This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78C71F3AF37611F0A790554F6A6F56BC.roa File: 78C71F3AF37611F0A790554F6A6F56BC.roa (raw, json) Hash identifier: I4kxGiqSpR2WcCn3KJB/UrgjEp/b7Fvy3GfBWPRZCsE= Subject key identifier: 5C:FF:D0:36:00:C5:F6:FF:93:EB:46:AF:B1:A1:0E:F2:F6:CA:ED:CC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CE0B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78C71F3AF37611F0A790554F6A6F56BC.roa Signing time: Mon 19 Jan 2026 07:40:01 +0000 ROA not before: Mon 19 Jan 2026 07:40:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137085 IP address blocks: 27.123.240.0/23 maxlen: 24 43.225.248.0/22 maxlen: 24 43.228.164.0/23 maxlen: 24 43.230.148.0/22 maxlen: 24 43.248.152.0/22 maxlen: 24 43.248.240.0/22 maxlen: 24 43.251.92.0/22 maxlen: 23 43.251.93.0/24 maxlen: 24 43.251.94.0/24 maxlen: 24 43.251.95.0/24 maxlen: 24 45.120.160.0/22 maxlen: 24 45.248.172.0/22 maxlen: 24 103.37.98.0/23 maxlen: 24 103.40.200.0/22 maxlen: 24 103.43.32.0/22 maxlen: 24 103.54.27.0/24 maxlen: 24 103.55.60.0/22 maxlen: 24 103.68.21.0/24 maxlen: 24 103.68.140.0/23 maxlen: 24 103.69.239.0/24 maxlen: 24 103.72.196.0/24 maxlen: 24 103.91.72.0/24 maxlen: 24 103.91.73.0/24 maxlen: 24 103.91.74.0/24 maxlen: 24 103.91.75.0/24 maxlen: 24 103.91.76.0/22 maxlen: 24 103.92.107.0/24 maxlen: 24 103.93.39.0/24 maxlen: 24 103.100.4.0/24 maxlen: 24 103.101.112.0/22 maxlen: 24 103.106.28.0/22 maxlen: 24 103.113.110.0/23 maxlen: 24 103.120.108.0/24 maxlen: 24 103.120.152.0/24 maxlen: 24 103.120.153.0/24 maxlen: 24 103.124.174.0/24 maxlen: 24 103.138.9.0/24 maxlen: 24 103.139.143.0/24 maxlen: 24 103.154.8.0/23 maxlen: 24 103.154.56.0/23 maxlen: 24 103.155.237.0/24 maxlen: 24 103.156.121.0/24 maxlen: 24 103.157.188.0/23 maxlen: 24 103.159.104.0/23 maxlen: 24 103.160.25.0/24 maxlen: 24 103.164.140.0/24 maxlen: 24 103.165.88.0/23 maxlen: 24 103.167.154.0/23 maxlen: 24 103.167.182.0/23 maxlen: 24 103.167.224.0/23 maxlen: 24 103.167.238.0/23 maxlen: 24 103.168.60.0/23 maxlen: 24 103.169.242.0/24 maxlen: 24 103.169.243.0/24 maxlen: 24 103.170.38.0/23 maxlen: 24 103.170.52.0/23 maxlen: 24 103.170.84.0/23 maxlen: 24 103.178.24.0/23 maxlen: 24 103.178.117.0/24 maxlen: 24 103.179.50.0/23 maxlen: 24 103.181.66.0/24 maxlen: 24 103.181.119.0/24 maxlen: 24 103.184.205.0/24 maxlen: 24 103.204.70.0/24 maxlen: 24 103.206.51.0/24 maxlen: 24 103.206.96.0/23 maxlen: 24 103.216.141.0/24 maxlen: 24 103.217.132.0/22 maxlen: 24 103.224.144.0/22 maxlen: 24 103.225.188.0/22 maxlen: 24 103.232.232.0/22 maxlen: 24 103.248.92.0/22 maxlen: 24 103.248.172.0/22 maxlen: 24 157.119.80.0/22 maxlen: 24 202.4.169.0/24 maxlen: 24 210.79.134.0/24 maxlen: 24 2001:df0:47c0::/48 maxlen: 48 2001:df1:1980::/48 maxlen: 48 2001:df1:ed40::/48 maxlen: 48 2001:df2:3ac0::/48 maxlen: 48 2001:df2:3f40::/48 maxlen: 48 2001:df3:1340::/48 