This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D10AEBE6DBCE11F0AEB5E93D54641951.roa File: D10AEBE6DBCE11F0AEB5E93D54641951.roa (raw, json) Hash identifier: esV8OZlbi9/XWvfZfCSKXoyyriYIl4zeyIirsBlh8qo= Subject key identifier: 49:1E:CC:86:7C:83:A0:A0:F4:2D:34:0E:15:C4:73:B6:10:64:79:78 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 089A Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D10AEBE6DBCE11F0AEB5E93D54641951.roa Signing time: Thu 18 Dec 2025 05:02:56 +0000 ROA not before: Thu 18 Dec 2025 05:02:56 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 55720 IP address blocks: 14.192.67.0/24 maxlen: 24 14.192.68.0/24 maxlen: 24 14.192.69.0/24 maxlen: 24 43.231.6.0/24 maxlen: 24 43.231.7.0/24 maxlen: 24 45.116.160.0/24 maxlen: 24 45.116.161.0/24 maxlen: 24 45.116.162.0/24 maxlen: 24 45.116.163.0/24 maxlen: 24 45.120.52.0/24 maxlen: 24 45.120.53.0/24 maxlen: 24 45.120.54.0/24 maxlen: 24 45.120.55.0/24 maxlen: 24 61.4.97.0/24 maxlen: 24 61.4.98.0/24 maxlen: 24 61.4.99.0/24 maxlen: 24 61.4.100.0/22 maxlen: 24 61.4.104.0/22 maxlen: 24 61.4.109.0/24 maxlen: 24 61.4.110.0/24 maxlen: 24 103.4.28.0/24 maxlen: 24 103.4.29.0/24 maxlen: 24 103.4.30.0/24 maxlen: 24 103.4.31.0/24 maxlen: 24 103.15.104.0/24 maxlen: 24 103.15.105.0/24 maxlen: 24 103.15.106.0/24 maxlen: 24 103.15.107.0/24 maxlen: 24 103.21.88.0/24 maxlen: 24 103.21.89.0/24 maxlen: 24 103.21.90.0/24 maxlen: 24 103.21.91.0/24 maxlen: 24 103.23.46.0/24 maxlen: 24 103.23.47.0/24 maxlen: 24 103.71.176.0/24 maxlen: 24 103.71.177.0/24 maxlen: 24 103.71.178.0/24 maxlen: 24 103.71.179.0/24 maxlen: 24 103.243.212.0/24 maxlen: 24 103.243.213.0/24 maxlen: 24 103.243.214.0/24 maxlen: 24 103.243.215.0/24 maxlen: 24 103.246.112.0/24 maxlen: 24 103.246.113.0/24 maxlen: 24 103.246.114.0/24 maxlen: 24 118.107.216.0/24 maxlen: 24 118.107.217.0/24 maxlen: 24 118.107.218.0/24 maxlen: 24 118.107.219.0/24 maxlen: 24 118.107.220.0/24 maxlen: 24 118.107.221.0/24 maxlen: 24 118.107.222.0/24 maxlen: 24 118.107.223.0/24 maxlen: 24 150.107.76.0/24 maxlen: 24 150.107.77.0/24 maxlen: 24 150.107.78.0/24 maxlen: 24 150.107.79.0/24 maxlen: 24 202.9.36.0/24 maxlen: 24 202.9.37.0/24 maxlen: 24 202.9.38.0/24 maxlen: 24 202.9.39.0/24 maxlen: 24 202.73.12.0/24 maxlen: 24 202.73.13.0/24 maxlen: 24 202.73.14.0/24 maxlen: 24 202.73.15.0/24 maxlen: 24 202.87.220.0/24 maxlen: 24 202.87.221.0/24 