlen: 17 43.163.0.0/18 maxlen: 24 43.163.64.0/18 maxlen: 24 43.163.128.0/18 maxlen: 18 43.163.140.0/24 maxlen: 24 43.163.192.0/18 maxlen: 24 43.164.0.0/16 maxlen: 24 43.165.0.0/16 maxlen: 24 43.166.0.0/16 maxlen: 24 43.167.0.0/16 maxlen: 24 43.172.0.0/16 maxlen: 24 43.173.0.0/16 maxlen: 24 101.32.94.0/23 maxlen: 23 101.32.96.0/20 maxlen: 20 101.32.102.0/23 maxlen: 23 101.32.104.0/21 maxlen: 21 101.32.140.0/24 maxlen: 24 101.33.4.0/23 maxlen: 23 101.33.17.0/24 maxlen: 24 101.33.18.0/23 maxlen: 23 101.33.26.0/23 maxlen: 23 101.33.30.0/23 maxlen: 23 101.33.41.0/24 maxlen: 24 101.33.52.0/22 maxlen: 22 101.33.114.0/23 maxlen: 24 124.156.208.0/20 maxlen: 20 124.156.224.0/20 maxlen: 20 150.109.90.0/24 maxlen: 24 150.109.91.0/24 maxlen: 24 150.109.140.0/22 maxlen: 22 150.109.192.0/20 maxlen: 20 150.109.192.0/21 maxlen: 21 150.109.192.0/23 maxlen: 23 150.109.200.0/22 maxlen: 22 150.109.204.0/23 maxlen: 23 150.109.206.0/24 maxlen: 24 150.109.207.0/24 maxlen: 24 240d:c000::/24 maxlen: 32 240d:c000:1000::/36 maxlen: 36 240d:c000:2000::/36 maxlen: 36 240d:c000:3000::/36 maxlen: 36 240d:c000:6000::/36 maxlen: 36 240d:c000:6000::/44 maxlen: 48 240d:c000:7000::/44 maxlen: 44 240d:c000:f000::/36 maxlen: 36 240d:c000:f000::/44 maxlen: 44 240d:c000:f010::/44 maxlen: 44 240d:c000:f020::/44 maxlen: 44 240d:c000:f030::/44 maxlen: 44 240d:c000:f040::/44 maxlen: 44 240d:c000:f050::/44 maxlen: 44 240d:c000:f060::/44 maxlen: 44 240d:c000:f070::/44 maxlen: 44 240d:c000:f0c0::/44 maxlen: 44 240d:c000:f0d0::/44 maxlen: 44 240d:c000:f0e0::/44 maxlen: 44 240d:c000:f0f0::/44 maxlen: 44 240d:c000:f1f0::/44 maxlen: 44 240d:c010::/48 maxlen: 48 240d:c010::/56 maxlen: 56 240d:c010:0:100::/56 maxlen: 56 240d:c010:10::/48 maxlen: 48 240d:c010:11::/48 maxlen: 48 240d:c010:12::/48 maxlen: 48 240d:c010:16::/48 maxlen: 48 240d:c010:17::/48 maxlen: 48 240d:c010:20::/44 maxlen: 44 240d:c010:20::/56 maxlen: 56 240d:c010:20:100::/56 maxlen: 56 240d:c010:20:200::/56 maxlen: 56 240d:c010:30::/56 maxlen: 56 240d:c010:30:100::/56 maxlen: 56 240d:c010:50::/48 maxlen: 48 240d:c010:57::/48 maxlen: 48 240d:c010:58::/47 maxlen: 48 240d:c010:5c::/46 maxlen: 48 240d:c010:66::/47 maxlen: 48 240d:c010:68::/48 maxlen: 48 240d:c010:6c::/47 maxlen: 48 240d:c010:6e::/48 