This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa File: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (raw, json) Hash identifier: UGq+JUcju28obC/yCTlpFMjzph+6cUj/s9U2aEaPniY= Subject key identifier: F1:67:D3:C4:98:77:AE:B4:6C:C5:57:24:8A:4B:11:94:A1:0E:A3:52 Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: 0207 Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa Signing time: Thu 20 Nov 2025 07:06:52 +0000 ROA not before: Thu 20 Nov 2025 07:06:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132280 IP address blocks: 96.30.64.0/22 maxlen: 22 96.30.72.0/21 maxlen: 21 96.30.74.0/23 maxlen: 24 96.30.76.0/23 maxlen: 24 96.30.80.0/22 maxlen: 22 96.30.83.0/24 maxlen: 24 96.30.88.0/23 maxlen: 24 96.30.90.0/23 maxlen: 24 96.30.92.0/22 maxlen: 22 96.30.93.0/24 maxlen: 24 96.30.94.0/23 maxlen: 23 96.30.96.0/22 maxlen: 23 96.30.97.0/24 maxlen: 24 96.30.104.0/23 maxlen: 24 96.30.106.0/24 maxlen: 24 96.30.110.0/24 maxlen: 24 96.30.113.0/24 maxlen: 24 96.30.114.0/23 maxlen: 24 96.30.116.0/22 maxlen: 23 96.30.116.0/24 maxlen: 24 96.30.120.0/23 maxlen: 23 96.30.120.0/24 maxlen: 24 96.30.123.0/24 maxlen: 24 96.30.124.0/24 maxlen: 24 96.30.125.0/24 maxlen: 24 96.30.126.0/23 maxlen: 24 146.88.32.0/20 maxlen: 21 146.88.32.0/22 maxlen: 22 146.88.32.0/24 maxlen: 24 146.88.33.0/24 maxlen: 24 146.88.40.0/24 maxlen: 24 146.88.48.0/22 maxlen: 23 146.88.56.0/23 maxlen: 24 146.88.58.0/24 maxlen: 24 146.88.59.0/24 maxlen: 24 146.88.60.0/24 maxlen: 24 146.88.61.0/24 maxlen: 24 146.88.62.0/24 maxlen: 24 146.88.63.0/24 maxlen: 24 161.82.128.0/17 maxlen: 19 161.82.128.0/21 maxlen: 22 161.82.135.0/24 maxlen: 24 161.82.136.0/21 maxlen: 22 161.82.138.0/24 maxlen: 24 161.82.142.0/24 maxlen: 24 161.82.144.0/21 maxlen: 22 161.82.146.0/24 maxlen: 24 161.82.152.0/21 maxlen: 22 161.82.156.0/24 maxlen: 24 161.82.157.0/24 maxlen: 24 161.82.160.0/21 maxlen: 22 161.82.164.0/24 maxlen: 24 161.82.168.0/21 maxlen: 22 161.82.173.0/24 maxlen: 24 161.82.176.0/21 maxlen: 22 161.82.180.0/24 maxlen: 24 161.82.182.0/24 maxlen: 24 161.82.184.0/21 maxlen: 22 161.82.189.0/24 maxlen: 24 161.82.192.0/21 maxlen: 22 161.82.197.0/24 maxlen: 24 161.82.200.0/21 maxlen: 22 161.82.203.0/24 maxlen: 24 161.82.204.0/24 maxlen: 24 161.82.208.0/21 maxlen: 22 161.82.208.0/24 maxlen: 24 161.82.210.0/24 maxlen: 24 161.82.211.0/24 maxlen: 24 161.82.212.0/24 maxlen: 24 161.82.213.0/24 maxlen: 24 161.82.214.0/24 maxlen: 24 161.82.216.0/21 maxlen: 22 161.82.216.0/24 maxlen: 24 161.82.220.0/24 maxlen: 24 161.82.221.0/24 maxlen: 24 161.82.222.0/24 maxlen: 24 161.82.223.0/24 maxlen: 24 161.82.224.0/19 maxlen: 22 161.82.226.0/24 maxlen: 24 161.82.233.0/24 maxlen: 24 161.82.237.0/24 maxlen: 24 161.82.246.0/24 maxlen: 24 161.82.248.0/24 maxlen: 24 161.82.249.0/24 maxlen: 24 161.82.250.0/24 maxlen: 24 161.82.