This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/B305D4F4D4D911F0990CAE1CC4F9AE02.roa File: B305D4F4D4D911F0990CAE1CC4F9AE02.roa (raw, json) Hash identifier: 3rMjBsa+hGT6tnwF5tmSEOO63Z0+yXyvvDuHyzu4Ing= Subject key identifier: 9F:46:AF:05:BF:90:85:21:5A:73:E7:90:8A:81:AF:E3:EB:41:D2:67 Certificate issuer: /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Certificate serial: 3531 Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/B305D4F4D4D911F0990CAE1CC4F9AE02.roa Signing time: Tue 09 Dec 2025 08:33:12 +0000 ROA not before: Tue 09 Dec 2025 08:33:12 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9892 IP address blocks: 114.129.33.0/24 maxlen: 24 114.129.36.0/22 maxlen: 22 114.129.36.0/24 maxlen: 24 114.129.38.0/24 maxlen: 24 114.129.40.0/23 maxlen: 23 114.129.41.0/24 maxlen: 24 114.129.45.0/24 maxlen: 24 114.129.46.0/24 maxlen: 24 114.129.47.0/24 maxlen: 24 123.100.235.0/24 maxlen: 24 123.100.236.0/22 maxlen: 22 123.100.236.0/24 maxlen: 24 123.100.237.0/24 maxlen: 24 123.100.238.0/23 maxlen: 23 123.100.241.0/24 maxlen: 24 123.100.244.0/23 maxlen: 23 123.100.244.0/24 maxlen: 24 123.100.245.0/24 maxlen: 24 123.100.251.0/24 maxlen: 24 123.100.252.0/24 maxlen: 24 202.157.128.0/21 maxlen: 21 202.157.136.0/22 maxlen: 22 202.157.142.0/23 maxlen: 23 202.157.148.0/24 maxlen: 24 202.157.152.0/24 maxlen: 24 202.157.160.0/20 maxlen: 20 202.157.160.0/21 maxlen: 21 202.157.168.0/21 maxlen: 21 202.160.120.0/24 maxlen: 24 202.160.121.0/24 maxlen: 24 202.160.122.0/24 maxlen: 24 202.160.123.0/24 maxlen: 24 203.142.16.0/21 maxlen: 21 203.142.27.0/24 maxlen: 24 2404:4800::/48 maxlen: 48 2404:4800:1::/48 maxlen: 48 2404:4800:2::/48 maxlen: 48 2404:4800:3::/48 maxlen: 48 2404:4800:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13617 (0x3531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405 Validity Not Before: Dec 9 08:33:12 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6937dec8-f677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:9b:28:e7:ce:f1:06:a3:28:65:b4:26:2a: 43:97:5d:43:5e:bd:cc:74:a3:da:82:ed:eb:19:27: 6f:1d:e0:9a:b2:d8:8f:bc:21:bc:99:c3:8e:05:76: 8f:f0:78:11:a2:dc:73:00:72:ef:5e:81:b7:a8:a1: 28:c0:c6:97:36:a2:65:83:e1:1f:d3:77:e2:27:d3: 7a:30:e3:1a:e8:f1:d2:e1:fa:22:11:d0:8f:ab:64: 94:9c:c5:0c:31:ae:6c:1f:d0:56:e9:51:c9:63:c8: bd:08:f0:93:79:d9:cd:2e:40:86:69:0a:aa:21:72: 71:e4:01:12:b1:bd:84:e0:0f:4f:79:44:4c:57:74: 16:a7:11:9e:c6:95:25:66:0b:c2:95:19:75:84:28: 12:67:b6:bf:d2:45:19:58:89:21:9f:a3:80:6b:fa: e5:37:3b:49:0b:6b:68:c8:93:b1:49:41:b0:5a:43: 20:aa:f5:77:56:c6:f6:c4:ee:e0:1f:93:31:82:c6: 49:aa:cc:c8:13:ce:90:2a:d1:d4:58:e5:fc:bb:43: af:c0:ff:ec:cd:48:42:bd:82:b8:78:e8:ac:7e:aa: a8:5a:31:8d:1b:98:53:13:5a:ca:52:0b:29:b1:3b: 9c:56:4f:e1:97:e8:a4:a9:d4:04:c5:37:18:35:4a: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:46:AF:05:BF:90:85:21:5A:73:E7:90:8A:81:AF:E3:EB:41:D2:67 X509v3 Authority Key Identifier: keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/B305D4F4D4D911F0990CAE1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.129.33.0/24 