This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/12D80792792E11F0B9B60F74C4F9AE02.roa File: 12D80792792E11F0B9B60F74C4F9AE02.roa (raw, json) Hash identifier: wm0jq/5UGb8qdnkj701MaBJwLbMqITh1NF1tHTRl0Y4= Subject key identifier: C4:CA:12:2A:95:B8:47:36:6A:97:8F:17:C5:C7:C2:78:BE:7C:8A:DC Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91 Certificate serial: 1A29 Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/12D80792792E11F0B9B60F74C4F9AE02.roa Signing time: Thu 08 Jan 2026 17:13:49 +0000 ROA not before: Thu 08 Jan 2026 17:13:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 20940 IP address blocks: 43.254.120.0/22 maxlen: 22 59.151.128.0/18 maxlen: 18 60.254.128.0/18 maxlen: 18 60.254.143.0/24 maxlen: 24 60.254.148.0/24 maxlen: 24 60.254.173.0/24 maxlen: 24 103.238.148.0/22 maxlen: 22 118.214.0.0/16 maxlen: 16 118.214.1.0/24 maxlen: 24 118.214.167.0/24 maxlen: 24 118.214.171.0/24 maxlen: 24 118.214.178.0/24 maxlen: 24 118.214.181.0/24 maxlen: 24 118.214.185.0/24 maxlen: 24 118.214.186.0/24 maxlen: 24 118.214.187.0/24 maxlen: 24 118.214.188.0/23 maxlen: 23 118.214.190.0/24 maxlen: 24 118.215.0.0/17 maxlen: 17 118.215.128.0/18 maxlen: 18 122.252.32.0/19 maxlen: 19 122.252.128.0/20 maxlen: 20 125.56.128.0/17 maxlen: 17 125.56.184.0/24 maxlen: 24 125.56.185.0/24 maxlen: 24 125.56.186.0/24 maxlen: 24 125.56.201.0/24 maxlen: 24 125.56.205.0/24 maxlen: 24 125.56.218.0/24 maxlen: 24 125.56.219.0/24 maxlen: 24 125.56.222.0/24 maxlen: 24 125.252.192.0/18 maxlen: 18 125.252.224.0/24 maxlen: 24 2405:9600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6697 (0x1a29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91 Validity Not Before: Jan 8 17:13:49 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=695fe5cd-fdd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:c3:b2:ad:6d:01:6c:4d:aa:3e:ab:7a:fd: 29:f2:55:0a:9c:59:a9:73:cc:fc:95:cb:83:83:94: 2f:01:12:42:16:46:80:d8:f0:04:dd:58:26:96:f2: 44:b0:85:51:bc:0d:d2:03:8a:c5:92:9a:74:f6:1d: b8:35:8e:40:68:05:fc:8e:96:76:ab:f7:21:ac:c4: 3b:5c:e8:24:0e:03:87:8b:04:23:2c:e9:fd:2f:ae: e6:87:82:3d:70:ee:3a:67:1f:77:62:5d:76:56:21: 8e:b0:60:fe:cd:49:49:71:67:18:10:62:f8:ae:78: 96:46:54:f6:c9:b1:43:f3:97:4d:4f:3a:f0:93:c8: fa:41:f6:b3:5a:7c:cb:50:a5:eb:d7:4f:1a:60:4a: c7:15:e1:d8:b0:93:27:31:c7:03:ee:5e:9c:13:7b: 37:62:65:12:e7:6d:cc:47:5c:56:dc:aa:43:6d:55: 30:70:87:a8:53:13:2c:a3:dd:d7:74:32:ef:5e:c3: 9f:e4:13:7e:7a:79:33:3d:1c:1e:5a:bc:4b:0d:ff: a6:d4:ff:f9:fa:fb:b3:e8:9a:91:25:36:4b:bc:69: a3:5a:40:b1:2f:3a:94:ff:e4:b0:05:42:85:90:bc: 9d:2e:35:bd:9d:c0:93:00:8d:a1:8b:fc:e7:71:2f: 98:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CA:12:2A:95:B8:47:36:6A:97:8F:17:C5:C7:C2:78:BE:7C:8A:DC X509v3 Authority Key Identifier: keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/12D80792792E11F0B9B60F74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.254.120.0/22 