This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33AC4564C51411F0A6CFEE09C4F9AE02.roa File: 33AC4564C51411F0A6CFEE09C4F9AE02.roa (raw, json) Hash identifier: 5S9oCbJXv8Ts/zOaJXviT/2BQlVrW3BVkvIvBgQmO80= Subject key identifier: 16:7E:E0:8D:B6:7E:70:12:90:E7:A9:2A:5E:A6:21:6D:F6:14:AC:F9 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C887 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33AC4564C51411F0A6CFEE09C4F9AE02.roa Signing time: Fri 28 Nov 2025 11:27:38 +0000 ROA not before: Fri 28 Nov 2025 11:27:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132116 IP address blocks: 27.123.240.0/22 maxlen: 24 43.247.40.0/24 maxlen: 24 43.247.41.0/24 maxlen: 24 43.247.42.0/24 maxlen: 24 43.247.43.0/24 maxlen: 24 43.248.152.0/22 maxlen: 24 43.248.240.0/24 maxlen: 24 43.248.241.0/24 maxlen: 24 43.248.242.0/24 maxlen: 24 43.248.243.0/24 maxlen: 24 45.248.0.0/22 maxlen: 24 103.16.28.0/24 maxlen: 24 103.16.29.0/24 maxlen: 24 103.16.30.0/24 maxlen: 24 103.16.31.0/24 maxlen: 24 103.28.252.0/22 maxlen: 24 103.40.200.0/22 maxlen: 24 103.68.20.0/24 maxlen: 24 103.68.22.0/24 maxlen: 24 103.68.23.0/24 maxlen: 24 103.69.24.0/24 maxlen: 24 103.69.25.0/24 maxlen: 24 103.69.26.0/24 maxlen: 24 103.69.27.0/24 maxlen: 24 103.69.244.0/22 maxlen: 24 103.70.80.0/24 maxlen: 24 103.70.81.0/24 maxlen: 24 103.70.82.0/24 maxlen: 24 103.70.83.0/24 maxlen: 24 103.91.73.0/24 maxlen: 24 103.91.74.0/24 maxlen: 24 103.94.83.0/24 maxlen: 24 103.100.4.0/22 maxlen: 24 103.102.147.0/24 maxlen: 24 103.103.55.0/24 maxlen: 24 103.105.96.0/24 maxlen: 24 103.124.120.0/23 maxlen: 24 103.153.12.0/24 maxlen: 24 103.164.141.0/24 maxlen: 24 103.165.88.0/23 maxlen: 24 103.165.102.0/23 maxlen: 24 103.167.154.0/23 maxlen: 24 103.167.182.0/23 maxlen: 24 103.167.224.0/23 maxlen: 24 103.167.238.0/23 maxlen: 24 103.168.60.0/23 maxlen: 24 103.169.242.0/24 maxlen: 24 103.169.243.0/24 maxlen: 24 103.170.38.0/23 maxlen: 24 103.170.84.0/23 maxlen: 24 103.183.86.0/23 maxlen: 24 103.190.8.0/24 maxlen: 24 103.190.9.0/24 maxlen: 24 103.192.64.0/24 maxlen: 24 103.192.66.0/24 maxlen: 24 103.192.67.0/24 maxlen: 24 103.198.172.0/22 maxlen: 24 103.216.140.0/24 maxlen: 24 103.216.142.0/24 maxlen: 24 103.216.143.0/24 maxlen: 24 103.224.144.0/22 maxlen: 24 119.42.56.0/22 maxlen: 24 163.53.84.0/22 maxlen: 24 180.149.225.0/24 maxlen: 24 180.149.226.0/24 maxlen: 24 180.149.227.0/24 maxlen: 24 2001:df1:d240::/48 maxlen: 48 2001:df3:6ec0::/48 