This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49F4284AED4711F0BB4F794E4F6F56BC.roa File: 49F4284AED4711F0BB4F794E4F6F56BC.roa (raw, json) Hash identifier: 5ikiAD3mX5dMOByg8+ELcePfGr34eHKd1jLrp1HPwrU= Subject key identifier: 0B:D5:0A:83:C9:0B:6C:D1:88:4E:D5:12:EA:BA:A7:A8:17:E8:49:D3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CD1A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49F4284AED4711F0BB4F794E4F6F56BC.roa Signing time: Fri 09 Jan 2026 10:38:09 +0000 ROA not before: Fri 09 Jan 2026 10:38:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24186 IP address blocks: 27.0.216.0/22 maxlen: 22 27.0.216.0/24 maxlen: 24 27.0.217.0/24 maxlen: 24 27.0.218.0/24 maxlen: 24 27.0.219.0/24 maxlen: 24 27.0.220.0/22 maxlen: 22 27.0.220.0/24 maxlen: 24 27.0.221.0/24 maxlen: 24 27.0.222.0/24 maxlen: 24 27.0.223.0/24 maxlen: 24 27.0.244.0/22 maxlen: 22 27.0.244.0/24 maxlen: 24 27.0.245.0/24 maxlen: 24 27.0.246.0/24 maxlen: 24 27.0.247.0/24 maxlen: 24 27.0.248.0/22 maxlen: 22 27.0.248.0/24 maxlen: 24 27.0.249.0/24 maxlen: 24 27.0.250.0/24 maxlen: 24 27.0.251.0/24 maxlen: 24 27.111.72.0/22 maxlen: 24 27.112.120.0/22 maxlen: 24 27.116.40.0/22 maxlen: 24 27.122.60.0/22 maxlen: 24 36.255.4.0/22 maxlen: 22 36.255.4.0/24 maxlen: 24 36.255.5.0/24 maxlen: 24 36.255.6.0/24 maxlen: 24 36.255.7.0/24 maxlen: 24 36.255.12.0/22 maxlen: 24 36.255.16.0/22 maxlen: 24 36.255.20.0/22 maxlen: 24 45.115.88.0/22 maxlen: 24 45.121.0.0/22 maxlen: 24 61.14.230.0/24 maxlen: 24 103.15.252.0/22 maxlen: 24 103.28.244.0/22 maxlen: 24 103.30.64.0/22 maxlen: 24 103.30.116.0/22 maxlen: 24 103.30.176.0/22 maxlen: 24 103.55.72.0/22 maxlen: 24 103.61.72.0/22 maxlen: 24 103.66.72.0/22 maxlen: 24 103.74.108.0/22 maxlen: 24 103.76.208.0/22 maxlen: 22 103.76.208.0/24 maxlen: 24 103.76.209.0/24 maxlen: 24 103.76.210.0/24 maxlen: 24 103.76.211.0/24 maxlen: 24 103.82.80.0/22 maxlen: 24 103.87.100.0/24 maxlen: 24 103.197.112.0/22 maxlen: 24 103.199.180.0/22 maxlen: 24 103.199.188.0/22 maxlen: 24 103.199.200.0/22 maxlen: 24 103.199.204.0/22 maxlen: 24 103.199.208.0/22 maxlen: 24 103.199.212.0/22 maxlen: 24 103.200.84.0/22 maxlen: 24 103.201.134.0/23 maxlen: 24 103.203.72.0/22 maxlen: 24 103.206.144.0/22 maxlen: 22 103.206.144.0/24 maxlen: 24 103.206.145.0/24 maxlen: 24 103.206.146.0/24 maxlen: 24 103.206.147.0/24 maxlen: 24 103.207.124.0/22 maxlen: 22 103.207.124.0/24 maxlen: 24 103.207.125.0/24 maxlen: 24 103.207.126.0/24 maxlen: 24 103.207.127.0/24 maxlen: 24 103.207.224.0/22 maxlen: 24 103.208.104.0/22 maxlen: 22 103.208.104.0/24 maxlen: 24 103.208.105.0/24 maxlen: 24 103.208.106.0/24 maxlen: 24 103.208.107.0/24 maxlen: 24 103.208.108.0/24 