This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/925F2824F4FE11EF9D805215C4F9AE02.roa File: 925F2824F4FE11EF9D805215C4F9AE02.roa (raw, json) Hash identifier: IUEWgwPNJNmgxI+A6/dPlA2vJntU2HIbuuRm/txoJkk= Subject key identifier: AF:96:B9:0E:1A:1D:FF:62:D6:CB:BB:19:D0:8E:27:03:0C:02:CA:B7 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C9DD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/925F2824F4FE11EF9D805215C4F9AE02.roa Signing time: Tue 09 Dec 2025 07:21:55 +0000 ROA not before: Tue 09 Dec 2025 07:21:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133982 IP address blocks: 45.118.156.0/24 maxlen: 24 45.118.157.0/24 maxlen: 24 45.118.158.0/24 maxlen: 24 45.118.159.0/24 maxlen: 24 103.46.200.0/24 maxlen: 24 103.46.201.0/24 maxlen: 24 103.46.202.0/24 maxlen: 24 103.46.203.0/24 maxlen: 24 103.48.196.0/22 maxlen: 24 103.56.228.0/24 maxlen: 24 103.56.229.0/24 maxlen: 24 103.56.230.0/24 maxlen: 24 103.56.231.0/24 maxlen: 24 103.57.84.0/22 maxlen: 24 103.85.143.0/24 maxlen: 24 103.87.56.0/24 maxlen: 24 103.87.57.0/24 maxlen: 24 103.87.58.0/24 maxlen: 24 103.87.59.0/24 maxlen: 24 103.92.40.0/22 maxlen: 24 103.95.80.0/24 maxlen: 24 103.95.81.0/24 maxlen: 24 103.95.82.0/24 maxlen: 24 103.95.83.0/24 maxlen: 24 103.108.4.0/24 maxlen: 24 103.108.5.0/24 maxlen: 24 103.108.6.0/24 maxlen: 24 103.108.7.0/24 maxlen: 24 103.110.48.0/24 maxlen: 24 103.110.49.0/24 maxlen: 24 103.120.50.0/24 maxlen: 24 103.120.51.0/24 maxlen: 24 103.139.56.0/24 maxlen: 24 103.157.227.0/24 maxlen: 24 103.160.26.0/23 maxlen: 24 103.161.56.0/23 maxlen: 24 103.164.188.0/24 maxlen: 24 103.170.80.0/23 maxlen: 24 103.172.72.0/23 maxlen: 24 103.177.120.0/23 maxlen: 24 103.211.12.0/24 maxlen: 24 103.211.13.0/24 maxlen: 24 103.211.14.0/24 maxlen: 24 103.211.15.0/24 maxlen: 24 103.211.16.0/24 maxlen: 24 103.211.17.0/24 maxlen: 24 103.211.18.0/24 maxlen: 24 103.211.19.0/24 maxlen: 24 103.211.52.0/24 maxlen: 24 103.211.53.0/24 maxlen: 24 103.211.54.0/24 maxlen: 24 103.211.55.0/24 maxlen: 24 103.212.144.0/24 maxlen: 24 103.212.145.0/24 maxlen: 24 103.212.146.0/24 maxlen: 24 103.212.147.0/24 maxlen: 24 103.212.156.0/24 maxlen: 24 103.212.157.0/24 maxlen: 24 103.212.158.0/24 maxlen: 24 103.212.159.0/24 maxlen: 24 103.214.60.0/24 maxlen: 24 103.214.61.0/24 maxlen: 24 103.214.62.0/24 maxlen: 24 103.214.63.0/24 maxlen: 24 110.235.216.0/22 maxlen: 24 110.235.224.0/24 maxlen: 24 110.235.225.0/24 maxlen: 24 110.235.226.0/24 maxlen: 24 110.235.227.0/24 maxlen: 24 110.235.228.0/24 maxlen: 24 110.235.229.0/24 maxlen: 24 110.235.230.0/24 maxlen: 24 110.235.231.0/24 maxlen: 24 110.235.232.0/24 maxlen: 24 110.235.233.0/24 maxlen: 24 110.235.234.0/24 maxlen: 24 110.235.235.0/24 maxlen: 24 110.235.236.0/24 maxlen: 24 110.235.237.0/24 maxlen: 24 110.235.238.0/24 maxlen: 24 110.235.239.0/24 maxlen: 24 139.5.240.0/24 maxlen: 24 139.5.241.0/24 maxlen: 24 139.5.242.0/24 maxlen: 24 139.5.243.0/24 maxlen: 24 139.5.248.0/24 maxlen: 