This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA9E0DD4B57911F0834B901BC4F9AE02.roa File: EA9E0DD4B57911F0834B901BC4F9AE02.roa (raw, json) Hash identifier: oW3xBXQIY5Z2uHnIikhpmj5RuBEYvgYtH2ezGfSdOLM= Subject key identifier: 62:96:A9:51:F7:84:BF:70:BD:7B:0C:3E:ED:7A:7C:DF:CF:16:AD:4C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CDEA Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA9E0DD4B57911F0834B901BC4F9AE02.roa Signing time: Sat 17 Jan 2026 09:50:44 +0000 ROA not before: Sat 17 Jan 2026 09:50:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17665 IP address blocks: 36.255.88.0/22 maxlen: 24 43.230.40.0/22 maxlen: 24 45.117.72.0/22 maxlen: 24 45.118.104.0/22 maxlen: 24 59.152.120.0/22 maxlen: 24 103.27.48.0/22 maxlen: 24 103.38.68.0/23 maxlen: 24 103.38.128.0/22 maxlen: 24 103.57.140.0/22 maxlen: 24 103.58.152.0/22 maxlen: 24 103.59.204.0/22 maxlen: 24 103.86.69.0/24 maxlen: 24 103.88.57.0/24 maxlen: 24 103.88.58.0/24 maxlen: 24 103.88.59.0/24 maxlen: 24 103.92.112.0/24 maxlen: 24 103.92.113.0/24 maxlen: 24 103.92.114.0/24 maxlen: 24 103.99.196.0/23 maxlen: 24 103.99.198.0/23 maxlen: 24 103.135.64.0/24 maxlen: 24 103.135.65.0/24 maxlen: 24 103.136.172.0/22 maxlen: 24 103.142.114.0/23 maxlen: 24 103.144.188.0/23 maxlen: 24 103.147.1.0/24 maxlen: 24 103.152.38.0/23 maxlen: 24 103.158.170.0/23 maxlen: 24 103.159.98.0/24 maxlen: 24 103.159.212.0/23 maxlen: 24 103.161.40.0/23 maxlen: 24 103.164.46.0/23 maxlen: 24 103.165.28.0/23 maxlen: 24 103.168.177.0/24 maxlen: 24 103.168.232.0/23 maxlen: 24 103.171.9.0/24 maxlen: 24 103.171.208.0/24 maxlen: 24 103.175.30.0/24 maxlen: 24 103.175.31.0/24 maxlen: 24 103.176.176.0/24 maxlen: 24 103.176.194.0/23 maxlen: 24 103.177.174.0/23 maxlen: 24 103.178.74.0/24 maxlen: 24 103.178.168.0/23 maxlen: 24 103.179.122.0/24 maxlen: 24 103.182.130.0/23 maxlen: 24 103.184.40.0/24 maxlen: 24 103.184.41.0/24 maxlen: 24 103.186.121.0/24 maxlen: 24 103.186.176.0/24 maxlen: 24 103.199.192.0/22 maxlen: 24 103.203.36.0/22 maxlen: 24 103.206.8.0/24 maxlen: 24 103.206.9.0/24 maxlen: 24 103.206.10.0/24 maxlen: 24 103.206.11.0/24 maxlen: 24 103.209.68.0/22 maxlen: 22 103.209.68.0/24 maxlen: 24 103.209.69.0/24 maxlen: 24 103.209.70.0/24 maxlen: 24 103.209.71.0/24 maxlen: 24 103.215.164.0/22 maxlen: 24 103.245.103.0/24 maxlen: 24 111.223.24.0/22 maxlen: 24 157.119.44.0/22 maxlen: 24 162.12.246.0/23 maxlen: 24 202.148.60.0/22 maxlen: 24 203.189.248.0/22 maxlen: 24 203.192.192.0/20 maxlen: 24 203.192.208.0/22 maxlen: 24 203.192.212.0/24 maxlen: 24 203.192.213.0/24 maxlen: 24 203.192.214.0/24 maxlen: 24 203.192.215.0/24 maxlen: 24 203.192.216.0/24 maxlen: 24 203.192.217.0/24 maxlen: 24 203.192.218.0/24 maxlen: 24 203.192.219.0/24 maxlen: 24 203.192.220.0/22 maxlen: 24 203.192.224.0/23 maxlen: 24 203.192.226.0/24 maxlen: 24 203.192.227.0/24 maxlen: 24 203.192.228.0/22 maxlen: 24 203.192.232.0/22 maxlen: 24 203.192.236.0/24 maxlen: 24 203.192.237.0/24 maxlen: 24 203.192.238.0/23 maxlen: 24 203.192.240.0/20 