maxlen: 48 2400:d660::/32 maxlen: 32 2401:bba0::/32 maxlen: 32 2405:e100:a::/48 maxlen: 48 2405:e100:b::/48 maxlen: 48 2405:e100:c::/48 maxlen: 48 2405:e100:d::/48 maxlen: 48 2405:e100:e::/48 maxlen: 48 2405:e100:f::/48 maxlen: 48 2405:e100:1d::/48 maxlen: 48 2405:e100:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52747 (0xce0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 19 07:40:01 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=696ddfd1-ed3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:b1:e3:93:76:dc:3d:75:3b:76:7d:15:dd: 2b:e4:d9:50:4f:cf:c8:f4:dc:a3:26:e0:30:64:b2: 12:a6:59:7e:7b:af:17:27:f0:48:53:63:37:e4:4e: 3a:06:b1:7e:1d:ad:75:fa:ee:c8:48:9c:ed:b0:31: 1a:ba:7f:f2:3f:1d:c3:8a:90:c2:96:ba:61:92:1b: 1e:f2:79:55:de:fb:37:f5:7e:ed:de:61:2d:56:5f: ed:f4:db:06:66:fb:cb:28:50:28:ee:51:e1:d4:85: 5a:80:4f:f6:52:42:5f:97:6e:6b:88:30:98:ff:6b: 70:28:4b:16:7f:bb:86:12:e9:da:e6:ad:f0:0c:dd: 2c:97:f5:45:9f:6d:3c:4d:17:9e:31:01:36:96:6f: dd:c6:6d:32:88:1e:ff:47:ee:e9:c3:b0:2f:28:35: f3:d4:04:0d:aa:37:09:4a:e3:17:1c:89:80:ce:67: 4a:8f:f6:08:fd:63:bf:55:35:1b:cd:3c:a6:cc:f5: f7:ca:2a:85:3c:3d:54:ee:97:a8:bc:cd:51:45:c1: ea:35:8d:4b:66:f5:79:ca:ca:bd:75:c9:c9:82:27: 8c:13:53:ce:18:29:64:41:4d:f4:f3:25:67:f7:04: 7d:e4:f9:1c:2d:a6:c5:79:9c:5a:2f:84:95:e9:b3: f2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FF:D0:36:00:C5:F6:FF:93:EB:46:AF:B1:A1:0E:F2:F6:CA:ED:CC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78C71F3AF37611F0A790554F6A6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.240.0/23 43.225.248.0/22 43.228.164.0/23 43.230.148.0/22 43.248.152.0/22 43.248.240.0/22 43.251.92.0/22 45.120.160.0/22 45.248.172.0/22 103.37.98.0/23 103.40.200.0/22 103.43.32.0/22 103.54.27.0/24 103.55.60.0/22 103.68.21.0/24 103.68.140.0/23 103.69.239.0/24 103.72.196.0/24 103.91.72.0/21 103.92.107.0/24 103.93.39.0/24 103.100.4.0/24 103.101.112.0/22 103.106.28.0/22 103.113.110.0/23 103.120.108.0/24 103.120.152.0/23 103.124.174.0/24 103.138.9.0/24 103.139.143.0/24 103.154.8.0/23 103.154.56.0/23 103.155.237.0/24 103.156.121.0/24 103.157.188.0/23 103.159.104.0/23 103.160.25.0/24 103.164.140.0/24 103.165.88.0/23 103.167.154.0/23 103.167.182.0/23 103.167.224.0/23 103.167.238.0/23 103.168.60.0/23 103.169.242.0/23 103.170.38.0/23 103.170.52.0/23 103.170.84.0/23 103.178.24.0/23 103.178.117.0/24 103.179.50.0/23 103.181.66.0/24 103.181.119.0/24 103.184.205.0/24 103.204.70.0/24 103.206.51.0/24 103.206.96.0/23 103.216.141.0/24 103.217.132.0/22 103.224.144.0/22 103.225.188.0/22 103.232.232.0/22 103.248.92.0/22 103.248.172.0/22 157.119.80.0/22 202.4.169.0/24 210.79.134.0/24 IPv6: 2001:df0:47c0::/48 2001:df1:1980::/48 2001:df1:ed40::/48 2001:df2:3ac0::/48 2001:df2:3f40::/48 2001:df3:1340::/48 2400:d660::/32 2401:bba0::/32 2405:e100:a::-2405:e100:f:ffff:ffff:ffff:ffff:ffff 