This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9601C2BCC51311F0A146A487C4F9AE02.roa File: 9601C2BCC51311F0A146A487C4F9AE02.roa (raw, json) Hash identifier: TK/DqN2iWDVoIdHbBP1Zvt4JFncm9O7p5FZTY+jm+Ac= Subject key identifier: 30:55:D8:3A:17:54:5B:29:5D:00:14:33:B3:B8:B7:C4:4D:14:BE:96 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C7E4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9601C2BCC51311F0A146A487C4F9AE02.roa Signing time: Wed 19 Nov 2025 06:47:16 +0000 ROA not before: Wed 19 Nov 2025 06:47:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137085 IP address blocks: 27.123.240.0/23 maxlen: 24 43.225.248.0/22 maxlen: 24 43.228.164.0/23 maxlen: 24 103.37.98.0/23 maxlen: 24 103.40.200.0/22 maxlen: 24 103.54.27.0/24 maxlen: 24 103.68.21.0/24 maxlen: 24 103.68.140.0/23 maxlen: 24 103.69.239.0/24 maxlen: 24 103.72.196.0/24 maxlen: 24 103.91.72.0/24 maxlen: 24 103.91.73.0/24 maxlen: 24 103.91.74.0/24 maxlen: 24 103.91.75.0/24 maxlen: 24 103.91.76.0/22 maxlen: 24 103.92.107.0/24 maxlen: 24 103.93.39.0/24 maxlen: 24 103.101.112.0/22 maxlen: 24 103.113.110.0/23 maxlen: 24 103.120.108.0/24 maxlen: 24 103.120.152.0/24 maxlen: 24 103.120.153.0/24 maxlen: 24 103.124.174.0/24 maxlen: 24 103.138.9.0/24 maxlen: 24 103.139.143.0/24 maxlen: 24 103.154.8.0/23 maxlen: 24 103.154.56.0/23 maxlen: 24 103.155.237.0/24 maxlen: 24 103.156.121.0/24 maxlen: 24 103.157.188.0/23 maxlen: 24 103.159.104.0/23 maxlen: 24 103.160.25.0/24 maxlen: 24 103.164.140.0/24 maxlen: 24 103.165.88.0/23 maxlen: 24 103.167.154.0/23 maxlen: 24 103.167.182.0/23 maxlen: 24 103.167.224.0/23 maxlen: 24 103.167.238.0/23 maxlen: 24 103.168.60.0/23 maxlen: 24 103.169.242.0/24 maxlen: 24 103.169.243.0/24 maxlen: 24 103.170.38.0/23 maxlen: 24 103.170.84.0/23 maxlen: 24 103.178.24.0/23 maxlen: 24 103.178.117.0/24 maxlen: 24 103.179.50.0/23 maxlen: 24 103.181.66.0/24 maxlen: 24 103.181.119.0/24 maxlen: 24 103.184.205.0/24 maxlen: 24 103.204.70.0/24 maxlen: 24 103.206.51.0/24 maxlen: 24 103.206.96.0/23 maxlen: 24 103.216.141.0/24 maxlen: 24 103.232.232.0/22 maxlen: 24 202.4.169.0/24 maxlen: 24 210.79.134.0/24 maxlen: 24 2001:df0:47c0::/48 maxlen: 48 2001:df1:1980::/48 maxlen: 48 2001:df1:d240::/48 maxlen: 48 2001:df1:ed40::/48 maxlen: 48 2001:df2:3ac0::/48 maxlen: 48 2001:df2:3f40::/48 maxlen: 48 2001:df3:1340::/48 maxlen: 48 2400:d660::/32 maxlen: 32 2401:bba0::/32 maxlen: 32 2405:e100:a::/48 maxlen: 48 2405:e100:b::/48 maxlen: 48 2405:e100:c::/48 maxlen: 48 2405:e100:d::/48 maxlen: 48 2405:e100:e::/48 maxlen: 48 