This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8C807080CE7811F09D68494AC4F9AE02.roa File: 8C807080CE7811F09D68494AC4F9AE02.roa (raw, json) Hash identifier: Bc0X9r2R0cCD0XcXwk+mco/DDoq0r2P6nIgw88OkVQk= Subject key identifier: 48:D8:41:5F:2F:36:99:0E:A1:10:55:6C:8A:99:48:51:87:19:7D:95 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C949 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8C807080CE7811F09D68494AC4F9AE02.roa Signing time: Mon 01 Dec 2025 05:42:40 +0000 ROA not before: Mon 01 Dec 2025 05:42:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58678 IP address blocks: 43.241.28.0/22 maxlen: 24 43.241.128.0/22 maxlen: 24 43.241.132.0/22 maxlen: 24 43.242.208.0/24 maxlen: 24 43.242.209.0/24 maxlen: 24 43.242.210.0/24 maxlen: 24 43.242.211.0/24 maxlen: 24 43.242.228.0/22 maxlen: 24 45.64.84.0/22 maxlen: 24 45.114.192.0/22 maxlen: 24 45.117.0.0/22 maxlen: 24 45.127.120.0/22 maxlen: 24 45.250.248.0/24 maxlen: 24 45.250.249.0/24 maxlen: 24 45.250.250.0/24 maxlen: 24 45.251.236.0/24 maxlen: 24 45.251.237.0/24 maxlen: 24 45.251.238.0/24 maxlen: 24 45.251.239.0/24 maxlen: 24 103.14.232.0/22 maxlen: 24 103.26.52.0/22 maxlen: 22 103.26.52.0/24 maxlen: 24 103.26.53.0/24 maxlen: 24 103.26.54.0/24 maxlen: 24 103.26.55.0/24 maxlen: 24 103.26.56.0/22 maxlen: 24 103.39.251.0/24 maxlen: 24 103.42.160.0/22 maxlen: 24 103.48.56.0/23 maxlen: 24 103.48.58.0/24 maxlen: 24 103.48.59.0/24 maxlen: 24 103.48.100.0/22 maxlen: 24 103.57.96.0/23 maxlen: 24 103.59.212.0/22 maxlen: 24 103.69.238.0/24 maxlen: 24 103.74.236.0/22 maxlen: 24 103.77.152.0/22 maxlen: 23 103.77.152.0/23 maxlen: 24 103.77.154.0/24 maxlen: 24 103.89.40.0/22 maxlen: 24 103.111.132.0/22 maxlen: 24 103.112.32.0/24 maxlen: 24 103.112.33.0/24 maxlen: 24 103.112.34.0/24 maxlen: 24 103.112.35.0/24 maxlen: 24 103.117.184.0/24 maxlen: 24 103.117.187.0/24 maxlen: 24 103.137.152.0/22 maxlen: 24 103.148.207.0/24 maxlen: 24 103.153.151.0/24 maxlen: 24 103.166.112.0/23 maxlen: 24 103.173.208.0/23 maxlen: 24 103.174.30.0/24 maxlen: 24 103.174.38.0/24 maxlen: 24 103.178.212.0/24 maxlen: 24 103.178.213.0/24 maxlen: 24 103.181.209.0/24 maxlen: 24 103.185.11.0/24 maxlen: 24 103.204.119.0/24 maxlen: 24 103.209.18.0/24 maxlen: 24 103.209.19.0/24 maxlen: 24 103.215.114.0/23 maxlen: 24 103.216.144.0/22 maxlen: 24 103.218.100.0/22 maxlen: 24 103.219.164.0/24 maxlen: 24 103.219.165.0/24 maxlen: 24 103.219.166.0/24 maxlen: 24 103.219.167.0/24 maxlen: 24 103.220.80.0/22 maxlen: 24 103.220.212.0/22 maxlen: 24 103.226.0.0/22 maxlen: 24 103.226.4.0/22 maxlen: 24 103.226.28.0/22 maxlen: 24 124.108.16.0/22 maxlen: 24 163.223.244.0/23 