This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/2E96A63A690A11EF9525E980C4F9AE02.roa File: 2E96A63A690A11EF9525E980C4F9AE02.roa (raw, json) Hash identifier: 7nts6+pQJV9VmGpAqBBviFPnJ/RFXiNWgfkIw83CcY8= Subject key identifier: FF:14:59:DB:2B:CD:6A:E3:1A:EB:3A:0E:F1:AB:9A:AD:32:87:65:A5 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 080B Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/2E96A63A690A11EF9525E980C4F9AE02.roa Signing time: Mon 08 Dec 2025 06:26:08 +0000 ROA not before: Mon 08 Dec 2025 06:26:08 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 45820 IP address blocks: 14.194.0.0/18 maxlen: 24 14.194.64.0/18 maxlen: 24 14.194.128.0/18 maxlen: 24 14.194.208.0/20 maxlen: 24 14.194.240.0/20 maxlen: 24 14.195.0.0/18 maxlen: 24 14.195.64.0/19 maxlen: 24 14.195.96.0/19 maxlen: 24 14.195.128.0/18 maxlen: 24 14.195.192.0/20 maxlen: 24 14.195.208.0/20 maxlen: 24 14.195.240.0/20 maxlen: 24 49.200.0.0/14 maxlen: 14 49.200.0.0/19 maxlen: 24 49.200.40.0/21 maxlen: 24 49.200.48.0/21 maxlen: 24 49.200.56.0/22 maxlen: 24 49.200.60.0/22 maxlen: 24 49.200.96.0/21 maxlen: 24 49.200.104.0/21 maxlen: 24 49.200.112.0/21 maxlen: 24 49.200.120.0/21 maxlen: 24 49.202.208.0/24 maxlen: 24 49.249.0.0/17 maxlen: 24 49.249.128.0/18 maxlen: 24 115.160.217.0/24 maxlen: 24 182.156.0.0/18 maxlen: 22 182.156.0.0/22 maxlen: 24 182.156.4.0/23 maxlen: 24 182.156.8.0/21 maxlen: 24 182.156.16.0/22 maxlen: 24 182.156.22.0/23 maxlen: 24 182.156.24.0/21 maxlen: 23 182.156.24.0/23 maxlen: 24 182.156.28.0/22 maxlen: 24 182.156.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 21:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Dec 8 06:26:08 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69366f7f-ed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:5e:b1:7f:2a:a8:96:60:e3:62:20:55:e0:75: f6:30:c6:50:9a:8f:14:d8:c5:89:3f:c9:07:a5:23: 1b:cf:af:ce:5e:01:e7:19:24:7a:72:ee:50:c5:1b: aa:93:c7:a3:e3:eb:25:c1:f8:6e:01:7a:b6:84:77: cf:e4:a5:e0:72:6f:c6:70:5c:64:09:1b:a2:dd:ab: a9:24:04:b3:9a:61:5e:6e:2b:3d:18:3e:96:bd:66: bf:b6:72:2d:c2:10:9d:f1:2a:f1:a8:b9:c2:8e:2c: 00:b2:5d:cc:6a:9f:8f:e3:bb:02:48:5f:6d:da:3e: fa:f0:79:a5:aa:89:38:c3:95:7e:37:ff:06:27:a5: 8e:8c:b5:0f:82:8b:c1:bd:e5:6a:3b:b2:6f:a0:ae: 41:ef:10:7c:35:9c:4d:94:0a:15:4d:37:30:45:36: ed:6e:68:99:92:ab:39:d2:d9:68:11:91:6b:47:52: f5:ec:04:ee:ca:d8:4d:a6:15:19:24:45:24:d8:f7: 3e:07:66:8a:35:fd:31:49:db:3f:bf:c6:58:47:c1: 4d:eb:a4:24:6f:2c:69:64:cc:a1:53:ab:04:ab:fb: 43:84:1e:da:f3:6c:b0:9b:29:96:62:b1:0a:71:bb: fe:f9:2a:7a:50:37:35:2e:c8:5f:87:18:30:44:d3: