This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F166322DB4211F0B22C643C91D3641D.roa File: 9F166322DB4211F0B22C643C91D3641D.roa (raw, json) Hash identifier: Nm8hzorYtdalcOmzeUxWNVXCrVY2MVkeyYBwCQnk2tE= Subject key identifier: C6:DE:B3:BB:46:19:1E:A1:A1:56:88:96:46:BE:EE:B9:2B:F7:87:B2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CBA9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F166322DB4211F0B22C643C91D3641D.roa Signing time: Sat 20 Dec 2025 11:30:43 +0000 ROA not before: Sat 20 Dec 2025 11:30:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137085 IP address blocks: 27.123.240.0/23 maxlen: 24 43.225.248.0/22 maxlen: 24 43.228.164.0/23 maxlen: 24 43.230.148.0/24 maxlen: 24 103.37.98.0/23 maxlen: 24 103.40.200.0/22 maxlen: 24 103.54.27.0/24 maxlen: 24 103.68.21.0/24 maxlen: 24 103.68.140.0/23 maxlen: 24 103.69.239.0/24 maxlen: 24 103.72.196.0/24 maxlen: 24 103.91.72.0/24 maxlen: 24 103.91.73.0/24 maxlen: 24 103.91.74.0/24 maxlen: 24 103.91.75.0/24 maxlen: 24 103.91.76.0/22 maxlen: 24 103.92.107.0/24 maxlen: 24 103.93.39.0/24 maxlen: 24 103.100.4.0/24 maxlen: 24 103.101.112.0/22 maxlen: 24 103.113.110.0/23 maxlen: 24 103.120.108.0/24 maxlen: 24 103.120.152.0/24 maxlen: 24 103.120.153.0/24 maxlen: 24 103.124.174.0/24 maxlen: 24 103.138.9.0/24 maxlen: 24 103.139.143.0/24 maxlen: 24 103.154.8.0/23 maxlen: 24 103.154.56.0/23 maxlen: 24 103.155.237.0/24 maxlen: 24 103.156.121.0/24 maxlen: 24 103.157.188.0/23 maxlen: 24 103.159.104.0/23 maxlen: 24 103.160.25.0/24 maxlen: 24 103.164.140.0/24 maxlen: 24 103.165.88.0/23 maxlen: 24 103.167.154.0/23 maxlen: 24 103.167.182.0/23 maxlen: 24 103.167.224.0/23 maxlen: 24 103.167.238.0/23 maxlen: 24 103.168.60.0/23 maxlen: 24 103.169.242.0/24 maxlen: 24 103.169.243.0/24 maxlen: 24 103.170.38.0/23 maxlen: 24 103.170.84.0/23 maxlen: 24 103.178.24.0/23 maxlen: 24 103.178.117.0/24 maxlen: 24 103.179.50.0/23 maxlen: 24 103.181.66.0/24 maxlen: 24 103.181.119.0/24 maxlen: 24 103.184.205.0/24 maxlen: 24 103.204.70.0/24 maxlen: 24 103.206.51.0/24 maxlen: 24 103.206.96.0/23 maxlen: 24 103.216.141.0/24 maxlen: 24 103.232.232.0/22 maxlen: 24 202.4.169.0/24 maxlen: 24 210.79.134.0/24 maxlen: 24 2001:df0:47c0::/48 maxlen: 48 2001:df1:1980::/48 maxlen: 48 2001:df1:ed40::/48 maxlen: 48 2001:df2:3ac0::/48 maxlen: 48 2001:df2:3f40::/48 maxlen: 48 2001:df3:1340::/48 maxlen: 48 2400:d660::/32 maxlen: 32 2401:bba0::/32 maxlen: 32 2405:e100:a::/48 maxlen: 48 2405:e100:b::/48 maxlen: 48 2405:e100:c::/48 maxlen: 48 2405:e100:d::/48 maxlen: 48 2405:e100:e::/48 maxlen: 