This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/BA917E94D65F11F090E652930BB43E13.roa File: BA917E94D65F11F090E652930BB43E13.roa (raw, json) Hash identifier: 5VaeoiNxYe7urXj1q43i9rT2qxmYG2ELZC0j1WqZW8k= Subject key identifier: 52:E5:0F:4C:D9:B2:77:A4:D4:F5:CD:BF:AA:D8:74:A7:E4:8F:3B:80 Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: 0215 Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/BA917E94D65F11F090E652930BB43E13.roa Signing time: Thu 11 Dec 2025 07:05:09 +0000 ROA not before: Thu 11 Dec 2025 07:05:09 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136393 IP address blocks: 96.30.64.0/21 maxlen: 23 96.30.64.0/24 maxlen: 24 96.30.72.0/23 maxlen: 23 96.30.79.0/24 maxlen: 24 96.30.84.0/22 maxlen: 23 96.30.100.0/22 maxlen: 23 96.30.107.0/24 maxlen: 24 96.30.108.0/23 maxlen: 23 96.30.111.0/24 maxlen: 24 146.88.36.0/22 maxlen: 22 146.88.36.0/24 maxlen: 24 146.88.37.0/24 maxlen: 24 146.88.38.0/23 maxlen: 23 146.88.42.0/23 maxlen: 23 146.88.44.0/22 maxlen: 23 146.88.52.0/22 maxlen: 24 161.82.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: Dec 11 07:05:09 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=693a6d25-0b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:08:80:3d:e2:b6:24:b9:1d:86:2c:6a:83: d4:5b:71:c8:b2:63:21:cc:f3:59:17:e7:f1:08:52: 5f:2e:cf:f1:81:88:6d:06:5d:21:5a:9f:18:07:66: df:42:f0:49:c1:ba:bb:22:05:c3:1e:1e:ea:6f:f8: 6a:77:e9:66:9b:48:11:96:be:59:87:bc:33:47:d9: 72:cd:0a:40:dc:f1:27:fe:c7:9d:98:06:61:cf:b3: 3e:6c:52:e5:45:cf:d7:dd:83:91:8b:f6:54:80:ba: ab:75:d2:80:1f:93:1d:cb:09:7a:14:d5:7b:a9:a4: 52:c2:ff:26:99:d8:b7:61:cd:18:76:69:f6:1d:e0: 93:99:d4:81:a4:13:32:68:cd:ee:e0:e7:8c:aa:6a: d4:b0:27:55:04:d0:82:00:08:19:4c:5b:af:41:6d: 2b:4d:16:2f:73:a8:6c:dd:ae:89:15:07:c1:0c:09: 8a:b4:12:2d:fb:f3:33:54:25:17:01:ef:5a:50:67: b4:49:63:61:9a:6e:ae:3d:ce:e6:9a:58:35:03:f9: 48:8d:a3:27:73:3e:db:17:b4:95:fa:cf:f2:ec:1d: a0:8a:a0:74:39:50:6b:f5:6e:16:f2:f8:82:ae:68: 7e:57:ce:7c:ca:4b:17:fb:ec:1b:99:01:ce:cc:43: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E5:0F:4C:D9:B2:77:A4:D4:F5:CD:BF:AA:D8:74:A7:E4:8F:3B:80 X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/BA917E94D65F11F090E652930BB43E13.