This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64A50F50F38811F099715312706F56BC.roa File: 64A50F50F38811F099715312706F56BC.roa (raw, json) Hash identifier: dMAPQQ7ClClAA4e9F0rUMOKFbrDSS2uzF6aT7B/OGGA= Subject key identifier: 74:EF:84:D6:5A:EC:56:31:D3:5E:ED:20:B5:13:14:37:63:61:CC:2F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CDE7 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64A50F50F38811F099715312706F56BC.roa Signing time: Sat 17 Jan 2026 09:39:18 +0000 ROA not before: Sat 17 Jan 2026 09:39:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133647 IP address blocks: 43.229.162.0/24 maxlen: 24 43.230.157.0/24 maxlen: 24 43.230.158.0/24 maxlen: 24 43.230.159.0/24 maxlen: 24 45.115.252.0/22 maxlen: 24 45.116.68.0/22 maxlen: 24 103.38.70.0/24 maxlen: 24 103.55.6.0/23 maxlen: 24 103.61.102.0/23 maxlen: 24 103.70.176.0/23 maxlen: 24 103.93.176.0/22 maxlen: 24 103.109.72.0/23 maxlen: 24 103.122.84.0/24 maxlen: 24 103.122.85.0/24 maxlen: 24 103.129.195.0/24 maxlen: 24 103.144.37.0/24 maxlen: 24 103.156.168.0/23 maxlen: 24 103.157.160.0/23 maxlen: 24 103.161.230.0/23 maxlen: 24 103.161.232.0/24 maxlen: 24 103.161.233.0/24 maxlen: 24 103.174.105.0/24 maxlen: 24 103.175.76.0/24 maxlen: 24 103.175.77.0/24 maxlen: 24 103.214.97.0/24 maxlen: 24 175.111.180.0/24 maxlen: 24 175.111.182.0/24 maxlen: 24 175.111.183.0/24 maxlen: 24 2001:df0:dc80::/48 maxlen: 48 2001:df1:b280::/48 maxlen: 48 2001:df1:f440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52711 (0xcde7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 17 09:39:18 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=696b58c6-90cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:da:d0:ef:93:53:9a:d9:42:1c:a4:d9:38: 2c:9f:2a:bc:c7:c5:04:89:0c:35:f6:67:8b:18:6b: 60:f0:ff:1a:73:c1:53:cc:49:74:2e:0d:c3:88:cc: 8d:ae:0e:01:75:d6:2a:c9:bf:36:fc:79:45:66:20: 37:bc:d1:89:2f:a7:a3:5e:c8:e4:13:8a:e3:23:53: 3b:bf:90:8d:0e:04:f1:cd:d1:8d:fe:7a:2d:1d:7e: 8b:1e:c2:42:b3:1b:d3:a7:f6:e0:77:43:00:d9:af: 82:68:16:25:d8:bd:e7:cd:2c:0d:f8:e5:98:01:41: f6:da:ef:c8:50:80:4e:cc:f2:a7:b3:7b:33:5b:4e: 87:77:0d:99:18:05:bc:08:f3:6d:a1:eb:28:fb:36: e3:83:bb:ae:c4:7b:12:d7:7d:87:82:d0:dd:ff:dd: 40:2b:4b:eb:91:f4:7a:6c:51:df:d8:99:0e:70:d1: e1:fb:23:69:f6:6b:46:6f:33:9f:96:0e:b7:ad:b1: 37:60:80:e6:e4:13:f7:f0:f8:f2:c6:95:9f:88:61: 19:8c:d0:ca:bc:19:c8:90:ec:f2:9b:1c:59:f4:9a: 06:bc:ea:9e:17:23:1f:b3:84:bc:c1:d5:d4:83:3a: e4:f6:81:6f:56:8a:3b:2e:cc:08:d5:fb:55:63:be: a3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:EF:84:D6:5A:EC:56:31:D3:5E:ED:20:B5:13:14:37:63:61:CC:2F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/64A50F50F38811F099715312706F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.162.0/24 43.230.157.0-43.230.159.255 