This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/CAF0BBBCDB0811F0A3EA0CD881D3641D.roa
File: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (raw, json)
Hash identifier: ewzcoiNaimySvhHJOyKRgxhzXnmqi6m6Eh7TiLS4dlQ=
Subject key identifier: E6:97:7C:33:01:4A:4F:EA:12:38:C1:41:D3:F4:EA:FD:0F:1E:5D:74
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: 0181
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/CAF0BBBCDB0811F0A3EA0CD881D3641D.roa
Signing time: Wed 17 Dec 2025 05:25:26 +0000
ROA not before: Wed 17 Dec 2025 05:25:26 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 17466
IP address blocks: 58.2.0.0/20 maxlen: 20
58.2.16.0/20 maxlen: 20
58.2.16.0/21 maxlen: 21
58.2.16.0/22 maxlen: 22
58.2.20.0/22 maxlen: 22
58.2.32.0/19 maxlen: 19
58.2.128.0/19 maxlen: 19
58.2.192.0/19 maxlen: 19
58.2.224.0/21 maxlen: 21
58.2.232.0/22 maxlen: 22
58.2.240.0/20 maxlen: 20
119.43.0.0/17 maxlen: 17
119.43.128.0/18 maxlen: 18
119.43.192.0/21 maxlen: 21
119.43.205.0/24 maxlen: 24
119.43.206.0/23 maxlen: 23
119.43.208.0/20 maxlen: 20
119.43.224.0/19 maxlen: 19
124.4.0.0/19 maxlen: 19
124.4.32.0/21 maxlen: 21
124.4.40.0/22 maxlen: 22
124.4.44.0/24 maxlen: 24
124.4.45.0/24 maxlen: 24
124.4.46.0/23 maxlen: 23
124.4.48.0/20 maxlen: 20
124.4.64.0/18 maxlen: 18
124.4.120.0/23 maxlen: 24
124.4.122.0/23 maxlen: 24
124.4.128.0/18 maxlen: 18
124.4.192.0/21 maxlen: 21
124.4.204.0/22 maxlen: 22
124.4.208.0/20 maxlen: 20
124.4.252.0/22 maxlen: 22
182.94.0.0/17 maxlen: 17
182.94.128.0/18 maxlen: 18
182.94.192.0/19 maxlen: 19
182.94.224.0/21 maxlen: 21
182.94.232.0/22 maxlen: 22
182.94.236.0/23 maxlen: 24
182.94.238.0/23 maxlen: 24
182.94.240.0/24 maxlen: 24
182.94.241.0/24 maxlen: 24
182.94.242.0/23 maxlen: 23
182.94.244.0/22 maxlen: 22
182.94.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Validity
Not Before: Dec 17 05:25:26 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=69423ec6-9651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:b1:d5:94:bb:a5:ad:43:ba:53:e6:a8:f9:
0e:fa:30:a5:a3:c6:46:28:ba:1a:d9:7d:a6:d9:2e:
2e:96:4f:d9:f0:6f:df:d7:03:2e:56:35:28:9c:cc:
74:c3:4e:a3:56:58:1c:62:4a:6f:c4:ac:cd:1c:1e:
3f:d3:ae:43:24:45:53:38:2f:e4:e4:84:02:0f:97:
b1:36:1e:82:84:d2:1a:a9:fd:2f:ce:a1:6d:79:2b:
90:42:6c:d4:db:e2:c3:e1:6d:48:40:f7:d2:d2:7a:
5e:52:3b:5d:f6:7e:39:ad:cf:a4:33:23:d2:04:19:
d9:76:7b:22:80:65:29:92:50:b4:72:a7:12:6c:04:
1a:bd:45:56:c2:14:60:43:9d:d9:4b:53:57:2e:71:
cc:3c:69:af:fa:f6:e4:3c:c7:a4:79:ba:8a:77:07:
9a:d6:f1:9f:5c:3f:d0:a7:f1:ca:6b:e7:12:02:48:
3c:7a:c2:30:87:41:f0:34:61:67:3c:4c:ac:69:9d:
51:45:ab:1f:1d:0e:84:fb:0f:3c:c5:6e:4b:70:ec:
21:29:14:3e:c0:a7:42:bd:d5:0f:4e:90:59:3a:3b:
bf:36:df:d1:c7:56:19:61:d3:3f:4f:42:eb:ed:c1:
c3:66:81:dd:7a:21:fe:d9:6c:40:01:b0:d9:bb:27:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:97:7C:33:01:4A:4F:EA:12:38:C1:41:D3:F4:EA:FD:0F:1E:5D:74
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/CAF0BBBCDB0811F0A3EA0CD881D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.2.0.0/18
58.2.128.0/19
58.2.192.0-58.2.235.255
58.2.240.0/20
119.43.0.0-119.43.199.255
119.43.205.0-119.43.255.255
124.4.0.0-124.4.199.255
124.4.204.0-124.4.223.255
124.4.252.0/22
182.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:3a:b4:8a:1d:82:ed:75:b3:17:bc:f9:da:fe:49:1f:f3:9c:
f2:19:16:5d:77:21:0a:2a:fd:6c:97:57:bc:9f:40:5b:34:e0:
46:83:44:57:e0:fa:b4:f2:d0:08:89:49:c2:20:4e:ab:84:cf:
69:3f:43:06:43:7b:e6:ae:7f:c7:da:ad:4e:84:ca:fb:7e:b3:
ee:8b:73:cb:b9:c1:6e:e4:c0:06:a5:3b:5c:85:16:e1:99:20:
41:98:50:e9:c9:88:17:2d:28:6e:75:29:40:35:1e:64:36:4c:
37:b6:55:f4:43:32:5e:0e:6f:5e:17:c8:6d:e2:e4:af:15:68:
98:34:df:63:0d:b1:78:af:89:45:46:d0:72:c2:71:fc:53:ec:
6c:6d:fc:88:d1:ef:7e:64:75:6b:af:59:3c:31:50:ed:2b:14:
05:8b:f1:47:79:52:ba:72:7d:7f:4d:6f:06:ab:db:6c:23:00:
35:41:a6:45:ea:44:62:d3:f7:ef:85:02:10:33:de:fc:a4:8e:
ce:13:e6:34:9b:65:24:91:55:ab:e1:2b:e5:de:86:81:75:5e:
e5:32:e0:3e:6e:fc:d6:8e:8f:a9:f2:c6:0c:03:e7:6b:4d:f8:
5f:52:26:24:bf:8a:dc:d5:5e:f6:d5:35:26:28:d1:55:0a:19:
74:53:5f:9d
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC
MTlFRjg0RDMwHhcNMjUxMjE3MDUyNTI2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQyM2VjNi05NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtF2x1ZS7pa1DulPmqPkO+jClo8ZGKLoa2X2m2S4ulk/Z8G/f1wMuVjUonMx0
w06jVlgcYkpvxKzNHB4/065DJEVTOC/k5IQCD5exNh6ChNIaqf0vzqFteSuQQmzU
2+LD4W1IQPfS0npeUjtd9n45rc+kMyPSBBnZdnsigGUpklC0cqcSbAQavUVWwhRg
Q53ZS1NXLnHMPGmv+vbkPMekebqKdwea1vGfXD/Qp/HKa+cSAkg8esIwh0HwNGFn
PEysaZ1RRasfHQ6E+w88xW5LcOwhKRQ+wKdCvdUPTpBZOju/Nt/Rx1YZYdM/T0Lr
7cHDZoHdeiH+2WxAAbDZuyfdZQIDAQABo4IC7zCCAuswHQYDVR0OBBYEFOaXfDMB
Sk/qEjjBQdP06v0PHl10MB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy
MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzVCNDkvNTMxOEExMDgxMjAxMTFFRkFEQzg1MzQ1QzRGOUFFMDIvQ0FGMEJCQkNE
QjA4MTFGMEEzRUEwQ0Q4ODFEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwweQYIKwYBBQUHAQcBAf8E
ajBoMGYEAgABMGADBAY6AgADBAU6AoAwDAMEBjoCwAMEAjoC6AMEBDoC8DALAwMA
dysDBAN3K8AwCwMEAHcrzQMDAncoMAsDAwJ8BAMEA3wEwDAMAwQCfATMAwQFfATA
AwQCfAT8AwMAtl4wDQYJKoZIhvcNAQELBQADggEBAFY6tIodgu11sxe8+dr+SR/z
nPIZFl13IQoq/WyXV7yfQFs04EaDRFfg+rTy0AiJScIgTquEz2k/QwZDe+auf8fa
rU6Eyvt+s+6Lc8u5wW7kwAalO1yFFuGZIEGYUOnJiBctKG51KUA1HmQ2TDe2VfRD
Ml4Ob14XyG3i5K8VaJg032MNsXiviUVG0HLCcfxT7Gxt/IjR735kdWuvWTwxUO0r
FAWL8Ud5UrpyfX9Nbwar22wjADVBpkXqRGLT9++FAhAz3vykjs4T5jSbZSSRVavh
K+XehoF1XuUy4D5u/NaOj6nyxgwD52tN+F9SJiS/itzVXvbVNSYo0VUKGXRTX50=
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:38:21 2025 by rpki-client