2405:e100:f::/48 maxlen: 48 2405:e100:1d::/48 maxlen: 48 2405:e100:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51172 (0xc7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Nov 19 06:47:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=691d67f4-c4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:e9:5e:4a:ad:6b:6d:3f:fd:0d:0e:36:00: cd:4a:6a:d8:70:0e:dc:de:ae:ac:b6:a2:51:4a:80: 97:52:5e:0e:0b:b9:9f:c8:1a:1d:c4:51:55:3a:ac: 45:f7:de:2e:f9:7c:d8:57:6a:96:b8:f6:f4:09:a4: 8d:12:c4:86:83:c8:25:d3:35:c4:5a:ec:cd:0d:8f: 99:1e:c6:24:ed:30:e2:70:c6:b0:0c:5e:4d:29:81: 54:00:45:e8:1f:2b:80:ad:14:87:4a:3d:eb:7e:2a: 23:e6:90:4c:23:bf:9f:74:d1:5d:ca:ba:60:3c:74: 9c:3c:4b:ee:e3:65:70:6a:22:a6:4b:bb:71:7c:55: e1:b0:f5:b1:cc:ea:75:8f:93:51:eb:b3:6c:7a:e3: 20:53:00:cc:da:1d:d2:22:5d:6e:99:b4:54:43:7a: 1d:d7:cd:24:5d:b6:c4:b5:97:3d:b1:d4:dc:53:af: e8:1a:39:9e:83:4d:23:49:d7:01:82:8c:a5:09:d1: a1:55:11:51:9a:79:ab:f5:6a:48:ce:8a:89:c3:30: 44:e2:15:77:b3:f9:bb:c1:b6:03:01:0d:aa:58:d6: f8:0b:14:6b:76:c5:7f:f4:3f:72:b0:7e:6e:69:fb: 85:14:48:25:2a:b7:60:91:f4:5f:41:a8:72:30:f8: 72:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:55:D8:3A:17:54:5B:29:5D:00:14:33:B3:B8:B7:C4:4D:14:BE:96 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9601C2BCC51311F0A146A487C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.240.0/23 43.225.248.0/22 43.228.164.0/23 103.37.98.0/23 103.40.200.0/22 103.54.27.0/24 103.68.21.0/24 103.68.140.0/23 103.69.239.0/24 103.72.196.0/24 103.91.72.0/21 103.92.107.0/24 103.93.39.0/24 103.101.112.0/22 103.113.110.0/23 103.120.108.0/24 103.120.152.0/23 103.124.174.0/24 103.138.9.0/24 103.139.143.0/24 103.154.8.0/23 103.154.56.0/23 103.155.237.0/24 103.156.121.0/24 103.157.188.0/23 103.159.104.0/23 103.160.25.0/24 103.164.140.0/24 103.165.88.0/23 103.167.154.0/23 103.167.182.0/23 103.167.224.0/23 103.167.238.0/23 103.168.60.0/23 103.169.242.0/23 103.170.38.0/23 103.170.84.0/23 103.178.24.0/23 103.178.117.0/24 103.179.50.0/23 103.181.66.0/24 103.181.119.0/24 103.184.205.0/24 103.204.70.0/24 103.206.51.0/24 103.206.96.0/23 103.216.141.0/24 103.232.232.0/22 202.4.169.0/24 210.79.134.0/24 IPv6: 2001:df0:47c0::/48 2001:df1:1980::/48 2001:df1:d240::/48 2001:df1:ed40::/48 2001:df2:3ac0::/48 2001:df2:3f40::/48 2001:df3:1340::/48 2400:d660::/32 2401:bba0::/32 2405:e100:a::-2405:e100:f:ffff:ffff:ffff:ffff:ffff 2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 96:a2:8b:cd:f1:d7:bf:95:7a:02:48:49:a3:06:92:08:36:36: 57:07:e3:43:e6:fc:01:1d:77:e3:f7:5d:08:93:73:d1:5f:41: 