dd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:14:59:DB:2B:CD:6A:E3:1A:EB:3A:0E:F1:AB:9A:AD:32:87:65:A5 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/2E96A63A690A11EF9525E980C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.194.0.0-14.194.191.255 14.194.208.0/20 14.194.240.0-14.195.223.255 14.195.240.0/20 49.200.0.0/14 49.249.0.0-49.249.191.255 115.160.217.0/24 182.156.0.0/18 Signature Algorithm: sha256WithRSAEncryption 38:c5:ca:b8:f4:d9:a0:a7:6f:a7:ec:fd:66:b7:be:c8:82:f2: 97:da:bc:2f:bd:b9:fd:4f:a8:ec:ab:26:ab:ee:28:7f:42:87: 22:17:a8:99:cf:b2:4a:14:ec:c2:b8:62:87:ec:1f:09:d4:f5: 61:fd:2a:4d:f6:7d:6e:63:0a:0a:45:b1:71:ca:1f:67:32:9a: a2:cd:15:e4:c8:6f:8c:30:66:a9:d2:e0:87:94:94:06:59:b9: 60:72:65:87:91:fa:72:42:19:f4:7e:63:ce:dd:69:fc:34:3f: 09:33:1c:fa:e9:be:ef:6c:d0:e1:1a:0b:1b:d7:cb:ca:4e:4e: 72:45:9c:ad:e6:31:0b:e1:a4:c0:ca:7a:be:aa:5b:5c:a5:6e: 6c:ea:94:94:d3:57:0e:3a:5b:9b:6f:21:db:ad:d0:0e:05:6d: c0:91:8b:d4:32:a6:e4:42:ce:94:d4:e4:8b:fa:bc:a2:a9:9c: 1a:9a:76:6f:74:1b:1a:f0:8e:8b:c1:a1:e8:6e:42:79:88:36: e7:02:fa:52:d1:13:1b:b9:23:85:df:20:9e:a6:a6:b0:1f:30: 18:52:db:82:5b:f0:14:b1:ef:68:f8:d2:5b:99:ea:00:7f:9a: e9:02:d5:1d:3c:77:cd:44:83:6f:29:74:7f:db:8d:c9:a1:8b: 1a:4a:43:b4 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUxMjA4MDYyNjA4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTM2NmY3Zi1lZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+16xfyqolmDjYiBV4HX2MMZQmo8U2MWJP8kHpSMbz6/OXgHnGSR6cu5QxRuq k8ej4+slwfhuAXq2hHfP5KXgcm/GcFxkCRui3aupJASzmmFebis9GD6WvWa/tnIt whCd8SrxqLnCjiwAsl3Map+P47sCSF9t2j768Hmlqok4w5V+N/8GJ6WOjLUPgovB veVqO7JvoK5B7xB8NZxNlAoVTTcwRTbtbmiZkqs50tloEZFrR1L17ATuythNphUZ JEUk2Pc+B2aKNf0xSds/v8ZYR8FN66QkbyxpZMyhU6sEq/tDhB7a82ywmymWYrEK cbv++Sp6UDc1LshfhxgwRNPdcQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFP8UWdsr zWrjGus6DvGrmq0yh2WlMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvMkU5NkE2M0E2 OTBBMTFFRjk1MjVFOTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXgYIKwYBBQUHAQcBAf8E TzBNMEsEAgABMEUwCwMDAQ7CAwQGDsKAAwQEDsLQMAwDBAQOwvADBAUOw8ADBAQO w/ADAwIxyDALAwMAMfkDBAYx+YADBABzoNkDBAa2nAAwDQYJKoZIhvcNAQELBQAD ggEBADjFyrj02aCnb6fs/Wa3vsiC8pfavC+9uf1PqOyrJqvuKH9ChyIXqJnPskoU 7MK4YofsHwnU9WH9Kk32fW5jCgpFsXHKH2cymqLNFeTIb4wwZqnS4IeUlAZZuWBy ZYeR+nJCGfR+Y87dafw0PwkzHPrpvu9s0OEaCxvXy8pOTnJFnK3mMQvhpMDKer6q W1ylbmzqlJTTVw46W5tvIdut0A4FbcCRi9QypuRCzpTU5Iv6vKKpnBqadm90Gxrw jovBoehuQnmINucC+lLRExu5I4XfIJ6mprAfMBhS24Jb8BSx72j40luZ6gB/mukC 1R08d81Eg28pdH/bjcmhixpKQ7Q= -----END CERTIFICATE-----Generated at Wed Dec 10 02:47:45 2025 by rpki-client