This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F75F558EDEA11F0BDEA0A6B366F56BC.roa File: 8F75F558EDEA11F0BDEA0A6B366F56BC.roa (raw, json) Hash identifier: ikcfy7mmVcsrG/Hd/ZX29OsNHz7JYOXgUPkx0aWcRqA= Subject key identifier: 04:AC:DD:9C:27:D5:A3:CF:CD:C2:C0:3B:B9:6B:F2:7E:7C:7B:EB:C6 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CD1C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F75F558EDEA11F0BDEA0A6B366F56BC.roa Signing time: Sat 10 Jan 2026 06:06:53 +0000 ROA not before: Sat 10 Jan 2026 06:06:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 148000 IP address blocks: 1.10.10.0/24 maxlen: 24 45.249.126.0/24 maxlen: 24 45.249.127.0/24 maxlen: 24 45.250.52.0/22 maxlen: 24 103.68.48.0/24 maxlen: 24 103.68.49.0/24 maxlen: 24 160.202.192.0/24 maxlen: 24 160.202.193.0/24 maxlen: 24 160.202.194.0/24 maxlen: 24 160.202.196.0/24 maxlen: 24 160.202.198.0/24 maxlen: 24 160.202.200.0/24 maxlen: 24 160.202.201.0/24 maxlen: 24 2001:de2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52508 (0xcd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 10 06:06:53 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6961ec7d-01ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a0:87:97:2c:26:95:30:43:81:00:20:8c:77: c4:d7:00:48:5a:96:33:a3:98:5d:0f:8b:83:53:9f: 45:2d:2b:db:a3:41:36:21:3a:c2:0e:86:6f:0b:62: a6:09:be:1c:73:a0:be:56:d7:8e:be:fd:f2:03:8f: 7f:50:c5:9b:1d:99:7b:6a:74:9d:13:93:8c:68:67: e1:98:80:e9:c0:b6:9d:02:6b:3f:41:09:13:9f:b5: 95:ef:a3:ce:70:fd:eb:31:5b:b8:50:b9:83:b3:5b: 98:2e:7e:4d:4b:56:52:fe:2a:af:38:40:06:8e:b5: fa:e8:29:ec:a1:ac:15:45:96:29:9e:46:bf:ff:8a: a6:0e:dd:9b:64:4d:9e:b2:61:5c:45:d5:2b:02:0c: 6c:c1:97:de:fa:d5:ba:11:dc:af:24:6f:ab:6d:76: 54:fb:68:97:e8:ea:52:10:cb:66:d8:6f:dc:41:d6: d4:02:a7:27:84:fe:8d:52:89:7d:7b:50:14:13:b4: 60:89:e0:38:e7:da:68:c0:51:01:95:31:15:b1:6e: 94:ac:6f:79:bc:72:b9:0a:81:79:75:a0:68:f0:08: ca:0b:1e:00:47:41:11:d8:ad:08:ad:82:69:9e:d8: ad:c2:46:96:ec:d4:a1:11:a1:40:f6:3f:1e:1e:bf: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AC:DD:9C:27:D5:A3:CF:CD:C2:C0:3B:B9:6B:F2:7E:7C:7B:EB:C6 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F75F558EDEA11F0BDEA0A6B366F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.10.10.0/24 45.249.126.0/23 45.250.52.0/22 103.68.48.0/23 160.202.192.0-160.202.194.255 160.202.196.0/24 160.202.198.0/24 160.202.200.0/23 IPv6: 2001:de2::/48 Signature Algorithm: sha256WithRSAEncryption 16:7d:15:d0:6f:cd:77:1c:85:a3:e9:eb:24:a8:1a:0b:a2:3a: 91:b5:37:da:80:d7:31:17:ec:16:86:0f:88:f9:08:8d:bb:5d: b8:0c:e0:e1:7c:3c:5e:96:d9:9e:5f:d9:3d:c3:d2:b6:f9:ce: 3e:d8:25:19:a7:8d:fe:56:4c:35:b8:c8:07:4f:97:3e:35:f3: 13:2a:92:b5:af:1f:5c:d0:8f:ab:1a:58:75:71:9f:c1:b2:cc: c9:5e:40:6c:4e:f9:a5:fe:e3:a3:83:9f:81:31:77:72:1f:d4: 17:af:ba:08:3c:39:78:79:93:2c:88:89:14:ba:33:f3:93:3a: e5:d9:b8:53:a6:2d:ee:8c:ca:ba:2f:62:dd:de:16:e5:8a:04: 1c:58:04:0d:ff:94:25:b8:99:7a:2d:ff:a4:9f:e6:ab:bc:55: cc:d8:48:cc:10:57:56:0b:f7:38:38:d2:39:ce:73:fb:c4:00: cf:36:a8:63:89:a2:98:f4:9e:3b:9e:8a:9a:77:5a:93:ba:89: 76:96:23:4c:e6:3e:53:2c:df:65:1a:5f:f6:7f:72:65:d1:fe: 7a:ab:00:fb:4b:7a:f7:82:f0:cd:24:a4:90:9b:12:a5:e3:c5: cf:c4:85:ce:d8:b8:20:54:7e:05:63:89:02:6d:44:1c:c1:80: 26:5f:cb:38 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgIDAM0cMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDExMDA2MDY1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk2MWVjN2QtMDFhYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKgh5csJpUwQ4EAIIx3xNcASFqWM6OYXQ+Lg1OfRS0r26NBNiE6wg6Gbwti pgm+HHOgvlbXjr798gOPf1DFmx2Ze2p0nROTjGhn4ZiA6cC2nQJrP0EJE5+1le+j znD96zFbuFC5g7NbmC5+TUtWUv4qrzhABo61+ugp7KGsFUWWKZ5Gv/+Kpg7dm2RN nrJhXEXVKwIMbMGX3vrVuhHcryRvq212VPtol+jqUhDLZthv3EHW1AKnJ4T+jVKJ fXtQFBO0YIngOOfaaMBRAZUxFbFulKxvebxyuQqBeXWgaPAIygseAEdBEditCK2C aZ7YrcJGluzUoRGhQPY/Hh6/6AECAwEAAaOCAtgwggLUMB0GA1UdDgQWBBQErN2c J9Wjz83CwDu5a/J+fHvrxjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhGNzVGNTU4 RURFQTExRjBCREVBMEE2QjM2NkY1NkJDLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGIGCCsGAQUFBwEHAQH/ BFMwUTA+BAIAATA4AwQAAQoKAwQBLfl+AwQCLfo0AwQBZ0QwMAwDBAagysADBACg ysIDBACgysQDBACgysYDBAGgysgwDwQCAAIwCQMHACABDeIAADANBgkqhkiG9w0B AQsFAAOCAQEAFn0V0G/NdxyFo+nrJKgaC6I6kbU32oDXMRfsFoYPiPkIjbtduAzg 4Xw8XpbZnl/ZPcPStvnOPtglGaeN/lZMNbjIB0+XPjXzEyqSta8fXNCPqxpYdXGf wbLMyV5AbE75pf7jo4OfgTF3ch/UF6+6CDw5eHmTLIiJFLoz85M65dm4U6Yt7ozK ui9i3d4W5YoEHFgEDf+UJbiZei3/pJ/mq7xVzNhIzBBXVgv3ODjSOc5z+8QAzzao Y4mimPSeO56Kmndak7qJdpYjTOY+UyzfZRpf9n9yZdH+eqsA+0t694LwzSSkkJsS pePFz8SFzti4IFR+BWOJAm1EHMGAJl/LOA== -----END CERTIFICATE-----Generated at Mon Jan 19 21:44:02 2026 by rpki-client