maxlen: 24 103.208.109.0/24 maxlen: 24 103.208.110.0/24 maxlen: 24 103.208.111.0/24 maxlen: 24 103.208.144.0/22 maxlen: 22 103.208.144.0/24 maxlen: 24 103.208.145.0/24 maxlen: 24 103.208.146.0/24 maxlen: 24 103.208.147.0/24 maxlen: 24 103.208.156.0/22 maxlen: 22 103.208.156.0/24 maxlen: 24 103.208.157.0/24 maxlen: 24 103.208.158.0/24 maxlen: 24 103.208.159.0/24 maxlen: 24 103.208.172.0/22 maxlen: 24 103.208.228.0/22 maxlen: 24 103.208.232.0/22 maxlen: 24 103.208.236.0/22 maxlen: 22 103.208.236.0/24 maxlen: 24 103.208.237.0/24 maxlen: 24 103.208.238.0/24 maxlen: 24 103.208.239.0/24 maxlen: 24 103.208.240.0/22 maxlen: 24 103.210.88.0/22 maxlen: 24 103.210.92.0/22 maxlen: 24 103.210.100.0/22 maxlen: 24 103.215.240.0/24 maxlen: 24 103.229.0.0/24 maxlen: 24 103.246.40.0/22 maxlen: 24 103.246.192.0/22 maxlen: 24 103.247.4.0/22 maxlen: 24 103.247.52.0/22 maxlen: 24 106.0.40.0/22 maxlen: 22 106.0.40.0/24 maxlen: 24 106.0.41.0/24 maxlen: 24 106.0.42.0/24 maxlen: 24 106.0.43.0/24 maxlen: 24 112.133.192.0/18 maxlen: 24 120.138.12.0/22 maxlen: 24 121.46.92.0/22 maxlen: 22 121.46.92.0/24 maxlen: 24 121.46.93.0/24 maxlen: 24 121.46.94.0/24 maxlen: 24 121.46.95.0/24 maxlen: 24 122.252.224.0/19 maxlen: 24 137.59.92.0/22 maxlen: 24 137.59.156.0/22 maxlen: 22 137.59.156.0/24 maxlen: 24 137.59.157.0/24 maxlen: 24 137.59.158.0/24 maxlen: 24 137.59.159.0/24 maxlen: 24 137.59.164.0/22 maxlen: 22 137.59.164.0/24 maxlen: 24 137.59.165.0/24 maxlen: 24 137.59.166.0/24 maxlen: 24 137.59.167.0/24 maxlen: 24 137.59.176.0/22 maxlen: 22 137.59.176.0/24 maxlen: 24 137.59.177.0/24 maxlen: 24 137.59.178.0/24 maxlen: 24 137.59.179.0/24 maxlen: 24 139.5.0.0/22 maxlen: 24 139.5.4.0/22 maxlen: 24 139.5.8.0/22 maxlen: 24 139.5.12.0/22 maxlen: 22 139.5.12.0/24 maxlen: 24 139.5.13.0/24 maxlen: 24 139.5.14.0/24 maxlen: 24 139.5.15.0/24 maxlen: 24 175.111.188.0/22 maxlen: 22 175.111.188.0/24 maxlen: 24 175.111.189.0/24 maxlen: 24 175.111.190.0/24 maxlen: 24 175.111.191.0/24 maxlen: 24 180.94.32.0/22 maxlen: 24 202.21.40.0/22 maxlen: 24 202.21.44.0/22 maxlen: 24 202.43.120.0/22 maxlen: 24 202.140.128.0/22 maxlen: 24 202.141.0.0/17 maxlen: 24 202.148.56.0/22 maxlen: 24 202.168.84.0/22 maxlen: 24 202.170.200.0/22 maxlen: 24 202.170.204.0/22 maxlen: 24 202.176.0.0/22 maxlen: 24 203.153.32.0/20 maxlen: 20 203.153.32.0/24 maxlen: 24 203.153.33.0/24 maxlen: 24 203.153.34.0/24 maxlen: 24 203.153.35.0/24 maxlen: 24 203.153.36.0/24 maxlen: 24 203.153.37.0/24 maxlen: 24 203.153.38.0/24 maxlen: 24 203.153.39.0/24 maxlen: 24 203.153.40.0/24 maxlen: 24 203.153.41.0/24 maxlen: 24 203.153.42.0/24 maxlen: 24 203.153.43.0/24 maxlen: 24 203.153.44.0/24 maxlen: 24 