114.129.36.0-114.129.41.255 114.129.45.0-114.129.47.255 123.100.235.0-123.100.239.255 123.100.241.0/24 123.100.244.0/23 123.100.251.0-123.100.252.255 202.157.128.0-202.157.139.255 202.157.142.0/23 202.157.148.0/24 202.157.152.0/24 202.157.160.0/20 202.160.120.0/22 203.142.16.0/21 203.142.27.0/24 IPv6: 2404:4800::/46 2404:4800:20::/48 Signature Algorithm: sha256WithRSAEncryption 14:6b:ee:8b:fd:4d:5a:1b:7a:42:be:a0:19:09:88:04:72:97: 50:61:5a:46:02:27:8b:f2:71:49:39:03:1c:79:9f:2b:17:c7: b4:13:2f:92:98:cc:57:9b:0c:51:34:ff:82:5b:d3:47:d7:b2: f7:eb:c3:01:f1:e2:05:6e:0b:79:03:72:c3:fa:23:f5:1d:b1: d9:24:af:45:dc:7c:6f:fb:4c:4a:6a:c5:97:73:e4:8b:48:81: 06:b9:f8:b7:4e:8f:10:40:be:55:f7:a0:0d:14:64:9d:ba:09: e8:5f:9c:87:74:1a:62:c6:0c:8a:ca:4a:f0:38:95:6d:b0:d5: a4:0b:d7:8c:74:dc:11:b3:ac:90:78:e1:d2:23:af:a8:90:17: ee:bf:95:9f:83:40:cd:0d:5c:c3:db:22:15:a3:43:ec:a8:03: 6e:5b:5b:86:44:f3:0e:d7:5c:ca:eb:12:b2:46:52:2f:78:31: be:47:33:46:79:e8:f8:4d:a2:e7:ec:73:c8:bc:64:2d:9b:67: c2:44:58:12:56:5f:36:51:c1:6a:f4:20:16:ca:75:ec:f1:69: 16:0b:de:30:e8:a8:0a:e7:5a:3c:29:a9:d4:24:db:66:a0:a5: 8b:8f:f1:ec:7d:29:38:fa:24:37:50:cc:c2:a3:01:c7:1a:65: f6:0f:d2:db -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgICNTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJDRkMxMTAvBgNVBAUTKDgwMjdFMEVGNTREMDBCNjFGNzEzNkYwOTcxOUJGQ0Y0 QzQ1MzM0MDUwHhcNMjUxMjA5MDgzMzEyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3ZGVjOC1mNjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yGbKOfO8QajKGW0JipDl11DXr3MdKPagu3rGSdvHeCastiPvCG8mcOOBXaP 8HgRotxzAHLvXoG3qKEowMaXNqJlg+Ef03fiJ9N6MOMa6PHS4foiEdCPq2SUnMUM Ma5sH9BW6VHJY8i9CPCTednNLkCGaQqqIXJx5AESsb2E4A9PeURMV3QWpxGexpUl ZgvClRl1hCgSZ7a/0kUZWIkhn6OAa/rlNztJC2toyJOxSUGwWkMgqvV3Vsb2xO7g H5MxgsZJqszIE86QKtHUWOX8u0OvwP/szUhCvYK4eOisfqqoWjGNG5hTE1rKUgsp sTucVk/hl+ikqdQExTcYNUrNMwIDAQABo4IDMDCCAywwHQYDVR0OBBYEFJ9GrwW/ kIUhWnPnkIqBr+PrQdJnMB8GA1UdIwQYMBaAFIAn4O9U0Ath9xNvCXGb/PTEUzQF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkNGQy9CRjg0QjU3NDFE ODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMySDNFMjhKY1p2ODlNUlRO QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDZmc3MVRRQzJIM0UyOEpjWnY4OU1SVE5BVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODJDRkMvQkY4NEI1NzQxRDg2MTFFMkE3NjM0NERFMDhCMDJDRDIvQjMwNUQ0RjRE NEQ5MTFGMDk5MENBRTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbkGCCsGAQUFBwEHAQH/ BIGpMIGmMIGJBAIAATCBggMEAHKBITAMAwQCcoEkAwQBcoEoMAwDBABygS0DBARy gSAwDAMEAHtk6wMEBHtk4AMEAHtk8QMEAXtk9DAMAwQAe2T7AwQAe2T8MAwDBAfK nYADBALKnYgDBAHKnY4DBADKnZQDBADKnZgDBATKnaADBALKoHgDBAPLjhADBADL jhswGAQCAAIwEgMHAiQESAAAAAMHACQESAAAIDANBgkqhkiG9w0BAQsFAAOCAQEA FGvui/1NWht6Qr6gGQmIBHKXUGFaRgIni/JxSTkDHHmfKxfHtBMvkpjMV5sMUTT/ glvTR9ey9+vDAfHiBW4LeQNyw/oj9R2x2SSvRdx8b/tMSmrFl3Pki0iBBrn4t06P EEC+VfegDRRknboJ6F+ch3QaYsYMispK8DiVbbDVpAvXjHTcEbOskHjh0iOvqJAX 7r+Vn4NAzQ1cw9siFaND7KgDbltbhkTzDtdcyusSskZSL3gxvkczRnno+E2i5+xz yLxkLZtnwkRYElZfNlHBavQgFsp17PFpFgveMOioCudaPCmp1CTbZqCli4/x7H0p OPokN1DMwqMBxxpl9g/S2w== -----END CERTIFICATE-----Generated at Fri Dec 19 17:28:20 2025 by rpki-client