This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa File: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (raw, json) Hash identifier: br5hnwr7X9iQ5fc1Xg9U2WlH0RLjpT/ZZ2U312LM138= Subject key identifier: 6C:A5:64:8D:21:05:F6:F7:4D:EC:F4:95:16:19:7E:55:C8:BA:C9:7F Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 082B Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa Signing time: Tue 30 Dec 2025 12:46:09 +0000 ROA not before: Tue 30 Dec 2025 12:46:09 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 17762 IP address blocks: 27.107.0.0/16 maxlen: 16 27.107.0.0/20 maxlen: 24 27.107.16.0/21 maxlen: 24 27.107.24.0/21 maxlen: 24 27.107.32.0/20 maxlen: 24 27.107.48.0/20 maxlen: 24 27.107.64.0/20 maxlen: 24 27.107.80.0/20 maxlen: 24 27.107.96.0/22 maxlen: 24 27.107.100.0/22 maxlen: 24 27.107.104.0/21 maxlen: 24 27.107.144.0/20 maxlen: 24 27.107.160.0/20 maxlen: 24 27.107.176.0/20 maxlen: 24 27.107.192.0/23 maxlen: 24 27.107.194.0/23 maxlen: 24 27.107.196.0/23 maxlen: 24 27.107.198.0/23 maxlen: 24 27.107.203.0/24 maxlen: 24 27.107.204.0/24 maxlen: 24 27.107.205.0/24 maxlen: 24 27.107.206.0/24 maxlen: 24 27.107.207.0/24 maxlen: 24 27.107.208.0/20 maxlen: 24 27.107.224.0/21 maxlen: 24 27.107.232.0/21 maxlen: 24 27.107.240.0/22 maxlen: 24 27.107.244.0/22 maxlen: 24 49.200.32.0/21 maxlen: 24 49.201.24.0/21 maxlen: 24 49.249.192.0/19 maxlen: 24 103.8.36.0/22 maxlen: 24 115.160.208.0/20 maxlen: 24 182.156.6.0/23 maxlen: 24 182.156.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 13:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Dec 30 12:46:09 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6953c990-dd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:db:66:62:58:35:de:0a:de:00:28:4a:5f: ca:e6:44:9c:54:ec:7b:f0:57:90:05:de:de:b9:0b: 53:65:85:7a:98:00:ce:57:ee:da:55:a3:5b:61:74: 76:56:90:ff:cd:82:30:b4:6f:e3:7d:90:36:c7:47: 3e:93:05:e6:a1:4e:85:c0:69:5a:32:4a:de:d1:91: 25:70:70:44:ed:7c:a1:49:56:14:a0:d0:5e:6d:4a: 67:ef:65:63:3a:c6:a0:f3:1d:fb:f5:c5:c7:b6:70: 7c:d8:16:76:e5:6d:57:62:9b:8e:f0:b4:15:bb:3a: ae:8d:89:c7:b9:c1:47:f7:ef:c4:4d:c6:8c:f8:4f: 58:5f:74:61:b6:47:37:83:de:38:72:24:ad:e4:11: 31:ec:7c:5c:6e:55:f0:7f:28:aa:d9:a7:6b:0f:5c: 0a:b0:d1:c5:39:88:79:f0:bf:24:89:91:f5:00:e1: f0:be:d7:1b:fb:d8:85:a5:f6:26:2f:5a:60:dc:fb: db:64:7a:71:53:d4:c3:10:53:13:ce:5e:e9:74:58: 06:b4:3a:59:15:ae:ef:8a:a4:32:c2:6e:d2:a0:17: 3e:11:f8:f1:44:41:36:15:6c:4f:4e:9f:53:7c:ca: be:e3:17:6a:c7:d4:a8:db:13:a5:24:b0:7f:65:3e: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A5:64:8D:21:05:F6:F7:4D:EC:F4:95:16:19:7E:55:C8:BA:C9:7F X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.107.0.0/16 49.200.32.0/21 49.201.24.0/21 49.249.192.0/19 103.8.36.0/22 115.160.208.0/20 182.156.6.0/23 182.156.20.0/23 Signature Algorithm: sha256WithRSAEncryption 48:14:c3:58:27:de:3c:58:fe:9d:0d:c5:e4:75:85:bd:e9:bb: b8:ae:34:e0:ed:f9:11:c3:fd:fb:16:84:7d:ab:fc:1d:ef:ff: 5a:1e:0c:eb:8d:fd:4e:60:99:1f:75:76:63:87:29:61:b6:29: a6:8b:96:15:23:27:3e:52:8e:e4:84:d1:29:23:b6:e0:e3:35: dc:a6:f4:3a:5c:1f:4a:38:97:d7:bb:ea:64:47:05:6d:42:db: d5:a4:49:a3:e6:d0:5b:cc:20:2c:88:5d:35:04:74:e2:a8:a8: db:57:e4:a1:f1:b2:76:ae:7f:5d:14:e0:62:5d:5b:f0:03:a6: 63:8e:40:ce:f4:b3:16:ce:82:f7:9b:fb:89:6d:c7:5c:bb:28: 0f:b3:92:04:58:bb:0d:c1:52:2b:74:26:5e:c3:e7:fb:f6:f6: 5e:85:02:8f:78:91:4a:84:70:f7:49:59:59:4a:70:de:49:ff: 86:3e:b8:2d:44:18:e6:cf:04:fb:46:25:23:9e:1e:b1:72:94: 40:b9:9e:29:0f:1c:7d:84:e8:95:de:a4:47:13:a1:80:03:da: 8d:82:dc:7b:03:d2:bb:19:4c:97:f2:e6:67:4e:82:ad:fc:c0: 4e:1c:19:a3:a6:81:cd:84:4a:02:d9:99:0d:17:3a:5c:e0:4a: 4a:96:63:74 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUxMjMwMTI0NjA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTUzYzk5MC1kZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA083bZmJYNd4K3gAoSl/K5kScVOx78FeQBd7euQtTZYV6mADOV+7aVaNbYXR2 VpD/zYIwtG/jfZA2x0c+kwXmoU6FwGlaMkre0ZElcHBE7XyhSVYUoNBebUpn72Vj Osag8x379cXHtnB82BZ25W1XYpuO8LQVuzqujYnHucFH9+/ETcaM+E9YX3Rhtkc3 g944ciSt5BEx7HxcblXwfyiq2adrD1wKsNHFOYh58L8kiZH1AOHwvtcb+9iFpfYm L1pg3PvbZHpxU9TDEFMTzl7pdFgGtDpZFa7viqQywm7SoBc+EfjxREE2FWxPTp9T fMq+4xdqx9So2xOlJLB/ZT7NhQIDAQABo4ICvjCCArowHQYDVR0OBBYEFGylZI0h Bfb3Tez0lRYZflXIusl/MB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvMzI0RjkyNkMz QkFDMTFGMDlCRjk4RTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E OTA3MDUEAgABMC8DAwAbawMEAzHIIAMEAzHJGAMEBTH5wAMEAmcIJAMEBHOg0AME AbacBgMEAbacFDANBgkqhkiG9w0BAQsFAAOCAQEASBTDWCfePFj+nQ3F5HWFvem7 uK404O35EcP9+xaEfav8He//Wh4M6439TmCZH3V2Y4cpYbYppouWFSMnPlKO5ITR KSO24OM13Kb0OlwfSjiX17vqZEcFbULb1aRJo+bQW8wgLIhdNQR04qio21fkofGy dq5/XRTgYl1b8AOmY45AzvSzFs6C95v7iW3HXLsoD7OSBFi7DcFSK3QmXsPn+/b2 XoUCj3iRSoRw90lZWUpw3kn/hj64LUQY5s8E+0YlI54esXKUQLmeKQ8cfYTold6k RxOhgAPajYLcewPSuxlMl/LmZ06CrfzAThwZo6aBzYRKAtmZDRc6XOBKSpZjdA== -----END CERTIFICATE-----Generated at Tue Dec 30 20:20:33 2025 by rpki-client