203.153.45.0/24 maxlen: 24 203.153.46.0/24 maxlen: 24 203.153.47.0/24 maxlen: 24 220.158.156.0/22 maxlen: 24 2401:b200::/32 maxlen: 48 2406:f00:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52506 (0xcd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 9 10:38:09 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6960da91-fad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:ea:35:c9:40:0a:c0:e4:d1:43:bc:fa:f0: 46:19:f0:62:c2:98:6f:be:d2:11:90:d5:80:dc:2f: 24:6d:11:3e:3a:6c:fe:d3:20:3d:b0:7c:33:0c:90: 32:a8:19:ba:52:75:90:34:9b:86:57:ec:9b:57:35: a2:9a:ee:33:c0:27:ff:a0:f2:55:8b:2e:e0:be:56: 76:7a:ee:3c:31:28:62:7a:fc:d1:f2:02:fe:26:0b: 65:99:5f:e1:5e:23:2f:aa:73:a5:9f:44:00:18:ee: 2c:cc:44:90:08:94:5d:56:fb:9d:8d:b5:df:56:0a: 03:aa:72:cc:d8:b2:8f:7b:07:1b:46:9b:e0:b7:f6: cb:09:06:57:92:25:94:ed:8d:9a:3e:7b:3e:a3:99: 0c:0a:e7:dd:91:59:b9:ad:a4:6b:3a:fc:9d:15:42: 9d:74:bb:7e:16:f7:87:db:a0:1f:d2:48:dc:34:73: 1c:16:d7:36:9a:84:50:6c:13:0e:e6:8d:51:d0:b7: 7f:1c:72:cd:9c:5f:b7:80:63:51:bc:38:45:4f:11: 89:a3:12:f3:3f:d6:52:8b:66:f5:01:bf:ff:b3:73: 96:b4:81:52:ba:54:59:5d:01:6c:c6:34:73:03:e6: 0c:86:05:37:e8:ea:bb:a9:ee:06:e5:0f:b9:69:72: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D5:0A:83:C9:0B:6C:D1:88:4E:D5:12:EA:BA:A7:A8:17:E8:49:D3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/49F4284AED4711F0BB4F794E4F6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.216.0/21 27.0.244.0-27.0.251.255 27.111.72.0/22 27.112.120.0/22 27.116.40.0/22 27.122.60.0/22 36.255.4.0/22 36.255.12.0-36.255.23.255 45.115.88.0/22 45.121.0.0/22 61.14.230.0/24 103.15.252.0/22 103.28.244.0/22 103.30.64.0/22 103.30.116.0/22 103.30.176.0/22 103.55.72.0/22 103.61.72.0/22 103.66.72.0/22 103.74.108.0/22 103.76.208.0/22 103.82.80.0/22 103.87.100.0/24 103.197.112.0/22 103.199.180.0/22 103.199.188.0/22 103.199.200.0-103.199.215.255 103.200.84.0/22 103.201.134.0/23 103.203.72.0/22 103.206.144.0/22 103.207.124.0/22 103.207.224.0/22 103.208.104.0/21 103.208.144.0/22 103.208.156.0/22 103.208.172.0/22 103.208.228.0-103.208.243.255 103.210.88.0/21 103.210.100.0/22 103.215.240.0/24 103.229.0.0/24 103.246.40.0/22 103.246.192.0/22 103.247.4.0/22 103.247.52.0/22 106.0.40.0/22 112.133.192.0/18 120.138.12.0/22 121.46.92.0/22 122.252.224.0/19 137.59.92.0/22 137.59.156.0/22 137.59.164.0/22 137.59.176.0/22 139.5.0.0/20 175.111.188.0/22 180.94.32.0/22 202.21.40.0/21 202.43.120.0/22 202.140.128.0/22 202.141.0.0/17 202.148.56.0/22 202.168.84.0/22 202.170.200.0/21 202.176.0.0/22 203.153.32.0/20 220.158.156.0/22 IPv6: 2401:b200::/32 2406:f00:7::/48 Signature Algorithm: sha256WithRSAEncryption ae:0d:dd:b9:86:6e:ca:d9:99:76:f4:1c:32:a3:a9:6e:fa:72: cf:d0:ef:4a:50:df:17:a1:5e:d9:c9:3d:d1:39:9e:28:a2:a5: c8:57:2b:ab:bf:a4:1c:14:c5:3b:33:ee:0e:50:26:39:b7:4f: 70:c4:ea:ed:b4:6f:dd:80:cd:e7:5f:93:71:82:b5:8d:be:41: 6e:1f:40:b8:79:45:ce:11:1e:7f:a7:26:0e:48:28:46:bd:0c: 5e:2e:0f:b1:7b:f5:4c:54:38:4b:bb:16:c3:fa:28:7d:ad:e0: 54:58:b0:93:60:7c:ba:8c:e6:fe:5a:cc:30:03:54:ef:25:ee: 91:8a:21:ea:3e:1a:97:a2:54:e8:8f:f4:1f:23:a4:16:0c:6c: a3:80:64:7d:fa:8e:a9:a2:8c:8e:97:b8:b5:7f:48:c8:08:5e: 2e:fa:fb:8d:fb:dc:6d:ed:d9:c1:95:80:b0:e8:d7:e5:ac:e1: 60:9f:20:23:11:32:5d:fd:ee:e2:4d:48:f0:08:b8:dd:6f:f0: 87:54:e7:38:44:b5:8d:da:3a:30:39:00:85:94:6e:55:3a:8c: 5f:65:43:1f:38:70:12:3f:16:06:44:c1:69:80:48:5e:3c:f9: 1a:f6:4e:21:25:96:ba:e3:e6:9e:5c:a4:87:7c:14:6e:02:e8: ae:62:c9:be -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIDAM0aMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDEwOTEwMzgwOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk2MGRhOTEtZmFkMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHh6jXJQArA5NFDvPrwRhnwYsKYb77SEZDVgNwvJG0RPjps/tMgPbB8MwyQ MqgZulJ1kDSbhlfsm1c1opruM8An/6DyVYsu4L5WdnruPDEoYnr80fIC/iYLZZlf 4V4jL6pzpZ9EABjuLMxEkAiUXVb7nY2131YKA6pyzNiyj3sHG0ab4Lf2ywkGV5Il lO2Nmj57PqOZDArn3ZFZua2kazr8nRVCnXS7fhb3h9ugH9JI3DRzHBbXNpqEUGwT DuaNUdC3fxxyzZxft4BjUbw4RU8RiaMS8z/WUotm9QG//7NzlrSBUrpUWV0BbMY0 cwPmDIYFN+jqu6nuBuUPuWlypiMCAwEAAaOCBGkwggRlMB0GA1UdDgQWBBQL1QqD yQts0YhO1RLquqeoF+hJ0zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ5RjQyODRB RUQ0NzExRjBCQjRGNzk0RTRGNkY1NkJDLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIB8QYIKwYBBQUHAQcB Af8EggHgMIIB3DCCAcAEAgABMIIBuAMEAxsA2DAMAwQCGwD0AwQCGwD4AwQCG29I AwQCG3B4AwQCG3QoAwQCG3o8AwQCJP8EMAwDBAIk/wwDBAMk/xADBAItc1gDBAIt eQADBAA9DuYDBAJnD/wDBAJnHPQDBAJnHkADBAJnHnQDBAJnHrADBAJnN0gDBAJn PUgDBAJnQkgDBAJnSmwDBAJnTNADBAJnUlADBABnV2QDBAJnxXADBAJnx7QDBAJn x7wwDAMEA2fHyAMEA2fH0AMEAmfIVAMEAWfJhgMEAmfLSAMEAmfOkAMEAmfPfAME AmfP4AMEA2fQaAMEAmfQkAMEAmfQnAMEAmfQrDAMAwQCZ9DkAwQCZ9DwAwQDZ9JY AwQCZ9JkAwQAZ9fwAwQAZ+UAAwQCZ/YoAwQCZ/bAAwQCZ/cEAwQCZ/c0AwQCagAo AwQGcIXAAwQCeIoMAwQCeS5cAwQFevzgAwQCiTtcAwQCiTucAwQCiTukAwQCiTuw AwQEiwUAAwQCr2+8AwQCtF4gAwQDyhUoAwQCyit4AwQCyoyAAwQHyo0AAwQCypQ4 AwQCyqhUAwQDyqrIAwQCyrAAAwQEy5kgAwQC3J6cMBYEAgACMBADBQAkAbIAAwcA JAYPAAAHMA0GCSqGSIb3DQEBCwUAA4IBAQCuDd25hm7K2Zl29Bwyo6lu+nLP0O9K UN8XoV7ZyT3ROZ4ooqXIVyurv6QcFMU7M+4OUCY5t09wxOrttG/dgM3nX5NxgrWN vkFuH0C4eUXOER5/pyYOSChGvQxeLg+xe/VMVDhLuxbD+ih9reBUWLCTYHy6jOb+ WswwA1TvJe6RiiHqPhqXolToj/QfI6QWDGyjgGR9+o6pooyOl7i1f0jICF4u+vuN +9xt7dnBlYCw6NflrOFgnyAjETJd/e7iTUjwCLjdb/CHVOc4RLWN2jowOQCFlG5V OoxfZUMfOHASPxYGRMFpgEhePPka9k4hJZa64+aeXKSHfBRuAuiuYsm+ -----END CERTIFICATE-----Generated at Tue Jan 20 00:57:35 2026 by rpki-client