maxlen: 24 203.134.248.0/23 maxlen: 24 2001:df6:f180::/48 maxlen: 48 2404:bd00::/48 maxlen: 48 2404:bd00:1::/48 maxlen: 48 2404:bd00:2::/48 maxlen: 48 2404:bd00:3::/48 maxlen: 48 2404:bd00:4::/48 maxlen: 48 2404:bd00:5::/48 maxlen: 48 2404:bd00:6::/48 maxlen: 48 2404:bd00:7::/48 maxlen: 48 2404:bd00:8::/48 maxlen: 48 2404:bd00:a::/48 maxlen: 48 2404:bd00:b::/48 maxlen: 48 2404:bd00:c::/48 maxlen: 48 2404:bd00:d::/48 maxlen: 48 2404:bd00:e::/48 maxlen: 48 2404:bd00:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51529 (0xc949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 1 05:42:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=692d2acf-7d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:18:bb:6f:7d:68:0d:84:eb:ff:58:3c:88: 0f:cc:d2:69:d2:d6:6c:02:a0:0c:f2:ae:1f:de:f7: 06:27:cc:8a:d6:3d:e2:b6:ff:3c:7a:61:9e:e6:3c: 45:a6:b6:80:e0:eb:b7:30:9f:04:4d:96:e1:7e:f3: e0:cb:20:e3:62:6c:17:3a:d3:c4:63:7f:6e:8b:f6: e5:ee:bc:7a:75:dd:c1:7c:f8:9e:db:8a:26:ff:96: fc:9f:98:3a:1f:20:d9:10:f7:37:6e:e7:51:24:46: 6f:5b:f9:d8:b8:e1:be:93:a4:f3:6c:15:0b:15:e8: 7c:3e:ac:2c:52:85:eb:04:cd:9a:ba:a7:5e:c0:23: 58:86:5c:f8:c5:33:bf:32:2c:22:fa:00:b4:f9:a5: c9:11:f1:2a:bf:62:27:69:cd:e6:bc:15:27:87:fd: b3:e1:e2:09:06:7f:08:a8:ee:71:f0:a2:9c:46:27: 81:86:6c:f6:34:c9:7f:59:84:81:14:dc:30:7e:97: 31:3a:28:51:1b:d3:bf:bb:17:7b:53:74:0d:3f:a0: 0e:92:63:3b:e6:11:83:1b:9d:45:df:70:70:70:58: f0:06:41:13:2a:74:d7:ed:64:0c:07:12:58:ba:85: 3d:e5:6c:fe:59:66:1b:62:39:e3:04:4f:55:42:2f: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D8:41:5F:2F:36:99:0E:A1:10:55:6C:8A:99:48:51:87:19:7D:95 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8C807080CE7811F09D68494AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.241.28.0/22 43.241.128.0/21 43.242.208.0/22 43.242.228.0/22 45.64.84.0/22 45.114.192.0/22 45.117.0.0/22 45.127.120.0/22 45.250.248.0-45.250.250.255 45.251.236.0/22 103.14.232.0/22 103.26.52.0-103.26.59.255 103.39.251.0/24 103.42.160.0/22 103.48.56.0/22 103.48.100.0/22 103.57.96.0/23 103.59.212.0/22 103.69.238.0/24 103.74.236.0/22 103.77.152.0/22 103.89.40.0/22 103.111.132.0/22 103.112.32.0/22 103.117.184.0/24 103.117.187.0/24 103.137.152.0/22 103.148.207.0/24 103.153.151.0/24 103.166.112.0/23 103.173.208.0/23 103.174.30.0/24 103.174.38.0/24 103.178.212.0/23 103.181.209.0/24 103.185.11.0/24 103.204.119.0/24 103.209.18.0/23 103.215.114.0/23 103.216.144.0/22 103.218.100.0/22 103.219.164.0/22 103.220.80.0/22 103.220.212.0/22 103.226.0.0/21 103.226.28.0/22 124.108.16.0/22 163.223.244.0/23 203.134.248.0/23 IPv6: 2001:df6:f180::/48 2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff 2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 33:f8:5b:d7:c1:5f:02:5c:ae:49:cd:7e:26:f4:92:d9:9b:ed: 0f:53:78:21:31:dc:2e:b7:82:da:31:a6:15:f4:fd:d8:ab:25: 2a:05:5f:26:d9:bf:42:6f:70:2a:2f:85:aa:8e:58:c8:d1:21: e3:7d:fa:8d:54:5a:a5:3d:9e:fb:89:4a:52:21:f0:5e:92:3f: 10:98:4a:5b:06:ce:d3:56:06:1d:47:e1:82:da:24:e6:3f:29: 31:af:15:81:26:63:1e:99:6c:10:dc:b0:75:fa:ad:8d:1f:3b: bf:43:c2:75:51:3a:96:e6:03:ff:38:75:16:54:c1:5d:ec:81: 23:b4:49:00:0d:ec:58:4b:0c:b1:b4:71:5a:1f:1b:9e:70:f9: 30:91:16:e0:b3:e3:11:57:91:72:8d:eb:b8:a7:1a:40:6c:05: 6e:2f:a6:b9:e0:71:60:8e:94:55:55:aa:2a:dd:67:c3:b7:a5: a2:82:c0:20:d5:ce:ee:b8:ab:a3:72:05:08:23:19:36:8b:f1: 03:77:e9:4e:d6:2c:29:d1:e5:2e:41:c2:b5:49:6a:32:f5:a2: d8:75:d4:54:4d:71:29:3b:e9:8a:ce:cc:53:75:e2:f8:12:21: 9e:6d:62:b5:3e:a7:3a:4d:18:5b:b5:f3:f2:28:e1:23:f1:5a: 47:4d:fd:58 -----BEGIN CERTIFICATE----- MIIG4jCCBcqgAwIBAgIDAMlJMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIwMTA1NDI0MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjkyZDJhY2YtN2QzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK00GLtvfWgNhOv/WDyID8zSadLWbAKgDPKuH973BifMitY94rb/PHphnuY8 Raa2gODrtzCfBE2W4X7z4Msg42JsFzrTxGN/bov25e68enXdwXz4ntuKJv+W/J+Y Oh8g2RD3N27nUSRGb1v52LjhvpOk82wVCxXofD6sLFKF6wTNmrqnXsAjWIZc+MUz vzIsIvoAtPmlyRHxKr9iJ2nN5rwVJ4f9s+HiCQZ/CKjucfCinEYngYZs9jTJf1mE gRTcMH6XMTooURvTv7sXe1N0DT+gDpJjO+YRgxudRd9wcHBY8AZBEyp01+1kDAcS WLqFPeVs/llmG2I54wRPVUIv5YcCAwEAAaOCBAUwggQBMB0GA1UdDgQWBBRI2EFf LzaZDqEQVWyKmUhRhxl9lTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhDODA3MDgw Q0U3ODExRjA5RDY4NDk0QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBjQYIKwYBBQUHAQcB Af8EggF8MIIBeDCCAT4EAgABMIIBNgMEAivxHAMEAyvxgAMEAivy0AMEAivy5AME Ai1AVAMEAi1ywAMEAi11AAMEAi1/eDAMAwQDLfr4AwQALfr6AwQCLfvsAwQCZw7o MAwDBAJnGjQDBAJnGjgDBABnJ/sDBAJnKqADBAJnMDgDBAJnMGQDBAFnOWADBAJn O9QDBABnRe4DBAJnSuwDBAJnTZgDBAJnWSgDBAJnb4QDBAJncCADBABndbgDBABn dbsDBAJniZgDBABnlM8DBABnmZcDBAFnpnADBAFnrdADBABnrh4DBABnriYDBAFn stQDBABntdEDBABnuQsDBABnzHcDBAFn0RIDBAFn13IDBAJn2JADBAJn2mQDBAJn 26QDBAJn3FADBAJn3NQDBANn4gADBAJn4hwDBAJ8bBADBAGj3/QDBAHLhvgwNAQC AAIwLgMHACABDfbxgDAPAwQAJAS9AwcAJAS9AAAIMBIDBwEkBL0AAAoDBwQkBL0A AAAwDQYJKoZIhvcNAQELBQADggEBADP4W9fBXwJcrknNfib0ktmb7Q9TeCEx3C63 gtoxphX0/dirJSoFXybZv0JvcCovhaqOWMjRIeN9+o1UWqU9nvuJSlIh8F6SPxCY SlsGztNWBh1H4YLaJOY/KTGvFYEmYx6ZbBDcsHX6rY0fO79DwnVROpbmA/84dRZU wV3sgSO0SQAN7FhLDLG0cVofG55w+TCRFuCz4xFXkXKN67inGkBsBW4vprngcWCO lFVVqirdZ8O3paKCwCDVzu64q6NyBQgjGTaL8QN36U7WLCnR5S5BwrVJajL1oth1 1FRNcSk76YrOzFN14vgSIZ5tYrU+pzpNGFu18/Io4SPxWkdN/Vg= -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:24 2025 by rpki-client