This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A19F314DBD111F0B3A7088354641951.roa File: 8A19F314DBD111F0B3A7088354641951.roa (raw, json) Hash identifier: YuM9BZPvQF4FhRaID2/t49txa8AX8ShVNs/cBJ09xHc= Subject key identifier: 96:1B:BC:E8:C8:E7:B5:23:BD:CD:79:7F:32:21:3D:44:F9:BD:5C:5B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CB7D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A19F314DBD111F0B3A7088354641951.roa Signing time: Thu 18 Dec 2025 05:22:26 +0000 ROA not before: Thu 18 Dec 2025 05:22:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151734 IP address blocks: 36.50.82.0/24 maxlen: 24 43.250.252.0/24 maxlen: 24 43.250.254.0/24 maxlen: 24 43.250.255.0/24 maxlen: 24 103.76.122.0/24 maxlen: 24 103.76.123.0/24 maxlen: 24 103.98.53.0/24 maxlen: 24 103.99.36.0/22 maxlen: 24 103.109.180.0/22 maxlen: 24 103.111.228.0/23 maxlen: 24 103.118.180.0/22 maxlen: 24 103.170.58.0/23 maxlen: 24 103.171.174.0/23 maxlen: 24 103.173.99.0/24 maxlen: 24 103.178.59.0/24 maxlen: 24 103.178.160.0/23 maxlen: 24 103.178.166.0/23 maxlen: 24 103.179.94.0/23 maxlen: 24 103.180.110.0/23 maxlen: 24 103.180.172.0/23 maxlen: 24 103.180.176.0/23 maxlen: 24 103.180.212.0/23 maxlen: 24 103.180.236.0/23 maxlen: 24 103.181.114.0/23 maxlen: 24 103.181.198.0/23 maxlen: 24 103.204.169.0/24 maxlen: 24 103.211.56.0/24 maxlen: 24 103.212.136.0/23 maxlen: 24 150.242.200.0/22 maxlen: 24 163.227.190.0/24 maxlen: 24 2001:df2:1c40::/48 maxlen: 48 2401:7ee0::/48 maxlen: 48 2401:7ee0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 12:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52093 (0xcb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 18 05:22:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69438f92-08d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:0f:10:fe:88:2c:d5:01:b4:dd:00:1f:a7: 41:1a:62:69:55:1a:e1:bb:32:84:1a:92:b1:87:30: 8e:ca:25:f7:94:07:2d:10:5c:6f:bf:b7:9b:ec:01: af:b1:e9:f2:cd:03:77:ad:4f:13:d9:e0:1a:c3:f6: 90:34:9f:f8:61:8e:1c:65:f9:34:70:24:89:f6:40: 74:29:2b:f9:67:c0:e2:d0:c9:45:3a:08:9d:72:25: 88:3e:b1:4d:ef:59:da:27:82:e2:92:00:0b:8f:1c: 3c:bb:7b:de:1f:70:8b:8c:e9:15:1a:4d:cf:2b:3f: 20:f6:d6:55:19:1e:24:18:d4:22:95:31:0c:1f:84: 44:ee:c5:4c:b7:a4:af:02:94:bc:15:44:b4:ee:5a: 85:b6:d4:ed:57:f2:da:d2:17:d1:bc:20:81:d0:e3: f5:48:8f:6b:0a:59:97:65:30:bc:22:c5:99:08:23: 6b:68:8f:48:bb:b0:d3:6b:1c:f2:1a:d3:57:90:ef: 46:08:8c:e1:45:e4:8c:62:95:5c:66:15:c7:20:7c: 54:f9:89:e3:42:85:1c:66:de:ba:fc:71:77:d5:31: 3d:a9:ff:66:2f:a9:49:63:85:8a:fe:b1:99:2f:9c: 9d:89:07:71:44:08:94:9c:42:af:da:43:f8:9f:74: 6d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1B:BC:E8:C8:E7:B5:23:BD:CD:79:7F:32:21:3D:44:F9:BD:5C:5B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A19F314DBD111F0B3A7088354641951.