maxlen: 20 203.192.240.0/24 maxlen: 24 203.192.241.0/24 maxlen: 24 203.192.242.0/24 maxlen: 24 203.192.243.0/24 maxlen: 24 203.192.244.0/24 maxlen: 24 203.192.245.0/24 maxlen: 24 203.192.246.0/24 maxlen: 24 203.192.247.0/24 maxlen: 24 203.192.248.0/24 maxlen: 24 203.192.249.0/24 maxlen: 24 203.192.250.0/24 maxlen: 24 203.192.251.0/24 maxlen: 24 203.192.252.0/24 maxlen: 24 203.192.253.0/24 maxlen: 24 203.192.254.0/24 maxlen: 24 203.192.255.0/24 maxlen: 24 203.194.96.0/24 maxlen: 24 203.194.97.0/24 maxlen: 24 203.194.98.0/24 maxlen: 24 203.194.99.0/24 maxlen: 24 203.194.100.0/24 maxlen: 24 203.194.101.0/24 maxlen: 24 203.194.102.0/24 maxlen: 24 203.194.103.0/24 maxlen: 24 203.194.104.0/24 maxlen: 24 203.194.105.0/24 maxlen: 24 203.194.106.0/24 maxlen: 24 203.194.107.0/24 maxlen: 24 203.194.108.0/24 maxlen: 24 203.194.109.0/24 maxlen: 24 203.194.110.0/24 maxlen: 24 203.194.111.0/24 maxlen: 24 2001:df1:9980::/48 maxlen: 48 2001:df1:9980:1::/64 maxlen: 64 2001:df1:9980:2::/64 maxlen: 64 2001:df1:9980:3::/64 maxlen: 64 2001:df1:9980:4::/64 maxlen: 64 2001:df1:9980:5::/64 maxlen: 64 2001:df2:4c0::/48 maxlen: 48 2404:ba00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52714 (0xcdea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 17 09:50:44 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=696b5b73-49c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:58:5a:67:01:4f:1e:63:0f:b6:d4:48:18: 23:98:83:50:6a:39:07:c4:a4:6c:d2:b0:6c:79:71: b5:5e:ee:b9:cc:74:e4:99:dc:19:1f:b7:05:03:c8: 63:68:87:e7:e6:0b:f5:74:c4:bf:56:f1:50:1f:4c: b0:a6:fb:58:c0:37:d3:58:c0:e2:a1:4f:d0:41:b0: c5:5b:b9:51:a5:f7:97:3a:07:56:0a:d1:3f:91:93: 8b:7c:e4:b2:3d:9f:30:14:cd:cf:25:c5:4b:c6:2d: 91:03:31:7a:f7:e4:e5:ca:89:4f:de:ca:5f:6a:bd: ca:c3:91:02:9a:0e:b9:b2:e5:11:64:e1:c6:41:8d: ae:07:60:77:98:e8:ad:8c:e0:7b:21:76:d3:b1:2d: 86:85:a8:2a:d7:bf:3e:99:53:fe:9c:4d:61:f4:6c: 43:2e:d5:a7:e0:92:a7:7f:12:b2:81:28:9f:fc:39: d5:0a:c3:64:dc:fe:37:c7:3e:6d:ae:bf:f3:ea:b7: 49:52:ea:4f:56:13:23:9e:58:9b:c6:fc:4f:82:87: a1:96:96:9a:72:e9:52:34:56:70:4c:b4:00:51:3e: 0c:5f:b4:af:93:32:d6:09:63:2f:fc:2b:1b:4b:1a: 02:a7:24:b3:e7:ee:12:02:52:b9:29:a5:6c:c4:77: fd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:96:A9:51:F7:84:BF:70:BD:7B:0C:3E:ED:7A:7C:DF:CF:16:AD:4C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA9E0DD4B57911F0834B901BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.88.0/22 43.230.40.0/22 45.117.72.0/22 45.118.104.0/22 59.152.120.0/22 103.27.48.0/22 103.38.68.0/23 103.38.128.0/22 103.57.140.0/22 103.58.152.0/22 103.59.204.0/22 103.86.69.0/24 103.88.57.0-103.88.59.255 103.92.112.0-103.92.114.255 103.99.196.0/22 103.135.64.0/23 103.136.172.0/22 103.142.114.0/23 103.144.188.0/23 103.147.1.0/24 103.152.38.0/23 103.158.170.0/23 103.159.98.0/24 103.159.212.0/23 103.161.40.0/23 103.164.46.0/23 103.165.28.0/23 103.168.177.0/24 103.168.232.0/23 103.171.9.0/24 103.171.208.0/24 103.175.30.0/23 103.176.176.0/24 103.176.194.0/23 103.177.174.0/23 103.178.74.0/24 