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: Nov 20 07:06:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=691ebe0c-b5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:a2:0e:99:d5:9e:d2:7d:7a:0e:41:d1:1d: f6:0a:dd:7d:f5:80:c0:33:11:37:b1:da:fe:aa:b6: 62:64:0f:85:d6:7a:31:22:e4:2e:de:48:38:58:63: 82:69:3c:c2:47:21:02:28:9a:fb:28:6e:66:e3:d3: 1a:ec:04:3b:d8:8d:53:01:10:80:ba:4c:37:be:46: 0c:99:0c:6e:19:8d:75:48:ae:a7:07:81:a8:c8:55: d9:16:be:61:22:8a:45:1f:12:33:08:c9:c8:2c:3e: 6e:4c:dd:52:6a:31:f0:61:b6:c9:5a:ca:0a:5d:78: 97:ef:98:9a:26:13:93:c2:7f:25:19:4c:d8:27:94: 44:8d:22:d9:ed:cc:e1:ea:92:50:22:11:f5:90:e3: c8:d4:f2:ba:85:f7:1b:8f:a1:1d:d4:e3:1f:ec:8a: 57:2c:2d:08:69:f8:c2:6f:c3:2e:6b:83:07:b8:fb: c3:79:54:ef:8a:1e:92:c7:b5:7f:07:19:88:1f:ed: 83:db:99:8d:c1:25:94:0b:82:b8:46:4f:bf:40:17: c9:77:52:5b:db:66:b7:ee:18:27:24:20:c0:ff:52: 1f:3f:fc:74:36:7e:81:04:fd:9e:61:da:15:74:d0: dd:22:1d:90:7d:a4:f0:b6:6d:51:3c:25:d2:6b:9b: ef:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:67:D3:C4:98:77:AE:B4:6C:C5:57:24:8A:4B:11:94:A1:0E:A3:52 X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 96.30.64.0/22 96.30.72.0-96.30.83.255 96.30.88.0-96.30.99.255 96.30.104.0-96.30.106.255 96.30.110.0/24 96.30.113.0-96.30.121.255 96.30.123.0-96.30.127.255 146.88.32.0-146.88.51.255 146.88.56.0/21 161.82.128.0/17 Signature Algorithm: sha256WithRSAEncryption 92:65:03:6b:28:b8:e0:49:6c:2a:84:31:b9:86:f2:91:e3:a0: 64:30:cc:41:3a:99:30:79:d4:89:b8:6c:89:7f:31:fb:8d:90: 59:ab:a8:eb:df:c6:15:c1:4f:0e:d9:56:4a:cc:fe:69:fe:0e: 03:d7:20:70:1b:85:9e:1d:eb:09:b7:57:d9:4f:07:78:55:a0: cf:e7:a8:5f:c9:d5:9c:4d:76:60:91:00:cd:00:ba:5b:a1:dc: 47:14:e2:ca:ab:98:68:3f:73:38:cc:04:50:28:e0:a9:17:ea: 12:aa:e4:24:10:aa:87:c6:f4:c3:36:5e:f5:b3:98:a9:2a:d1: ed:13:fd:09:5a:5d:95:f0:1e:06:1d:e4:22:88:aa:93:5d:62: ae:86:92:f3:89:1a:c5:c8:59:ea:c6:eb:d2:cf:63:8b:88:63: 3d:5f:69:2a:0c:f4:5d:5e:36:f2:ac:b2:92:c5:db:88:ce:77: 64:fb:89:91:ce:d2:8b:ac:aa:c5:49:d3:db:3f:64:03:6c:4d: 45:c8:c4:c9:1a:70:13:65:96:31:04:7e:8d:5f:79:a7:00:25: ac:0f:ed:25:25:c9:d9:8a:0f:7a:35:21:c7:e4:2d:ca:4a:a3: 1d:a7:a9:56:c6:70:79:c5:69:8a:22:a6:f7:a2:76:3b:c2:47: 8d:16:85:2a -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjUxMTIwMDcwNjUyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFlYmUwYy1iNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CqiDpnVntJ9eg5B0R32Ct199YDAMxE3sdr+qrZiZA+F1noxIuQu3kg4WGOC aTzCRyECKJr7KG5m49Ma7AQ72I1TARCAukw3vkYMmQxuGY11SK6nB4GoyFXZFr5h IopFHxIzCMnILD5uTN1SajHwYbbJWsoKXXiX75iaJhOTwn8lGUzYJ5REjSLZ7czh 6pJQIhH1kOPI1PK6hfcbj6Ed1OMf7IpXLC0IafjCb8Mua4MHuPvDeVTvih6Sx7V/ BxmIH+2D25mNwSWUC4K4Rk+/QBfJd1Jb22a37hgnJCDA/1IfP/x0Nn6BBP2eYdoV dNDdIh2QfaTwtm1RPCXSa5vvAQIDAQABo4IC/DCCAvgwHQYDVR0OBBYEFPFn08SY d660bMVXJIpLEZShDqNSMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQUVDMEM4NDI4 QzU4MTFFRkEwRThFODU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYUGCCsGAQUFBwEHAQH/ BHYwdDByBAIAATBsAwQCYB5AMAwDBANgHkgDBAJgHlAwDAMEA2AeWAMEAmAeYDAM AwQDYB5oAwQAYB5qAwQAYB5uMAwDBABgHnEDBAFgHngwDAMEAGAeewMEB2AeADAM AwQFklggAwQCklgwAwQDklg4AwQHoVKAMA0GCSqGSIb3DQEBCwUAA4IBAQCSZQNr KLjgSWwqhDG5hvKR46BkMMxBOpkwedSJuGyJfzH7jZBZq6jr38YVwU8O2VZKzP5p /g4D1yBwG4WeHesJt1fZTwd4VaDP56hfydWcTXZgkQDNALpbodxHFOLKq5hoP3M4 zARQKOCpF+oSquQkEKqHxvTDNl71s5ipKtHtE/0JWl2V8B4GHeQiiKqTXWKuhpLz iRrFyFnqxuvSz2OLiGM9X2kqDPRdXjbyrLKSxduIzndk+4mRztKLrKrFSdPbP2QD bE1FyMTJGnATZZYxBH6NX3mnACWsD+0lJcnZig96NSHH5C3KSqMdp6lWxnB5xWmK Iqb3onY7wkeNFoUq -----END CERTIFICATE-----Generated at Sun Dec 7 17:19:39 2025 by rpki-client