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 96.30.64.0-96.30.73.255 96.30.79.0/24 96.30.84.0/22 96.30.100.0/22 96.30.107.0-96.30.109.255 96.30.111.0/24 146.88.36.0/22 146.88.42.0-146.88.47.255 146.88.52.0/22 161.82.186.0/23 Signature Algorithm: sha256WithRSAEncryption 06:81:e6:31:31:8e:99:8c:27:e8:cb:2a:81:30:63:4f:3e:39: 11:e9:4f:f9:6c:70:68:5a:91:4c:6b:c4:0d:de:6b:4b:ad:39: 49:46:77:12:2b:b7:d7:c9:06:48:90:3c:c3:66:3d:1e:e0:1f: f0:af:e6:fe:7c:ed:5f:44:f3:bd:cc:b9:9b:02:21:3d:ed:61: 34:0c:f9:16:ef:7f:52:08:c6:69:66:24:10:1a:5f:9d:0d:57: f3:ea:43:f4:83:1b:93:74:0b:aa:97:6a:45:3f:63:0c:54:2f: f3:a8:4f:15:51:c9:0d:b9:53:5f:6f:b3:ad:7c:54:0c:ed:fa: 17:10:1d:d0:94:5b:c2:4b:b0:a5:c1:1f:a9:cd:c1:9e:3b:52: a3:20:09:b4:9e:d3:d7:68:4c:f6:a5:9b:a3:03:a0:ca:fc:56: da:68:d6:f7:07:76:07:47:53:33:68:d1:5f:5f:b3:b2:b3:55: 6f:3d:44:1a:23:59:bf:fb:62:7e:1a:d9:c9:ee:73:77:25:b2: fe:4c:58:7a:ae:f5:6e:86:e3:96:75:ec:fc:06:f8:27:e7:ea: cf:04:32:f0:c6:9f:7b:b6:fc:81:2f:d4:ff:fe:ce:24:a3:30: c7:02:e1:95:8d:6c:35:86:df:2a:57:94:84:31:30:08:5f:09: 4c:f4:71:35 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjUxMjExMDcwNTA5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNhNmQyNS0wYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o4IgD3itiS5HYYsaoPUW3HIsmMhzPNZF+fxCFJfLs/xgYhtBl0hWp8YB2bf QvBJwbq7IgXDHh7qb/hqd+lmm0gRlr5Zh7wzR9lyzQpA3PEn/sedmAZhz7M+bFLl Rc/X3YORi/ZUgLqrddKAH5Mdywl6FNV7qaRSwv8mmdi3Yc0Ydmn2HeCTmdSBpBMy aM3u4OeMqmrUsCdVBNCCAAgZTFuvQW0rTRYvc6hs3a6JFQfBDAmKtBIt+/MzVCUX Ae9aUGe0SWNhmm6uPc7mmlg1A/lIjaMncz7bF7SV+s/y7B2giqB0OVBr9W4W8viC rmh+V858yksX++wbmQHOzEO/1QIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFFLlD0zZ snek1PXNv6rYdKfkjzuAMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQkE5MTdFOTRE NjVGMTFGMDkwRTY1MjkzMEJCNDNFMTMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbQYIKwYBBQUHAQcBAf8E XjBcMFoEAgABMFQwDAMEBmAeQAMEAWAeSAMEAGAeTwMEAmAeVAMEAmAeZDAMAwQA YB5rAwQBYB5sAwQAYB5vAwQCklgkMAwDBAGSWCoDBASSWCADBAKSWDQDBAGhUrow DQYJKoZIhvcNAQELBQADggEBAAaB5jExjpmMJ+jLKoEwY08+ORHpT/lscGhakUxr xA3ea0utOUlGdxIrt9fJBkiQPMNmPR7gH/Cv5v587V9E873MuZsCIT3tYTQM+Rbv f1IIxmlmJBAaX50NV/PqQ/SDG5N0C6qXakU/YwxUL/OoTxVRyQ25U19vs618VAzt +hcQHdCUW8JLsKXBH6nNwZ47UqMgCbSe09doTPalm6MDoMr8Vtpo1vcHdgdHUzNo 0V9fs7KzVW89RBojWb/7Yn4a2cnuc3clsv5MWHqu9W6G45Z17PwG+Cfn6s8EMvDG n3u2/IEv1P/+ziSjMMcC4ZWNbDWG3ypXlIQxMAhfCUz0cTU= -----END CERTIFICATE-----Generated at Sat Dec 20 22:45:11 2025 by rpki-client