24 139.5.249.0/24 maxlen: 24 139.5.250.0/24 maxlen: 24 139.5.251.0/24 maxlen: 24 139.5.252.0/22 maxlen: 24 144.48.72.0/22 maxlen: 24 146.196.32.0/22 maxlen: 24 146.196.36.0/24 maxlen: 24 146.196.37.0/24 maxlen: 24 146.196.38.0/24 maxlen: 24 146.196.39.0/24 maxlen: 24 160.202.36.0/22 maxlen: 24 192.140.152.0/22 maxlen: 24 202.173.124.0/22 maxlen: 24 2401:9640::/32 maxlen: 32 2401:9640:800::/37 maxlen: 37 2401:9640:800::/48 maxlen: 48 2401:9640:801::/48 maxlen: 48 2401:9640:802::/48 maxlen: 48 2401:9640:803::/48 maxlen: 48 2401:9640:804::/48 maxlen: 48 2401:9640:805::/48 maxlen: 48 2401:9640:806::/48 maxlen: 48 2401:9640:807::/48 maxlen: 48 2401:9640:1000::/37 maxlen: 37 2401:9640:1800::/37 maxlen: 37 2401:9640:2000::/37 maxlen: 37 2401:9640:2800::/37 maxlen: 37 2401:9640:3000::/37 maxlen: 37 2401:9640:3800::/37 maxlen: 37 2401:9640:4000::/37 maxlen: 37 2401:9640:4800::/37 maxlen: 37 2401:9640:5000::/37 maxlen: 37 2401:9640:5800::/37 maxlen: 37 2401:9640:6000::/37 maxlen: 37 2401:9640:6800::/37 maxlen: 37 2401:9640:7000::/37 maxlen: 37 2401:9640:7800::/37 maxlen: 37 2401:9640:8000::/37 maxlen: 37 2401:9640:8800::/37 maxlen: 37 2401:9640:9000::/37 maxlen: 37 2401:9640:9800::/37 maxlen: 37 2401:9640:a000::/37 maxlen: 37 2401:9640:a800::/37 maxlen: 37 2401:9640:b000::/37 maxlen: 37 2401:9640:b800::/37 maxlen: 37 2401:9640:c000::/37 maxlen: 37 2401:9640:c800::/37 maxlen: 37 2401:9640:d000::/37 maxlen: 37 2401:9640:d800::/37 maxlen: 37 2401:9640:e000::/37 maxlen: 37 2401:9640:e800::/37 maxlen: 37 2401:9640:f000::/37 maxlen: 37 2401:9640:f800::/37 maxlen: 37 2407:aec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51677 (0xc9dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 9 07:21:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6937ce13-09db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:d4:cd:54:89:fa:61:5e:ce:08:ae:da:18: df:8b:88:e6:60:73:94:28:d9:7e:39:0e:b0:51:39: d7:c2:a7:6f:06:7b:fb:00:b6:da:9e:db:7b:68:af: b9:44:9b:c5:07:c5:d4:f2:03:05:61:76:fe:e3:8a: 25:64:66:55:1e:2b:a2:96:7a:cc:f1:20:32:0e:e1: 0f:ee:14:37:64:33:4f:06:63:48:75:72:6f:1d:2f: 9e:a6:94:8f:23:d4:7a:68:f1:50:3a:96:42:16:48: c1:56:8b:8a:a1:61:2b:ff:66:43:50:6b:9c:92:4d: 58:39:76:b7:9a:17:90:13:08:8c:55:49:3d:f9:32: 12:33:77:de:4b:3b:11:f0:98:ec:db:a5:2f:80:ec: 51:bd:28:db:e4:75:45:b4:1d:b5:da:6c:11:75:8c: 10:0d:34:9e:58:06:1a:01:fa:fd:cf:f8:2d:e2:fc: 88:fd:de:ba:45:03:fe:9b:5d:9f:bc:dc:e6:66:f1: e3:52:50:cd:aa:fa:0d:2e:b3:f7:99:5e:e2:8d:7e: 91:cb:92:f2:41:34:36:66:37:24:76:71:2f:d2:8b: 5a:1a:49:20:8e:e7:e7:d9:54:18:c2:5a:ca:ed:fc: 26:b2:46:c8:f8:27:06:c7:4a:49:34:fd:c8:1c:95: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:96:B9:0E:1A:1D:FF:62:D6:CB:BB:19:D0:8E:27:03:0C:02:CA:B7 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/925F2824F4FE11EF9D805215C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.156.0/22 103.46.200.0/22 103.48.196.0/22 103.56.228.0/22 103.57.84.0/22 103.85.143.0/24 