59.151.128.0/18 60.254.128.0/18 103.238.148.0/22 118.214.0.0-118.215.191.255 122.252.32.0/19 122.252.128.0/20 125.56.128.0/17 125.252.192.0/18 IPv6: 2405:9600::/32 Signature Algorithm: sha256WithRSAEncryption b8:af:c9:5a:8d:2a:f4:b9:d5:4d:82:5a:a6:a7:93:ec:e0:90: f7:8f:6c:97:25:aa:1f:a0:f0:98:9f:ac:34:99:e3:fc:45:42: 3d:52:b5:0c:14:e9:35:10:d2:d5:0a:ac:78:48:b5:59:78:aa: 6f:53:ef:3d:c6:e5:27:30:df:a2:f3:ae:41:a6:55:fc:4d:13: 2f:aa:de:f9:73:2d:7e:7b:45:4c:11:f2:fd:ad:ee:41:4a:c1: dd:22:ae:52:20:36:c5:63:b7:3c:34:66:dc:0f:a6:20:34:4f: 71:0f:d3:2b:d1:8c:42:25:6c:1f:6f:74:02:77:74:5b:b5:b7: 84:15:10:8c:99:a9:ea:a0:72:5e:f7:85:3c:bd:ac:49:09:f3: 7d:0e:7c:e7:26:7e:95:58:61:4b:8d:e8:40:53:3b:64:cc:11: 03:05:b1:5a:74:ed:6b:25:c8:54:56:fb:5e:3e:38:42:d6:1d: 37:45:05:14:db:3c:e3:d8:7c:a1:0a:f8:e3:5c:8c:38:b6:1e: 2a:8b:4c:f1:d3:c3:37:88:5a:f0:62:b5:00:71:e1:ab:3b:d4: e2:5d:1c:da:84:55:b9:e6:f7:ce:ee:ad:17:64:44:e9:e7:db: c6:c6:69:32:d4:68:24:93:cf:90:5c:e0:0e:c9:52:12:99:f0: a3:0f:4b:62 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICGikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIxMkFGRUEwNTJD NTQyQTBEOTEwHhcNMjYwMTA4MTcxMzQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVmZTVjZC1mZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pPDsq1tAWxNqj6rev0p8lUKnFmpc8z8lcuDg5QvARJCFkaA2PAE3VgmlvJE sIVRvA3SA4rFkpp09h24NY5AaAX8jpZ2q/chrMQ7XOgkDgOHiwQjLOn9L67mh4I9 cO46Zx93Yl12ViGOsGD+zUlJcWcYEGL4rniWRlT2ybFD85dNTzrwk8j6QfazWnzL UKXr108aYErHFeHYsJMnMccD7l6cE3s3YmUS523MR1xW3KpDbVUwcIeoUxMso93X dDLvXsOf5BN+enkzPRweWrxLDf+m1P/5+vuz6JqRJTZLvGmjWkCxLzqU/+SwBUKF kLydLjW9ncCTAI2hi/zncS+YsQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFMTKEiqV uEc2apePF8XHwni+fIrcMB8GA1UdIwQYMBaAFGFe2ExE5lf3CV4CEq/qBSxUKg2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAzQS8xQjY0NzcxMDky NDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVUbVZfY0pYZ0lTci1vRkxGUXFE WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lWN1lURVRtVl9jSlhnSVNyLW9GTEZRcURaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQwM0EvMUI2NDc3MTA5MjQ2MTFFNzlBQUVCRTEwQzRGOUFFMDIvMTJEODA3OTI3 OTJFMTFGMEI5QjYwRjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZQYIKwYBBQUHAQcBAf8E VjBUMEMEAgABMD0DBAIr/ngDBAY7l4ADBAY8/oADBAJn7pQwCwMDAXbWAwQGdteA AwQFevwgAwQEevyAAwQHfTiAAwQGffzAMA0EAgACMAcDBQAkBZYAMA0GCSqGSIb3 DQEBCwUAA4IBAQC4r8lajSr0udVNglqmp5Ps4JD3j2yXJaofoPCYn6w0meP8RUI9 UrUMFOk1ENLVCqx4SLVZeKpvU+89xuUnMN+i865BplX8TRMvqt75cy1+e0VMEfL9 re5BSsHdIq5SIDbFY7c8NGbcD6YgNE9xD9Mr0YxCJWwfb3QCd3RbtbeEFRCMmanq oHJe94U8vaxJCfN9DnznJn6VWGFLjehAUztkzBEDBbFadO1rJchUVvtePjhC1h03 RQUU2zzj2HyhCvjjXIw4th4qi0zx08M3iFrwYrUAceGrO9TiXRzahFW55vfO7q0X ZETp59vGxmky1Ggkk8+QXOAOyVISmfCjD0ti -----END CERTIFICATE-----Generated at Wed Jan 21 16:09:27 2026 by rpki-client