maxlen: 48 240d:c040::/44 maxlen: 44 240d:c040:10::/44 maxlen: 44 240d:c040:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 20:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Jan 9 03:27:47 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=696075b3-d596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:3c:c7:72:f0:ab:12:f6:fe:d2:36:74:e3: 60:66:4f:7b:0e:21:ab:87:d7:5d:13:00:0c:2b:22: f8:3d:d0:54:67:2f:4b:a2:30:c0:ae:8b:40:d4:b4: 1b:37:a4:95:bf:32:b0:55:e8:1e:89:70:7c:50:3b: dd:99:2e:23:6e:22:a9:f0:23:43:48:31:9b:d3:c2: ca:7b:7f:cf:27:4f:e4:be:e4:8c:6b:f9:6a:d5:6e: 8c:55:5f:a3:bb:07:ec:68:f9:d6:60:fa:f7:15:75: ff:b6:7c:4f:66:3d:75:1b:c0:3e:4b:6f:e2:d6:6c: 39:e1:23:e2:77:6e:98:90:a9:42:62:2d:f7:60:b6: 34:8f:7a:71:27:f2:89:99:7a:73:6d:33:7a:16:cb: 9a:c8:4c:f9:1b:1e:ac:14:28:dc:43:be:99:be:44: 32:64:13:c7:3f:48:be:df:05:dd:d6:13:b5:b5:14: 4b:f2:0e:69:0f:b7:5c:41:bf:82:80:34:1e:25:e6: 32:4c:ee:53:b1:a9:f4:e6:bd:ce:e5:c9:bb:60:be: 11:6a:28:54:b5:6b:8a:9c:9a:11:27:3b:9f:1c:4c: 37:8c:c1:c7:f1:b1:e4:2c:ae:08:74:40:3c:b8:8e: c0:d4:01:e6:77:3a:36:7e:46:63:6c:e6:3f:7b:01: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:83:45:29:34:0D:BE:BA:53:CC:0D:75:51:60:2E:E0:4A:4F:4F:11 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.128.222.0-43.128.255.255 43.129.32.0/19 43.130.0.0-43.130.191.255 43.130.224.0-43.131.63.255 43.131.224.0/19 43.132.12.0-43.132.19.255 43.132.28.0-43.132.35.255 43.132.40.0/22 43.132.52.0/22 43.132.68.0/24 43.132.96.0-43.133.31.255 43.133.128.0-43.133.223.255 43.134.0.0-43.134.191.255 43.135.58.0/24 43.135.187.0/24 43.135.192.0/19 43.152.74.0-43.152.83.255 43.152.92.0/23 43.152.96.0/19 43.152.192.0-43.167.255.255 43.172.0.0/15 101.32.94.0-101.32.111.255 101.32.140.0/24 101.33.4.0/23 101.33.17.0-101.33.19.255 101.33.26.0/23 101.33.30.0/23 101.33.41.0/24 101.33.52.0/22 101.33.114.0/23 124.156.208.0-124.156.239.255 150.109.90.0/23 150.109.140.0/22 150.109.192.0/20 IPv6: 240d:c000::/24 Signature Algorithm: sha256WithRSAEncryption 85:15:10:cc:43:09:fc:a7:77:f5:ba:d7:b4:10:2b:b6:e8:b7: cb:f5:ae:7c:01:d6:40:e8:29:81:de:32:e8:98:c7:b9:68:f2: 8f:e9:93:b2:aa:e5:f0:1c:f7:20:9a:85:21:a0:2f:38:32:35: 4d:68:5e:d1:c8:3a:64:5d:d4:5a:1a:72:f5:51:d2:b6:cc:15: a3:ae:01:cf:3b:b9:87:02:c3:ea:82:fa:69:91:de:7e:80:a7: 22:76:aa:b0:b6:a1:bc:20:24:6c:40:75:22:04:4a:2a:55:83: 7d:73:f2:02:06:51:22:10:e7:b1:1c:da:b1:e9:e4:4f:e6:36: d2:cf:b8:52:88:96:89:e5:73:84:99:35:75:7d:0f:59:14:8f: 3d:28:9a:25:50:c0:3e:0a:02:47:0a:89:9b:1b:ce:ce:98:b0: 03:f2:4d:ab:e8:f5:2f:11:f6:5e:f0:0f:c5:3e:07:bb:b4:f5: ae:7a:4c:84:14:77:87:0c:45:3f:74:8c:fa:87:b7:d9:57:67: f0:e3:bf:16:06:e3:b7:69:5e:4a:37:4c:dc:fc:c1:47:50:63: 9d:43:67:f0:5e:f3:83:74:d3:24:11:9e:62:62:e3:e7:b9:96: 30:c8:79:72:be:59:c5:cb:e4:cd:66:1b:d8:4c:12:3b:dd:86: 4a:3c:05:11 -----BEGIN CERTIFICATE----- MIIGsjCCBZqgAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjYwMTA5MDMyNzQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTYwNzViMy1kNTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDM8x3LwqxL2/tI2dONgZk97DiGrh9ddEwAMKyL4PdBUZy9LojDArotA1LQb N6SVvzKwVegeiXB8UDvdmS4jbiKp8CNDSDGb08LKe3/PJ0/kvuSMa/lq1W6MVV+j uwfsaPnWYPr3FXX/tnxPZj11G8A+S2/i1mw54SPid26YkKlCYi33YLY0j3pxJ/KJ mXpzbTN6FsuayEz5Gx6sFCjcQ76ZvkQyZBPHP0i+3wXd1hO1tRRL8g5pD7dcQb+C gDQeJeYyTO5Tsan05r3O5cm7YL4RaihUtWuKnJoRJzufHEw3jMHH8bHkLK4IdEA8 uI7A1AHmdzo2fkZjbOY/ewECNwIDAQABo4ID1jCCA9IwHQYDVR0OBBYEFA6DRSk0 Db66U8wNdVFgLuBKT08RMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvQjhEMUVGRkVD RkYxMTFGMDg1RDBDRjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFeBggrBgEFBQcBBwEB /wSCAU0wggFJMIIBNwQCAAEwggEvMAsDBAErgN4DAwArgAMEBSuBIDALAwMBK4ID BAYrgoAwDAMEBSuC4AMEBiuDAAMEBSuD4DAMAwQCK4QMAwQCK4QQMAwDBAIrhBwD BAIrhCADBAIrhCgDBAIrhDQDBAArhEQwDAMEBSuEYAMEBSuFADAMAwQHK4WAAwQF K4XAMAsDAwErhgMEBiuGgAMEACuHOgMEACuHuwMEBSuHwDAMAwQBK5hKAwQCK5hQ AwQBK5hcAwQFK5hgMAsDBAYrmMADAwMroAMDASusMAwDBAFlIF4DBARlIGADBABl IIwDBAFlIQQwDAMEAGUhEQMEAmUhEAMEAWUhGgMEAWUhHgMEAGUhKQMEAmUhNAME AWUhcjAMAwQEfJzQAwQEfJzgAwQBlm1aAwQClm2MAwQElm3AMAwEAgACMAYDBAAk DcAwDQYJKoZIhvcNAQELBQADggEBAIUVEMxDCfynd/W617QQK7bot8v1rnwB1kDo KYHeMuiYx7lo8o/pk7Kq5fAc9yCahSGgLzgyNU1oXtHIOmRd1FoacvVR0rbMFaOu Ac87uYcCw+qC+mmR3n6ApyJ2qrC2obwgJGxAdSIESipVg31z8gIGUSIQ57Ec2rHp 5E/mNtLPuFKIlonlc4SZNXV9D1kUjz0omiVQwD4KAkcKiZsbzs6YsAPyTavo9S8R 9l7wD8U+B7u09a56TIQUd4cMRT90jPqHt9lXZ/DjvxYG47dpXko3TNz8wUdQY51D Z/Be84N00yQRnmJi4+e5ljDIeXK+WcXL5M1mG9hMEjvdhko8BRE= -----END CERTIFICATE-----Generated at Tue Jan 20 14:56:10 2026 by rpki-client