maxlen: 48 2405:e100::/48 maxlen: 48 2405:e100:1::/48 maxlen: 48 2405:e100:2::/48 maxlen: 48 2405:e100:3::/48 maxlen: 48 2405:e100:9::/48 maxlen: 48 2405:e100:d::/48 maxlen: 48 2405:e100:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51335 (0xc887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 28 11:27:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6929872a-ac85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f4:0a:33:88:b1:6d:f9:89:e3:ae:11:fa:c1: 09:06:3e:08:f3:d1:9e:63:e4:40:8d:e5:48:ad:a5: 15:6c:d3:54:11:4a:a0:eb:1a:d7:64:43:57:a3:32: 3a:58:0e:cf:a3:ab:a0:90:da:19:43:b7:ac:88:af: 7f:a9:cd:5c:3b:76:55:49:20:11:46:a3:f4:f6:41: eb:67:17:97:9d:f6:fb:83:46:5e:b7:3c:45:64:d1: 4a:64:f2:0a:cc:a8:fb:5b:f4:ae:36:fa:03:60:b5: 01:ae:b5:98:35:8a:3c:da:7e:e9:80:68:ee:22:23: c1:08:4f:4d:8f:f2:5a:cd:3b:72:e8:f6:d0:28:a8: 59:41:4b:cd:98:84:e6:8e:14:33:a6:86:f3:f6:aa: 32:b8:a4:6d:e8:e1:71:d6:1d:d9:98:2e:02:bd:71: 6d:68:63:fd:c3:5c:fe:bc:46:f9:25:a7:6f:92:9d: 97:f0:bc:59:ee:89:07:ec:ec:c6:20:06:a1:35:ed: ac:10:e8:56:37:e6:43:b1:3e:39:6c:5d:a9:e8:b2: 86:35:17:03:b6:49:f7:9b:a6:34:b1:52:30:af:3c: ba:82:62:ca:bd:5a:01:fd:df:16:fd:27:74:31:f4: b0:29:d9:86:cd:cd:5a:d1:7e:de:05:90:21:38:ce: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7E:E0:8D:B6:7E:70:12:90:E7:A9:2A:5E:A6:21:6D:F6:14:AC:F9 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/33AC4564C51411F0A6CFEE09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.240.0/22 43.247.40.0/22 43.248.152.0/22 43.248.240.0/22 45.248.0.0/22 103.16.28.0/22 103.28.252.0/22 103.40.200.0/22 103.68.20.0/24 103.68.22.0/23 103.69.24.0/22 103.69.244.0/22 103.70.80.0/22 103.91.73.0-103.91.74.255 103.94.83.0/24 103.100.4.0/22 103.102.147.0/24 103.103.55.0/24 103.105.96.0/24 103.124.120.0/23 103.153.12.0/24 103.164.141.0/24 103.165.88.0/23 103.165.102.0/23 103.167.154.0/23 103.167.182.0/23 103.167.224.0/23 103.167.238.0/23 103.168.60.0/23 103.169.242.0/23 103.170.38.0/23 103.170.84.0/23 103.183.86.0/23 103.190.8.0/23 103.192.64.0/24 103.192.66.0/23 103.198.172.0/22 103.216.140.0/24 103.216.142.0/23 103.224.144.0/22 119.42.56.0/22 163.53.84.0/22 180.149.225.0-180.149.227.255 IPv6: 2001:df1:d240::/48 2001:df3:6ec0::/48 2405:e100::/46 2405:e100:9::/48 2405:e100:d::-2405:e100:e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a7:79:d6:eb:77:c4:c8:07:d6:6f:14:30:af:44:cf:ca:b9:24: 27:0b:16:4b:9c:ee:5d:df:c7:8f:02:00:5f:ac:88:b2:a5:ea: b8:a9:8b:2d:05:09:a1:ca:06:e7:ab:16:fd:04:b9:dc:97:4c: 96:92:75:a9:06:0d:ab:a5:89:95:91:fb:ca:ae:3a:54:22:0c: f7:b1:c5:69:d4:ca:5a:46:53:5d:d4:96:2c:3a:19:41:6c:f0: eb:2e:fe:15:82:fd:52:23:cd:a2:67:de:33:d9:8c:fa:95:04: bb:3a:ed:85:b7:33:72:87:4c:df:70:4d:51:cf:d1:9f:a9:ad: ac:59:5d:bb:d8:ff:b3:f4:4c:69:ca:d4:11:a2:f0:43:1f:0b: 3a:a0:d0:87:10:9f:4e:eb:6c:c5:d9:5f:32:45:25:6d:78:d9: 83:5e:5a:ad:18:0c:4c:ce:da:f4:7f:ad:1e:b4:81:1f:17:06: 3d:db:6f:b2:4d:ff:b3:0f:c9:22:ac:e0:fa:28:5c:4f:d8:36: 3f:7c:c9:49:e6:61:67:b3:7f:8c:f0:61:a4:34:8a:52:cb:9b: cf:22:c1:e0:27:4a:27:e5:0b:04:86:10:56:ab:a0:fb:6f:b8: a2:0d:12:e4:e4:bc:d6:9e:e5:17:a6:15:24:fa:55:3a:48:64: 74:8f:b4:36 -----BEGIN CERTIFICATE----- MIIGyDCCBbCgAwIBAgIDAMiHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTEyODExMjczOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjkyOTg3MmEtYWM4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN30CjOIsW35ieOuEfrBCQY+CPPRnmPkQI3lSK2lFWzTVBFKoOsa12RDV6My OlgOz6OroJDaGUO3rIivf6nNXDt2VUkgEUaj9PZB62cXl532+4NGXrc8RWTRSmTy Csyo+1v0rjb6A2C1Aa61mDWKPNp+6YBo7iIjwQhPTY/yWs07cuj20CioWUFLzZiE 5o4UM6aG8/aqMrikbejhcdYd2ZguAr1xbWhj/cNc/rxG+SWnb5Kdl/C8We6JB+zs xiAGoTXtrBDoVjfmQ7E+OWxdqeiyhjUXA7ZJ95umNLFSMK88uoJiyr1aAf3fFv0n dDH0sCnZhs3NWtF+3gWQITjO7dsCAwEAAaOCA+swggPnMB0GA1UdDgQWBBQWfuCN tn5wEpDnqSpepiFt9hSs+TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMzQUM0NTY0 QzUxNDExRjBBNkNGRUUwOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBcwYIKwYBBQUHAQcB Af8EggFiMIIBXjCCARoEAgABMIIBEgMEAht78AMEAiv3KAMEAiv4mAMEAiv48AME Ai34AAMEAmcQHAMEAmcc/AMEAmcoyAMEAGdEFAMEAWdEFgMEAmdFGAMEAmdF9AME AmdGUDAMAwQAZ1tJAwQAZ1tKAwQAZ15TAwQCZ2QEAwQAZ2aTAwQAZ2c3AwQAZ2lg AwQBZ3x4AwQAZ5kMAwQAZ6SNAwQBZ6VYAwQBZ6VmAwQBZ6eaAwQBZ6e2AwQBZ6fg AwQBZ6fuAwQBZ6g8AwQBZ6nyAwQBZ6omAwQBZ6pUAwQBZ7dWAwQBZ74IAwQAZ8BA AwQBZ8BCAwQCZ8asAwQAZ9iMAwQBZ9iOAwQCZ+CQAwQCdyo4AwQCozVUMAwDBAC0 leEDBAK0leAwPgQCAAIwOAMHACABDfHSQAMHACABDfNuwAMHAiQF4QAAAAMHACQF 4QAACTASAwcAJAXhAAANAwcAJAXhAAAOMA0GCSqGSIb3DQEBCwUAA4IBAQCnedbr d8TIB9ZvFDCvRM/KuSQnCxZLnO5d38ePAgBfrIiypeq4qYstBQmhygbnqxb9BLnc l0yWknWpBg2rpYmVkfvKrjpUIgz3scVp1MpaRlNd1JYsOhlBbPDrLv4Vgv1SI82i Z94z2Yz6lQS7Ou2FtzNyh0zfcE1Rz9Gfqa2sWV272P+z9ExpytQRovBDHws6oNCH EJ9O62zF2V8yRSVteNmDXlqtGAxMztr0f60etIEfFwY922+yTf+zD8kirOD6KFxP 2DY/fMlJ5mFns3+M8GGkNIpSy5vPIsHgJ0on5QsEhhBWq6D7b7iiDRLk5LzWnuUX phUk+lU6SGR0j7Q2 -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:24 2025 by rpki-client