This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/7EFB8A6E885311E6BDE50A80C4F9AE02.roa File: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (raw, json) Hash identifier: k8fdwv5rzTaDtXtBZsqiUkV8XC7b+OcfzE/ub6rKQck= Subject key identifier: 71:52:F1:FB:F9:8F:FB:2F:75:36:63:05:C4:89:C8:34:C7:A0:43:7C Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1F05 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/7EFB8A6E885311E6BDE50A80C4F9AE02.roa Signing time: Fri 14 Nov 2025 16:03:50 +0000 ROA not before: Fri 14 Nov 2025 16:03:50 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24392 IP address blocks: 202.179.64.0/19 maxlen: 19 202.179.64.0/24 maxlen: 24 202.179.65.0/24 maxlen: 24 202.179.66.0/24 maxlen: 24 202.179.67.0/24 maxlen: 24 202.179.68.0/24 maxlen: 24 202.179.69.0/24 maxlen: 24 202.179.70.0/24 maxlen: 24 202.179.71.0/24 maxlen: 24 202.179.72.0/24 maxlen: 24 202.179.73.0/24 maxlen: 24 202.179.74.0/24 maxlen: 24 202.179.75.0/24 maxlen: 24 202.179.76.0/24 maxlen: 24 202.179.77.0/24 maxlen: 24 202.179.78.0/24 maxlen: 24 202.179.79.0/24 maxlen: 24 202.179.80.0/24 maxlen: 24 202.179.81.0/24 maxlen: 24 202.179.82.0/24 maxlen: 24 202.179.83.0/24 maxlen: 24 202.179.84.0/24 maxlen: 24 202.179.85.0/24 maxlen: 24 202.179.86.0/24 maxlen: 24 202.179.87.0/24 maxlen: 24 202.179.88.0/24 maxlen: 24 202.179.89.0/24 maxlen: 24 202.179.90.0/24 maxlen: 24 202.179.91.0/24 maxlen: 24 202.179.92.0/24 maxlen: 24 202.179.93.0/24 maxlen: 24 202.179.94.0/24 maxlen: 24 202.179.95.0/24 maxlen: 24 2407:5c00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7941 (0x1f05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Nov 14 16:03:50 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691752e6-9112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d8:b3:49:57:45:22:88:aa:f8:a9:24:cd:df: 8b:3a:57:a0:c1:0a:8e:e6:45:1c:0a:2b:cb:6f:8d: 99:f9:79:5f:93:90:27:f1:11:3c:66:2e:c0:89:9f: ee:97:45:a1:99:c8:cf:0b:e5:28:dd:85:b1:06:4e: 8d:96:79:c2:c2:12:95:a9:49:16:ed:8b:c2:76:f1: 41:ff:6e:b6:5f:86:0e:9e:a0:25:0d:73:86:d7:e8: aa:62:e7:82:9b:39:03:da:cd:f9:a4:4a:4e:2c:ac: 3b:f7:73:03:cd:6d:7d:88:4e:94:96:9e:f0:4f:10: 5b:d8:c2:43:1c:68:f9:7b:0e:5d:0c:83:92:29:47: 5b:f0:e9:d8:72:1b:69:d6:bd:de:fd:f0:9b:50:c0: f1:b3:52:ec:d8:1c:13:f1:2b:b9:9d:26:91:93:9c: fe:e3:f9:ec:f3:2c:84:2e:c9:9b:1b:00:ef:49:4d: 0f:ca:10:31:7e:75:c7:f4:3e:61:0d:8d:f7:55:cd: 0f:2a:76:2f:f9:d6:f3:95:f9:d1:4e:5e:42:e8:b5: fd:f8:9c:7e:88:a9:2a:fa:1a:95:91:d2:0f:ac:b9: c1:39:61:b8:d0:78:5e:75:9e:39:24:cc:52:85:48: e6:d1:58:0c:1e:3e:58:97:02:39:5f:39:e6:e4:5c: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:52:F1:FB:F9:8F:FB:2F:75:36:63:05:C4:89:C8:34:C7:A0:43:7C X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/7EFB8A6E885311E6BDE50A80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.179.64.0/19 IPv6: 2407:5c00:1::/48 Signature Algorithm: sha256WithRSAEncryption 3f:44:0e:62:a8:7e:e9:d7:da:60:3c:70:e7:51:ea:d1:fe:b9: f5:4b:ab:ee:94:a7:0c:38:ba:d4:59:6f:a7:aa:3a:c7:04:ec: f4:89:68:9a:61:96:33:3d:d3:4a:f9:84:24:fe:7f:98:e9:cf: fa:1c:5c:ec:d0:57:a7:ab:e4:4f:86:f6:27:63:fc:2b:86:d1: b4:e6:d5:89:04:f5:c3:66:cb:13:fa:d3:aa:31:f9:9b:ca:d1: 91:10:3a:61:81:b6:57:e1:8d:14:50:04:83:13:6e:62:91:cc: 70:55:9d:ca:8a:11:6f:89:ae:1a:6e:52:fc:d0:f6:c9:41:ef: c3:3b:d0:89:78:01:88:81:4d:ac:9f:fb:42:da:6b:f1:76:e2: 12:14:40:b0:3d:53:0a:0c:76:70:7d:4c:b5:c0:b6:90:c8:27: cd:7f:71:14:de:4f:7c:e0:77:15:0e:57:ed:e1:1d:7f:05:a3: 85:67:e4:e1:56:44:0f:5b:35:9c:6c:6b:4e:fb:73:c1:75:9f: a7:c5:09:da:27:06:91:38:94:8a:ce:25:81:b1:71:c1:fa:15: e7:ae:2e:9b:96:b5:d5:e2:0d:69:e0:7b:a0:51:58:80:65:66: 5a:0a:50:f6:b9:92:d9:8a:ab:f5:f6:dd:db:0f:82:f3:05:fd: a7:b8:41:c2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICHwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUxMTE0MTYwMzUwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3NTJlNi05MTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+dizSVdFIoiq+Kkkzd+LOlegwQqO5kUcCivLb42Z+Xlfk5An8RE8Zi7AiZ/u l0WhmcjPC+Uo3YWxBk6NlnnCwhKVqUkW7YvCdvFB/262X4YOnqAlDXOG1+iqYueC mzkD2s35pEpOLKw793MDzW19iE6Ulp7wTxBb2MJDHGj5ew5dDIOSKUdb8OnYchtp 1r3e/fCbUMDxs1Ls2BwT8Su5nSaRk5z+4/ns8yyELsmbGwDvSU0PyhAxfnXH9D5h DY33Vc0PKnYv+dbzlfnRTl5C6LX9+Jx+iKkq+hqVkdIPrLnBOWG40HhedZ45JMxS hUjm0VgMHj5YlwI5Xznm5Fy6KwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHFS8fv5 j/svdTZjBcSJyDTHoEN8MB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFFNUYvOEI3OUI2Nzg4ODUxMTFFNkE2OTJERTc4QzRGOUFFMDIvN0VGQjhBNkU4 ODUzMTFFNkJERTUwQTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAXKs0AwDwQCAAIwCQMHACQHXAAAATANBgkqhkiG9w0BAQsF AAOCAQEAP0QOYqh+6dfaYDxw51Hq0f659Uur7pSnDDi61Flvp6o6xwTs9IlommGW Mz3TSvmEJP5/mOnP+hxc7NBXp6vkT4b2J2P8K4bRtObViQT1w2bLE/rTqjH5m8rR kRA6YYG2V+GNFFAEgxNuYpHMcFWdyooRb4muGm5S/ND2yUHvwzvQiXgBiIFNrJ/7 Qtpr8XbiEhRAsD1TCgx2cH1MtcC2kMgnzX9xFN5PfOB3FQ5X7eEdfwWjhWfk4VZE D1s1nGxrTvtzwXWfp8UJ2icGkTiUis4lgbFxwfoV564um5a11eINaeB7oFFYgGVm WgpQ9rmS2Yqr9fbd2w+C8wX9p7hBwg== -----END CERTIFICATE-----Generated at Sun Dec 7 12:43:59 2025 by rpki-client