2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ba:95:46:b7:c8:af:fe:53:06:a8:6f:e1:7c:db:a2:47:6f:1c: b2:7c:f3:83:7c:c1:3a:a2:05:c5:2e:22:35:c1:ed:5f:33:4d: d0:06:2d:69:fd:81:fd:42:ff:6f:83:61:5e:40:8d:ae:af:aa: e8:18:88:4c:fa:bb:63:fc:84:20:17:fe:03:88:99:8a:3b:fa: 2a:ce:fd:08:7c:6f:ee:99:bc:dc:ff:30:b9:d3:4b:b3:bc:d8: 90:b2:96:6b:d3:63:33:5c:f4:65:27:10:1c:77:4a:51:d8:3b: 86:78:c9:9a:00:73:74:29:77:0d:5f:a2:ca:3c:0b:bd:94:40: 18:02:ba:05:27:f1:85:1d:dc:05:3b:dd:64:45:05:71:cb:b3: 57:db:58:03:7d:c1:fa:3b:48:71:f1:ce:1a:93:e5:4c:b9:9e: 9d:40:9c:dd:c9:52:d3:78:c4:87:6f:46:11:50:ae:ee:51:43: aa:ef:1b:74:d2:d9:7e:46:a2:b2:f1:be:48:68:0e:44:68:1b: 8b:39:03:51:b8:74:14:46:b3:a8:c3:a8:e9:8e:14:63:c0:27: ac:56:21:f4:1f:25:ca:7a:d6:c0:bf:98:0b:2a:fd:86:20:56: 0f:eb:6e:16:e4:5b:c5:26:db:1d:70:b5:80:0c:5a:b6:a4:81: 6f:9b:5d:53 -----BEGIN CERTIFICATE----- MIIHfDCCBmSgAwIBAgIDAM4LMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDExOTA3NDAwMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk2ZGRmZDEtZWQzZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpFseOTdtw9dTt2fRXdK+TZUE/PyPTcoybgMGSyEqZZfnuvFyfwSFNjN+RO Ogaxfh2tdfruyEic7bAxGrp/8j8dw4qQwpa6YZIbHvJ5Vd77N/V+7d5hLVZf7fTb Bmb7yyhQKO5R4dSFWoBP9lJCX5dua4gwmP9rcChLFn+7hhLp2uat8AzdLJf1RZ9t PE0XnjEBNpZv3cZtMoge/0fu6cOwLyg189QEDao3CUrjFxyJgM5nSo/2CP1jv1U1 G808psz198oqhTw9VO6XqLzNUUXB6jWNS2b1ecrKvXXJyYInjBNTzhgpZEFN9PMl Z/cEfeT5HC2mxXmcWi+Elemz8kECAwEAAaOCBJ8wggSbMB0GA1UdDgQWBBRc/9A2 AMX2/5PrRq+xoQ7y9srtzDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc4QzcxRjNB RjM3NjExRjBBNzkwNTU0RjZBNkY1NkJDLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIICJwYIKwYBBQUHAQcB Af8EggIWMIICEjCCAZoEAgABMIIBkgMEARt78AMEAivh+AMEASvkpAMEAivmlAME Aiv4mAMEAiv48AMEAiv7XAMEAi14oAMEAi34rAMEAWclYgMEAmcoyAMEAmcrIAME AGc2GwMEAmc3PAMEAGdEFQMEAWdEjAMEAGdF7wMEAGdIxAMEA2dbSAMEAGdcawME AGddJwMEAGdkBAMEAmdlcAMEAmdqHAMEAWdxbgMEAGd4bAMEAWd4mAMEAGd8rgME AGeKCQMEAGeLjwMEAWeaCAMEAWeaOAMEAGeb7QMEAGeceQMEAWedvAMEAWefaAME AGegGQMEAGekjAMEAWelWAMEAWenmgMEAWentgMEAWen4AMEAWen7gMEAWeoPAME AWep8gMEAWeqJgMEAWeqNAMEAWeqVAMEAWeyGAMEAGeydQMEAWezMgMEAGe1QgME AGe1dwMEAGe4zQMEAGfMRgMEAGfOMwMEAWfOYAMEAGfYjQMEAmfZhAMEAmfgkAME AmfhvAMEAmfo6AMEAmf4XAMEAmf4rAMEAp13UAMEAMoEqQMEANJPhjByBAIAAjBs AwcAIAEN8EfAAwcAIAEN8RmAAwcAIAEN8e1AAwcAIAEN8jrAAwcAIAEN8j9AAwcA IAEN8xNAAwUAJADWYAMFACQBu6AwEgMHASQF4QAACgMHBCQF4QAAADASAwcAJAXh AAAdAwcAJAXhAAAeMA0GCSqGSIb3DQEBCwUAA4IBAQC6lUa3yK/+Uwaob+F826JH bxyyfPODfME6ogXFLiI1we1fM03QBi1p/YH9Qv9vg2FeQI2ur6roGIhM+rtj/IQg F/4DiJmKO/oqzv0IfG/umbzc/zC500uzvNiQspZr02MzXPRlJxAcd0pR2DuGeMma AHN0KXcNX6LKPAu9lEAYAroFJ/GFHdwFO91kRQVxy7NX21gDfcH6O0hx8c4ak+VM uZ6dQJzdyVLTeMSHb0YRUK7uUUOq7xt00tl+RqKy8b5IaA5EaBuLOQNRuHQURrOo w6jpjhRjwCesViH0HyXKetbAv5gLKv2GIFYP624W5FvFJtsdcLWADFq2pIFvm11T -----END CERTIFICATE-----Generated at Mon Jan 19 21:42:40 2026 by rpki-client