103.178.168.0/23 103.179.122.0/24 103.182.130.0/23 103.184.40.0/23 103.186.121.0/24 103.186.176.0/24 103.199.192.0/22 103.203.36.0/22 103.206.8.0/22 103.209.68.0/22 103.215.164.0/22 103.245.103.0/24 111.223.24.0/22 157.119.44.0/22 162.12.246.0/23 202.148.60.0/22 203.189.248.0/22 203.192.192.0/18 203.194.96.0/20 IPv6: 2001:df1:9980::/48 2001:df2:4c0::/48 2404:ba00::/32 Signature Algorithm: sha256WithRSAEncryption 3a:f0:02:95:e9:24:fc:20:81:1b:0e:70:92:e5:ae:a8:02:a7: 1a:6b:e3:63:9f:74:ad:68:53:82:1f:34:a6:13:f8:f0:1a:0f: e7:5c:9f:a7:d5:2e:c7:51:bd:d7:d5:49:51:fd:fc:0a:39:81: 62:ca:d9:9f:8e:c0:1a:2a:e7:c0:13:c2:b4:28:73:34:6f:30: 7c:16:d0:2d:8e:90:ac:de:23:cd:a0:7e:a6:38:23:39:cc:d2: cf:d4:d5:a3:e5:a3:e8:db:39:cb:49:eb:ef:18:a8:0b:cf:80: 42:d3:fd:3b:5d:84:11:3b:6e:76:35:70:59:78:ad:01:58:dc: c8:ee:ef:70:bf:24:e0:a0:0d:b6:de:c9:ec:a3:50:f6:d5:5a: 0c:37:16:15:ca:da:32:27:66:47:40:88:48:18:f8:de:b6:1f: 6b:93:af:f8:ec:5f:7c:7d:be:94:94:c0:37:c3:1d:cd:27:c5: 66:f9:45:b9:59:e8:85:68:46:3d:2d:f7:88:f2:8b:4c:e1:fe: 19:aa:69:98:18:a7:e1:66:a1:8e:e3:74:79:ac:b6:18:4a:4b: d0:e9:90:6d:9b:71:c2:b1:58:59:6b:5c:e7:13:3b:aa:af:8d: 5a:19:af:50:7c:20:d2:ec:26:f0:89:b2:aa:d7:df:ef:14:2b: 9c:7e:0c:6b -----BEGIN CERTIFICATE----- MIIG8TCCBdmgAwIBAgIDAM3qMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDExNzA5NTA0NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk2YjViNzMtNDljMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKTnWFpnAU8eYw+21EgYI5iDUGo5B8SkbNKwbHlxtV7uucx05JncGR+3BQPI Y2iH5+YL9XTEv1bxUB9MsKb7WMA301jA4qFP0EGwxVu5UaX3lzoHVgrRP5GTi3zk sj2fMBTNzyXFS8YtkQMxevfk5cqJT97KX2q9ysORApoOubLlEWThxkGNrgdgd5jo rYzgeyF207EthoWoKte/PplT/pxNYfRsQy7Vp+CSp38SsoEon/w51QrDZNz+N8c+ ba6/8+q3SVLqT1YTI55Ym8b8T4KHoZaWmnLpUjRWcEy0AFE+DF+0r5My1gljL/wr G0saAqcks+fuEgJSuSmlbMR3/QMCAwEAAaOCBBQwggQQMB0GA1UdDgQWBBRilqlR 94S/cL17DD7tenzfzxatTDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VBOUUwREQ0 QjU3OTExRjA4MzRCOTAxQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBnAYIKwYBBQUHAQcB Af8EggGLMIIBhzCCAWIEAgABMIIBWgMEAiT/WAMEAivmKAMEAi11SAMEAi12aAME AjuYeAMEAmcbMAMEAWcmRAMEAmcmgAMEAmc5jAMEAmc6mAMEAmc7zAMEAGdWRTAM AwQAZ1g5AwQCZ1g4MAwDBARnXHADBABnXHIDBAJnY8QDBAFnh0ADBAJniKwDBAFn jnIDBAFnkLwDBABnkwEDBAFnmCYDBAFnnqoDBABnn2IDBAFnn9QDBAFnoSgDBAFn pC4DBAFnpRwDBABnqLEDBAFnqOgDBABnqwkDBABnq9ADBAFnrx4DBABnsLADBAFn sMIDBAFnsa4DBABnskoDBAFnsqgDBABns3oDBAFntoIDBAFnuCgDBABnunkDBABn urADBAJnx8ADBAJnyyQDBAJnzggDBAJn0UQDBAJn16QDBABn9WcDBAJv3xgDBAKd dywDBAGiDPYDBALKlDwDBALLvfgDBAbLwMADBATLwmAwHwQCAAIwGQMHACABDfGZ gAMHACABDfIEwAMFACQEugAwDQYJKoZIhvcNAQELBQADggEBADrwApXpJPwggRsO cJLlrqgCpxpr42OfdK1oU4IfNKYT+PAaD+dcn6fVLsdRvdfVSVH9/Ao5gWLK2Z+O wBoq58ATwrQoczRvMHwW0C2OkKzeI82gfqY4IznM0s/U1aPlo+jbOctJ6+8YqAvP gELT/TtdhBE7bnY1cFl4rQFY3Mju73C/JOCgDbbeyeyjUPbVWgw3FhXK2jInZkdA iEgY+N62H2uTr/jsX3x9vpSUwDfDHc0nxWb5RblZ6IVoRj0t94jyi0zh/hmqaZgY p+FmoY7jdHmsthhKS9DpkG2bccKxWFlrXOcTO6qvjVoZr1B8INLsJvCJsqrX3+8U K5x+DGs= -----END CERTIFICATE-----Generated at Mon Jan 19 23:26:02 2026 by rpki-client