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.82.0/24 43.250.252.0/24 43.250.254.0/23 103.76.122.0/23 103.98.53.0/24 103.99.36.0/22 103.109.180.0/22 103.111.228.0/23 103.118.180.0/22 103.170.58.0/23 103.171.174.0/23 103.173.99.0/24 103.178.59.0/24 103.178.160.0/23 103.178.166.0/23 103.179.94.0/23 103.180.110.0/23 103.180.172.0/23 103.180.176.0/23 103.180.212.0/23 103.180.236.0/23 103.181.114.0/23 103.181.198.0/23 103.204.169.0/24 103.211.56.0/24 103.212.136.0/23 150.242.200.0/22 163.227.190.0/24 IPv6: 2001:df2:1c40::/48 2401:7ee0::/47 Signature Algorithm: sha256WithRSAEncryption 34:0d:a7:9d:b3:82:8e:37:c1:db:2a:c9:a3:95:6c:1b:b5:89: 7b:91:4b:88:e7:98:91:b7:83:a6:b2:a4:b0:ff:dc:2c:49:dc: 51:ba:b8:5a:a2:4c:ef:63:c0:e9:0b:1a:8c:a2:d9:ab:44:93: a3:a2:4f:f3:43:b5:1f:81:9d:c8:8a:de:c2:c9:34:50:b7:6f: 6a:c8:db:0c:d6:25:92:1f:02:f3:63:7b:de:4a:a0:bc:dc:a8: 4c:e1:72:17:74:4d:44:fa:75:45:f4:ad:2a:ac:2a:d8:56:bc: 3b:3c:bc:5b:f3:20:2c:aa:e0:e0:cf:7d:cb:ff:f2:3d:15:11: f5:f3:53:6d:3d:ab:73:cb:b7:bb:53:9f:99:dc:cd:a7:91:54: 7b:49:f5:bb:0e:88:79:52:21:13:0d:48:0d:60:ca:b6:a0:70: 46:dc:4b:57:b2:8e:39:8f:e8:36:47:ef:2a:be:5a:99:70:ae: 37:e9:5c:06:f8:c1:bb:2e:f3:38:db:6a:34:43:d3:84:8c:64: 67:48:21:fe:20:3e:5f:a9:5d:a5:5f:63:7e:63:b0:50:a1:4e: 19:e4:06:cc:3d:c1:ca:ad:46:48:98:38:f1:0b:c4:67:d8:78: 75:9b:7b:07:e8:f5:f7:78:71:5d:d0:45:60:3e:d4:c2:00:b4: 4f:99:05:a4 -----BEGIN CERTIFICATE----- MIIGMzCCBRugAwIBAgIDAMt9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIxODA1MjIyNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk0MzhmOTItMDhkNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZhDxD+iCzVAbTdAB+nQRpiaVUa4bsyhBqSsYcwjsol95QHLRBcb7+3m+wB r7Hp8s0Dd61PE9ngGsP2kDSf+GGOHGX5NHAkifZAdCkr+WfA4tDJRToInXIliD6x Te9Z2ieC4pIAC48cPLt73h9wi4zpFRpNzys/IPbWVRkeJBjUIpUxDB+ERO7FTLek rwKUvBVEtO5ahbbU7Vfy2tIX0bwggdDj9UiPawpZl2UwvCLFmQgja2iPSLuw02sc 8hrTV5DvRgiM4UXkjGKVXGYVxyB8VPmJ40KFHGbeuvxxd9UxPan/Zi+pSWOFiv6x mS+cnYkHcUQIlJxCr9pD+J90bW0CAwEAAaOCA1YwggNSMB0GA1UdDgQWBBSWG7zo yOe1I73NeX8yIT1E+b1cWzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhBMTlGMzE0 REJEMTExRjBCM0E3MDg4MzU0NjQxOTUxLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIHfBggrBgEFBQcBBwEB /wSBzzCBzDCBrwQCAAEwgagDBAAkMlIDBAAr+vwDBAEr+v4DBAFnTHoDBABnYjUD BAJnYyQDBAJnbbQDBAFnb+QDBAJndrQDBAFnqjoDBAFnq64DBABnrWMDBABnsjsD BAFnsqADBAFnsqYDBAFns14DBAFntG4DBAFntKwDBAFntLADBAFntNQDBAFntOwD BAFntXIDBAFntcYDBABnzKkDBABn0zgDBAFn1IgDBAKW8sgDBACj474wGAQCAAIw EgMHACABDfIcQAMHASQBfuAAADANBgkqhkiG9w0BAQsFAAOCAQEANA2nnbOCjjfB 2yrJo5VsG7WJe5FLiOeYkbeDprKksP/cLEncUbq4WqJM72PA6QsajKLZq0STo6JP 80O1H4GdyIrewsk0ULdvasjbDNYlkh8C82N73kqgvNyoTOFyF3RNRPp1RfStKqwq 2Fa8Ozy8W/MgLKrg4M99y//yPRUR9fNTbT2rc8u3u1OfmdzNp5FUe0n1uw6IeVIh Ew1IDWDKtqBwRtxLV7KOOY/oNkfvKr5amXCuN+lcBvjBuy7zONtqNEPThIxkZ0gh /iA+X6ldpV9jfmOwUKFOGeQGzD3Byq1GSJg48QvEZ9h4dZt7B+j193hxXdBFYD7U wgC0T5kFpA== -----END CERTIFICATE-----Generated at Sat Dec 20 05:09:15 2025 by rpki-client