maxlen: 24 202.87.222.0/24 maxlen: 24 202.87.223.0/24 maxlen: 24 223.25.240.0/24 maxlen: 24 223.25.241.0/24 maxlen: 24 223.25.242.0/24 maxlen: 24 223.25.243.0/24 maxlen: 24 223.25.244.0/24 maxlen: 24 223.25.245.0/24 maxlen: 24 223.25.246.0/24 maxlen: 24 223.25.247.0/24 maxlen: 24 2402:9500::/32 maxlen: 32 2402:9500::/48 maxlen: 48 2402:9500:a00::/48 maxlen: 48 2402:9500:b00::/48 maxlen: 48 2402:9500:c00::/48 maxlen: 48 2402:9500:d00::/48 maxlen: 48 2402:9500:1000::/48 maxlen: 48 2402:9500:2000::/48 maxlen: 48 2402:9500:3000::/48 maxlen: 48 2402:9500:4000::/48 maxlen: 48 2402:9500:5000::/48 maxlen: 48 2402:9500:6000::/48 maxlen: 48 2402:9500:7000::/48 maxlen: 48 2402:9500:8000::/48 maxlen: 48 2402:9500:9000::/48 maxlen: 48 2402:9500:e000::/48 maxlen: 48 2402:9500:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 05:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202 (0x89a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Dec 18 05:02:56 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69438b00-afcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:a3:dd:dc:67:17:72:f7:58:91:59:f5:d4: 7a:76:be:2d:cc:77:7e:27:ff:ee:8f:98:6d:d6:e4: 4e:e0:39:f4:aa:0f:50:47:3c:e5:d8:da:55:5d:56: d8:ca:ca:ca:d9:e6:b9:e1:59:84:06:ad:bb:9d:a7: bc:32:72:c0:38:6b:7f:f1:8d:1a:1f:a4:8f:2b:a6: 18:70:c2:43:c3:77:30:50:6b:ed:e8:53:97:f1:ee: 9b:a4:43:07:36:e6:87:02:66:ef:a1:d9:a6:d2:da: b4:57:aa:e5:97:fd:60:29:54:9e:50:99:d1:3c:5f: f8:48:91:ba:c7:17:68:79:f4:23:fd:9a:4f:4f:1d: 5d:00:93:58:98:1f:be:d4:9e:a9:bf:64:41:3c:41: b6:9b:f1:26:4a:79:d9:9b:90:25:e2:b6:01:21:6e: 43:1f:05:5e:4f:14:17:a6:96:5b:9b:c3:8f:1c:38: 97:ed:e0:f2:3c:8c:c9:6e:04:bc:9d:89:bd:91:39: 0c:54:92:8f:3f:12:bf:d5:71:fa:16:ce:9c:29:c0: 00:7f:2b:c1:ae:26:c9:76:e7:1e:c0:cd:d1:6c:a4: e9:64:5e:02:5d:ea:c8:e6:8c:f9:83:0d:f8:f2:00: c1:b1:c4:2a:ac:f0:ad:6a:60:a2:e3:4d:09:53:22: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1E:CC:86:7C:83:A0:A0:F4:2D:34:0E:15:C4:73:B6:10:64:79:78 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D10AEBE6DBCE11F0AEB5E93D54641951.