48 2405:e100:f::/48 maxlen: 48 2405:e100:1d::/48 maxlen: 48 2405:e100:1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52137 (0xcba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Dec 20 11:30:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=694688e3-9d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d2:98:65:6d:2b:69:fb:20:58:d3:7c:03:e2: f7:e0:55:61:54:a9:d8:cc:7a:94:57:89:46:f2:aa: a6:10:b8:73:0e:02:12:de:1e:cd:0d:58:ad:00:c3: 70:c5:d3:a4:d9:f4:f9:cf:dc:fa:92:b5:06:bd:8b: 2e:21:81:fc:de:b6:cc:e4:39:75:0f:ab:f5:8e:e2: cd:05:b1:09:23:ea:56:81:42:45:ac:28:ed:10:28: de:11:83:9d:2c:6c:b7:dd:83:0b:6e:8d:8e:33:e0: 2a:a2:94:0c:9d:c1:83:65:a5:9a:79:f1:2f:d9:16: b7:98:09:64:4a:1a:10:16:b1:a1:bf:b0:e0:06:a2: a4:ff:0d:fc:5c:fc:5c:ae:ce:df:51:a7:66:d3:9f: 59:5a:09:39:a0:54:35:09:ee:29:8c:ac:43:a4:e4: e6:24:c2:1d:b4:f0:2a:db:71:9d:e8:28:f5:d3:e9: e7:74:3f:24:c5:cd:f7:18:dc:c5:c4:ad:0e:90:85: 0c:0e:11:84:46:ee:81:fb:83:f4:88:41:6d:e2:10: 27:8f:12:b9:1f:20:21:8d:6f:f0:a7:c1:2e:80:27: 07:90:c1:92:a8:22:96:f4:9b:c9:c2:07:c6:20:dd: 9c:df:ac:3e:2e:15:98:5a:2b:f4:aa:ea:f6:0c:e2: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DE:B3:BB:46:19:1E:A1:A1:56:88:96:46:BE:EE:B9:2B:F7:87:B2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9F166322DB4211F0B22C643C91D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.240.0/23 43.225.248.0/22 43.228.164.0/23 43.230.148.0/24 103.37.98.0/23 103.40.200.0/22 103.54.27.0/24 103.68.21.0/24 103.68.140.0/23 103.69.239.0/24 103.72.196.0/24 103.91.72.0/21 103.92.107.0/24 103.93.39.0/24 103.100.4.0/24 103.101.112.0/22 103.113.110.0/23 103.120.108.0/24 103.120.152.0/23 103.124.174.0/24 103.138.9.0/24 103.139.143.0/24 103.154.8.0/23 103.154.56.0/23 103.155.237.0/24 103.156.121.0/24 103.157.188.0/23 103.159.104.0/23 103.160.25.0/24 103.164.140.0/24 103.165.88.0/23 103.167.154.0/23 103.167.182.0/23 103.167.224.0/23 103.167.238.0/23 103.168.60.0/23 103.169.242.0/23 103.170.38.0/23 103.170.84.0/23 103.178.24.0/23 103.178.117.0/24 103.179.50.0/23 103.181.66.0/24 103.181.119.0/24 103.184.205.0/24 103.204.70.0/24 103.206.51.0/24 103.206.96.0/23 103.216.141.0/24 103.232.232.0/22 202.4.169.0/24 210.79.134.0/24 IPv6: 2001:df0:47c0::/48 2001:df1:1980::/48 2001:df1:ed40::/48 2001:df2:3ac0::/48 2001:df2:3f40::/48 2001:df3:1340::/48 2400:d660::/32 2401:bba0::/32 2405:e100:a::-2405:e100:f:ffff:ffff:ffff:ffff:ffff 2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1c:34:d8:70:61:40:37:a1:7d:d0:eb:d8:4e:22:84:8d:13:d3: 80:18:4f:6d:cf:25:1d:98:7c:95:d3:ff:85:a8:69:21:e3:b2: f4:4a:68:33:88:d8:b9:b4:da:21:b7:6a:bc:5b:b3:0a:ec:67: 9d:57:1c:3a:fe:3c:19:2c:84:2f:9a:61:5f:e7:e9:7e:87:b5: c1:33:ab:8c:57:d3:15:15:08:1d:d5:d2:71:aa:b4:94:6f:82: 02:e7:ce:8e:dd:b3:1a:ac:1f:24:dd:5b:52:df:7b:2c:b6:dd: af:60:e9:77:0c:1d:ec:85:aa:9a:e0:f7:19:6f:f3:ae:b2:b1: 2e:ed:30:ef:c7:f8:d0:d1:5e:1f:65:da:73:84:7c:95:c1:6d: 26:e5:aa:8b:ee:84:8f:8a:15:27:fc:d2:a2:2e:c0:31:07:c4: 12:62:8b:09:4c:15:93:ad:45:48:26:14:bf:82:95:78:92:45: e5:47:70:a0:b4:93:36:f1:83:c3:08:4e:fe:b0:41:b5:7e:35: da:90:ff:fe:58:73:9d:27:93:a0:5a:ea:d6:33:ee:24:dd:81: 2e:39:77:e9:92:5e:d2:41:22:d0:08:a4:3e:1a:bd:25:8f:33: 9c:aa:ae:8d:2f:3d:6c:bb:c6:65:53:38:6b:f8:a4:41:32:8e: 3c:a2:88:2d -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIDAMupMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MTIyMDExMzA0M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk0Njg4ZTMtOWQzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTSmGVtK2n7IFjTfAPi9+BVYVSp2Mx6lFeJRvKqphC4cw4CEt4ezQ1YrQDD cMXTpNn0+c/c+pK1Br2LLiGB/N62zOQ5dQ+r9Y7izQWxCSPqVoFCRawo7RAo3hGD nSxst92DC26NjjPgKqKUDJ3Bg2WlmnnxL9kWt5gJZEoaEBaxob+w4AaipP8N/Fz8 XK7O31GnZtOfWVoJOaBUNQnuKYysQ6Tk5iTCHbTwKttxnego9dPp53Q/JMXN9xjc xcStDpCFDA4RhEbugfuD9IhBbeIQJ48SuR8gIY1v8KfBLoAnB5DBkqgilvSbycIH xiDdnN+sPi4VmFor9Krq9gziit0CAwEAAaOCBEUwggRBMB0GA1UdDgQWBBTG3rO7 RhkeoaFWiJZGvu65K/eHsjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlGMTY2MzIy REI0MjExRjBCMjJDNjQzQzkxRDM2NDFELnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBzQYIKwYBBQUHAQcB Af8EggG8MIIBuDCCAUAEAgABMIIBOAMEARt78AMEAivh+AMEASvkpAMEACvmlAME AWclYgMEAmcoyAMEAGc2GwMEAGdEFQMEAWdEjAMEAGdF7wMEAGdIxAMEA2dbSAME AGdcawMEAGddJwMEAGdkBAMEAmdlcAMEAWdxbgMEAGd4bAMEAWd4mAMEAGd8rgME AGeKCQMEAGeLjwMEAWeaCAMEAWeaOAMEAGeb7QMEAGeceQMEAWedvAMEAWefaAME AGegGQMEAGekjAMEAWelWAMEAWenmgMEAWentgMEAWen4AMEAWen7gMEAWeoPAME AWep8gMEAWeqJgMEAWeqVAMEAWeyGAMEAGeydQMEAWezMgMEAGe1QgMEAGe1dwME AGe4zQMEAGfMRgMEAGfOMwMEAWfOYAMEAGfYjQMEAmfo6AMEAMoEqQMEANJPhjBy BAIAAjBsAwcAIAEN8EfAAwcAIAEN8RmAAwcAIAEN8e1AAwcAIAEN8jrAAwcAIAEN 8j9AAwcAIAEN8xNAAwUAJADWYAMFACQBu6AwEgMHASQF4QAACgMHBCQF4QAAADAS AwcAJAXhAAAdAwcAJAXhAAAeMA0GCSqGSIb3DQEBCwUAA4IBAQAcNNhwYUA3oX3Q 69hOIoSNE9OAGE9tzyUdmHyV0/+FqGkh47L0SmgziNi5tNoht2q8W7MK7GedVxw6 /jwZLIQvmmFf5+l+h7XBM6uMV9MVFQgd1dJxqrSUb4IC586O3bMarB8k3VtS33ss tt2vYOl3DB3shaqa4PcZb/OusrEu7TDvx/jQ0V4fZdpzhHyVwW0m5aqL7oSPihUn /NKiLsAxB8QSYosJTBWTrUVIJhS/gpV4kkXlR3CgtJM28YPDCE7+sEG1fjXakP/+ WHOdJ5OgWurWM+4k3YEuOXfpkl7SQSLQCKQ+Gr0ljzOcqq6NLz1su8ZlUzhr+KRB Mo48oogt -----END CERTIFICATE-----Generated at Sat Dec 20 21:43:50 2025 by rpki-client