103.87.56.0/22 103.92.40.0/22 103.95.80.0/22 103.108.4.0/22 103.110.48.0/23 103.120.50.0/23 103.139.56.0/24 103.157.227.0/24 103.160.26.0/23 103.161.56.0/23 103.164.188.0/24 103.170.80.0/23 103.172.72.0/23 103.177.120.0/23 103.211.12.0-103.211.19.255 103.211.52.0/22 103.212.144.0/22 103.212.156.0/22 103.214.60.0/22 110.235.216.0/22 110.235.224.0/20 139.5.240.0/22 139.5.248.0/21 144.48.72.0/22 146.196.32.0/21 160.202.36.0/22 192.140.152.0/22 202.173.124.0/22 IPv6: 2401:9640::/32 2407:aec0::/32 Signature Algorithm: sha256WithRSAEncryption 4d:bf:60:98:b4:16:9a:a3:74:6e:c9:d1:0d:4d:66:35:58:62: 46:65:ad:0a:fb:f1:d2:07:7e:16:b6:3c:78:57:dd:2c:68:68: a2:01:df:99:a0:f3:89:39:6e:43:16:eb:04:e0:a6:a6:80:9c: de:d1:db:dc:32:aa:40:26:cd:e5:d5:5f:04:c1:90:18:48:45: 57:47:b5:9f:a3:ee:b6:52:7e:1e:d9:43:c4:74:a5:37:fa:34: 81:ca:ce:95:7f:2f:b2:45:31:2c:37:a0:6b:f6:09:5d:3c:34: 5d:59:e8:57:94:83:f5:f8:bb:b3:cb:e1:a2:e3:48:79:fb:19: 81:7c:35:16:96:6f:5d:22:8f:f3:3f:7d:27:33:61:37:e6:cf: fa:b3:ea:11:22:4b:e8:3d:79:8f:e1:67:a5:dd:72:98:0d:1f: a0:83:ca:25:d4:e2:8b:21:fd:9d:ea:cc:50:db:ad:60:d4:19: 0b:95:8c:8e:93:ff:d6:8d:a3:7a:f0:2f:3f:32:5d:47:77:82: 60:cb:3c:ff:be:48:be:db:0a:3a:55:c3:bf:f2:c2:c9:32:0f: 52:1f:74:51:6e:7a:45:86:ec:e7:a0:2c:4c:0f:e3:a5:7b:9b: 1a:78:29:01:76:2e:39:35:92:f1:98:f0:89:d0:e7:ad:b9:b7: 53:f2:22:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIDAMndMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIwOTA3MjE1NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjkzN2NlMTMtMDlkYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALB21M1UifphXs4IrtoY34uI5mBzlCjZfjkOsFE518KnbwZ7+wC22p7be2iv uUSbxQfF1PIDBWF2/uOKJWRmVR4ropZ6zPEgMg7hD+4UN2QzTwZjSHVybx0vnqaU jyPUemjxUDqWQhZIwVaLiqFhK/9mQ1BrnJJNWDl2t5oXkBMIjFVJPfkyEjN33ks7 EfCY7NulL4DsUb0o2+R1RbQdtdpsEXWMEA00nlgGGgH6/c/4LeL8iP3eukUD/ptd n7zc5mbx41JQzar6DS6z95le4o1+kcuS8kE0NmY3JHZxL9KLWhpJII7n59lUGMJa yu38JrJGyPgnBsdKSTT9yByVZekCAwEAAaOCA38wggN7MB0GA1UdDgQWBBSvlrkO Gh3/YtbLuxnQjicDDALKtzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkyNUYyODI0 RjRGRTExRUY5RDgwNTIxNUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBBwYIKwYBBQUHAQcB Af8EgfcwgfQwgdsEAgABMIHUAwQCLXacAwQCZy7IAwQCZzDEAwQCZzjkAwQCZzlU AwQAZ1WPAwQCZ1c4AwQCZ1woAwQCZ19QAwQCZ2wEAwQBZ24wAwQBZ3gyAwQAZ4s4 AwQAZ53jAwQBZ6AaAwQBZ6E4AwQAZ6S8AwQBZ6pQAwQBZ6xIAwQBZ7F4MAwDBAJn 0wwDBAJn0xADBAJn0zQDBAJn1JADBAJn1JwDBAJn1jwDBAJu69gDBARu6+ADBAKL BfADBAOLBfgDBAKQMEgDBAOSxCADBAKgyiQDBALAjJgDBALKrXwwFAQCAAIwDgMF ACQBlkADBQAkB67AMA0GCSqGSIb3DQEBCwUAA4IBAQBNv2CYtBaao3RuydENTWY1 WGJGZa0K+/HSB34Wtjx4V90saGiiAd+ZoPOJOW5DFusE4KamgJze0dvcMqpAJs3l 1V8EwZAYSEVXR7Wfo+62Un4e2UPEdKU3+jSBys6Vfy+yRTEsN6Br9gldPDRdWehX lIP1+Luzy+Gi40h5+xmBfDUWlm9dIo/zP30nM2E35s/6s+oRIkvoPXmP4Wel3XKY DR+gg8ol1OKLIf2d6sxQ261g1BkLlYyOk//WjaN68C8/Ml1Hd4Jgyzz/vki+2wo6 VcO/8sLJMg9SH3RRbnpFhuznoCxMD+Ole5saeCkBdi45NZLxmPCJ0OetubdT8iIT -----END CERTIFICATE-----Generated at Sat Dec 20 21:57:53 2025 by rpki-client