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.67.0-14.192.69.255 43.231.6.0/23 45.116.160.0/22 45.120.52.0/22 61.4.97.0-61.4.107.255 61.4.109.0-61.4.110.255 103.4.28.0/22 103.15.104.0/22 103.21.88.0/22 103.23.46.0/23 103.71.176.0/22 103.243.212.0/22 103.246.112.0-103.246.114.255 118.107.216.0/21 150.107.76.0/22 202.9.36.0/22 202.73.12.0/22 202.87.220.0/22 223.25.240.0/21 IPv6: 2402:9500::/32 Signature Algorithm: sha256WithRSAEncryption a4:ee:d0:e4:57:f5:cd:27:c2:85:71:9d:7b:08:64:6c:dc:35: c4:80:ed:14:cb:d7:c1:e0:bd:5c:72:bc:36:70:32:83:97:ca: 5f:da:3b:08:c0:37:1d:96:3a:e0:bf:14:f1:79:94:6f:da:3c: 27:16:82:79:b3:2f:19:3f:22:ea:ab:9c:db:d5:2f:fe:a1:f3: f3:88:19:61:25:30:29:a6:29:6f:80:1a:06:f2:3a:26:f6:ae: 19:18:39:3a:5b:17:15:5b:44:d3:f5:d4:cf:19:2a:44:e1:66: d1:ab:ec:36:17:15:26:17:2b:4a:fb:49:84:ca:f1:b6:81:a7: f1:81:1e:d4:64:97:f3:2a:f8:66:82:53:13:63:48:a1:43:b8: 4e:ef:a0:92:b1:1e:48:8e:d4:e2:42:ec:da:e2:91:38:c9:f8: e2:0d:44:09:17:c4:84:ee:b6:54:dd:4e:4a:ac:bd:a3:a0:c6: 27:d0:58:74:c2:65:7f:12:c0:f5:59:64:29:26:49:ce:2e:2a: a9:ba:80:ff:d2:c6:cc:48:69:3e:1e:6d:c4:63:33:4a:d7:0d: 55:5d:98:b9:c1:76:d8:c2:87:63:2d:ea:57:f0:30:3f:8e:04: d0:a0:b6:69:c7:b4:78:46:a9:94:b3:d6:39:e5:58:af:7c:33: 1a:dd:b7:13 -----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUxMjE4MDUwMjU2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQzOGIwMC1hZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3Wj3dxnF3L3WJFZ9dR6dr4tzHd+J//uj5ht1uRO4Dn0qg9QRzzl2NpVXVbY ysrK2ea54VmEBq27nae8MnLAOGt/8Y0aH6SPK6YYcMJDw3cwUGvt6FOX8e6bpEMH NuaHAmbvodmm0tq0V6rll/1gKVSeUJnRPF/4SJG6xxdoefQj/ZpPTx1dAJNYmB++ 1J6pv2RBPEG2m/EmSnnZm5Al4rYBIW5DHwVeTxQXppZbm8OPHDiX7eDyPIzJbgS8 nYm9kTkMVJKPPxK/1XH6Fs6cKcAAfyvBribJducewM3RbKTpZF4CXerI5oz5gw34 8gDBscQqrPCtamCi400JUyKwowIDAQABo4IDNTCCAzEwHQYDVR0OBBYEFEkezIZ8 g6Cg9C00DhXEc7YQZHl4MB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvRDEwQUVCRTZE QkNFMTFGMEFFQjVFOTNENTQ2NDE5NTEucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgb4GCCsGAQUFBwEHAQH/ BIGuMIGrMIGZBAIAATCBkjAMAwQADsBDAwQBDsBEAwQBK+cGAwQCLXSgAwQCLXg0 MAwDBAA9BGEDBAI9BGgwDAMEAD0EbQMEAD0EbgMEAmcEHAMEAmcPaAMEAmcVWAME AWcXLgMEAmdHsAMEAmfz1DAMAwQEZ/ZwAwQAZ/ZyAwQDdmvYAwQClmtMAwQCygkk AwQCykkMAwQCylfcAwQD3xnwMA0EAgACMAcDBQAkApUAMA0GCSqGSIb3DQEBCwUA A4IBAQCk7tDkV/XNJ8KFcZ17CGRs3DXEgO0Uy9fB4L1ccrw2cDKDl8pf2jsIwDcd ljrgvxTxeZRv2jwnFoJ5sy8ZPyLqq5zb1S/+ofPziBlhJTAppilvgBoG8jom9q4Z GDk6WxcVW0TT9dTPGSpE4WbRq+w2FxUmFytK+0mEyvG2gafxgR7UZJfzKvhmglMT Y0ihQ7hO76CSsR5IjtTiQuza4pE4yfjiDUQJF8SE7rZU3U5KrL2joMYn0Fh0wmV/ EsD1WWQpJknOLiqpuoD/0sbMSGk+Hm3EYzNK1w1VXZi5wXbYwodjLepX8DA/jgTQ oLZpx7R4RqmUs9Y55VivfDMa3bcT -----END CERTIFICATE-----Generated at Thu Dec 18 20:29:41 2025 by rpki-client