45.115.252.0/22 45.116.68.0/22 103.38.70.0/24 103.55.6.0/23 103.61.102.0/23 103.70.176.0/23 103.93.176.0/22 103.109.72.0/23 103.122.84.0/23 103.129.195.0/24 103.144.37.0/24 103.156.168.0/23 103.157.160.0/23 103.161.230.0-103.161.233.255 103.174.105.0/24 103.175.76.0/23 103.214.97.0/24 175.111.180.0/24 175.111.182.0/23 IPv6: 2001:df0:dc80::/48 2001:df1:b280::/48 2001:df1:f440::/48 Signature Algorithm: sha256WithRSAEncryption a6:bc:31:3d:19:d4:e2:36:93:a3:46:28:70:f4:1c:91:88:72: 73:74:9e:a0:88:dd:ef:8f:f3:39:46:25:e8:30:4d:84:1a:32: 59:a7:52:8b:e7:b2:81:df:a3:52:5c:f2:74:36:32:4b:84:77: 9f:2b:8f:dd:d2:86:00:35:9a:29:9d:c7:86:41:a7:b3:e6:89: a4:fe:a6:f4:77:8c:9c:99:48:3f:f8:c3:6a:67:1f:4d:0e:b2: b6:f0:25:6e:c9:a1:c8:54:e6:0e:bb:14:b7:f9:79:de:53:d7: bb:f7:c8:fd:dd:2b:06:65:ad:12:b3:a4:96:71:12:7f:15:7f: f3:20:d4:67:b4:cf:51:df:44:aa:40:f0:6d:1a:41:10:8f:f0: 8f:30:61:13:b7:a5:61:99:ae:62:e9:f8:18:ee:69:b1:43:bf: b7:05:1e:19:e0:20:55:a5:a4:a0:e8:09:c2:de:ba:c7:e7:b5: b9:46:35:04:61:df:e5:b9:f0:96:a5:2c:28:b3:ed:0b:35:b0: 3b:1a:71:f3:81:de:75:d7:57:68:e5:74:af:5c:da:38:5c:86: d9:c4:71:f1:4a:04:63:88:e7:dc:14:1b:57:29:03:08:6e:23: eb:27:de:5b:01:a4:c0:e9:1d:0b:09:5b:e9:f5:30:07:c4:03: 83:0e:9c:2f -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgIDAM3nMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDExNzA5MzkxOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk2YjU4YzYtOTBjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJYE2tDvk1Oa2UIcpNk4LJ8qvMfFBIkMNfZnixhrYPD/GnPBU8xJdC4Nw4jM ja4OAXXWKsm/Nvx5RWYgN7zRiS+no17I5BOK4yNTO7+QjQ4E8c3Rjf56LR1+ix7C QrMb06f24HdDANmvgmgWJdi9580sDfjlmAFB9trvyFCATszyp7N7M1tOh3cNmRgF vAjzbaHrKPs244O7rsR7Etd9h4LQ3f/dQCtL65H0emxR39iZDnDR4fsjafZrRm8z n5YOt62xN2CA5uQT9/D48saVn4hhGYzQyrwZyJDs8pscWfSaBrzqnhcjH7OEvMHV 1IM65PaBb1aKOy7MCNX7VWO+o8UCAwEAAaOCA0UwggNBMB0GA1UdDgQWBBR074TW WuxWMdNe7SC1ExQ3Y2HMLzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY0QTUwRjUw RjM4ODExRjA5OTcxNTMxMjcwNkY1NkJDLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIHOBggrBgEFBQcBBwEB /wSBvjCBuzCBlQQCAAEwgY4DBAAr5aIwDAMEACvmnQMEBSvmgAMEAi1z/AMEAi10 RAMEAGcmRgMEAWc3BgMEAWc9ZgMEAWdGsAMEAmddsAMEAWdtSAMEAWd6VAMEAGeB wwMEAGeQJQMEAWecqAMEAWedoDAMAwQBZ6HmAwQBZ6HoAwQAZ65pAwQBZ69MAwQA Z9ZhAwQAr2+0AwQBr2+2MCEEAgACMBsDBwAgAQ3w3IADBwAgAQ3xsoADBwAgAQ3x 9EAwDQYJKoZIhvcNAQELBQADggEBAKa8MT0Z1OI2k6NGKHD0HJGIcnN0nqCI3e+P 8zlGJegwTYQaMlmnUovnsoHfo1Jc8nQ2MkuEd58rj93ShgA1mimdx4ZBp7PmiaT+ pvR3jJyZSD/4w2pnH00OsrbwJW7JochU5g67FLf5ed5T17v3yP3dKwZlrRKzpJZx En8Vf/Mg1Ge0z1HfRKpA8G0aQRCP8I8wYRO3pWGZrmLp+BjuabFDv7cFHhngIFWl pKDoCcLeusfntblGNQRh3+W58JalLCiz7Qs1sDsacfOB3nXXV2jldK9c2jhchtnE cfFKBGOI59wUG1cpAwhuI+sn3lsBpMDpHQsJW+n1MAfEA4MOnC8= -----END CERTIFICATE-----Generated at Mon Jan 19 21:44:01 2026 by rpki-client