73:86:0e:c0:19:cd:7d:84:10:83:24:7e:7e:35:f5:b0:13:2f: 05:82:24:4c:be:af:cc:ac:6c:0a:dd:93:5c:9f:ee:b6:bb:ca: e8:54:69:f2:dc:7a:54:ef:3f:0f:0a:c2:ef:8f:f7:d7:a5:61: 35:c9:dc:01:45:32:4a:b7:0a:af:ed:27:91:c5:95:90:9a:88: 1f:6a:40:af:ab:b9:c1:4b:5f:b9:eb:11:92:5d:5f:15:4f:a9: a5:64:17:5a:5d:b6:2c:ee:c2:eb:32:f6:30:0d:43:ef:0e:96: 20:69:5e:9a:bb:ff:1a:47:8f:0f:f9:c5:5d:1f:08:9c:6b:c3: 6b:78:6a:da:97:59:9f:f7:d8:60:b1:58:1a:92:fa:ec:6f:0c: 4d:2d:1b:fb:0c:76:88:8e:9a:7d:bb:30:d3:75:e5:27:ee:04: ca:86:4d:78:3f:29:8c:c7:2e:83:25:96:5a:90:df:1d:30:eb: f1:33:47:c4:72:e4:56:4d:ef:85:8b:86:ae:b4:fe:2b:13:8e: 13:99:34:b5:29:1b:c4:7e:66:5d:85:db:19:fb:de:37:ab:84: 7f:1d:ab:29 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIDAMfkMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTExOTA2NDcxNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjkxZDY3ZjQtYzRlODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFb6V5KrWttP/0NDjYAzUpq2HAO3N6urLaiUUqAl1JeDgu5n8gaHcRRVTqs RffeLvl82Fdqlrj29AmkjRLEhoPIJdM1xFrszQ2PmR7GJO0w4nDGsAxeTSmBVABF 6B8rgK0Uh0o9634qI+aQTCO/n3TRXcq6YDx0nDxL7uNlcGoipku7cXxV4bD1sczq dY+TUeuzbHrjIFMAzNod0iJdbpm0VEN6HdfNJF22xLWXPbHU3FOv6Bo5noNNI0nX AYKMpQnRoVURUZp5q/VqSM6KicMwROIVd7P5u8G2AwENqljW+AsUa3bFf/Q/crB+ bmn7hRRIJSq3YJH0X0GocjD4chkCAwEAAaOCBEIwggQ+MB0GA1UdDgQWBBQwVdg6 F1RbKV0AFDOzuLfETRS+ljAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk2MDFDMkJD QzUxMzExRjBBMTQ2QTQ4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBygYIKwYBBQUHAQcB Af8EggG5MIIBtTCCATQEAgABMIIBLAMEARt78AMEAivh+AMEASvkpAMEAWclYgME AmcoyAMEAGc2GwMEAGdEFQMEAWdEjAMEAGdF7wMEAGdIxAMEA2dbSAMEAGdcawME AGddJwMEAmdlcAMEAWdxbgMEAGd4bAMEAWd4mAMEAGd8rgMEAGeKCQMEAGeLjwME AWeaCAMEAWeaOAMEAGeb7QMEAGeceQMEAWedvAMEAWefaAMEAGegGQMEAGekjAME AWelWAMEAWenmgMEAWentgMEAWen4AMEAWen7gMEAWeoPAMEAWep8gMEAWeqJgME AWeqVAMEAWeyGAMEAGeydQMEAWezMgMEAGe1QgMEAGe1dwMEAGe4zQMEAGfMRgME AGfOMwMEAWfOYAMEAGfYjQMEAmfo6AMEAMoEqQMEANJPhjB7BAIAAjB1AwcAIAEN 8EfAAwcAIAEN8RmAAwcAIAEN8dJAAwcAIAEN8e1AAwcAIAEN8jrAAwcAIAEN8j9A AwcAIAEN8xNAAwUAJADWYAMFACQBu6AwEgMHASQF4QAACgMHBCQF4QAAADASAwcA JAXhAAAdAwcAJAXhAAAeMA0GCSqGSIb3DQEBCwUAA4IBAQCWoovN8de/lXoCSEmj BpIINjZXB+ND5vwBHXfj910Ik3PRX0Fzhg7AGc19hBCDJH5+NfWwEy8FgiRMvq/M rGwK3ZNcn+62u8roVGny3HpU7z8PCsLvj/fXpWE1ydwBRTJKtwqv7SeRxZWQmogf akCvq7nBS1+56xGSXV8VT6mlZBdaXbYs7sLrMvYwDUPvDpYgaV6au/8aR48P+cVd Hwica8NreGral1mf99hgsVgakvrsbwxNLRv7DHaIjpp9uzDTdeUn7gTKhk14PymM xy6DJZZakN8dMOvxM0fEcuRWTe+Fi4autP4rE44TmTS1KRvEfmZdhdsZ+943q4R/ Hasp -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:23 2025 by rpki-client