This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/F91AFD3EDA4711F084CDC7A990D3641D.roa File: F91AFD3EDA4711F084CDC7A990D3641D.roa (raw, json) Hash identifier: eNIx59IPvURhZNJvWE5tBw48sAEjOKFmE8SR7xNL/SA= Subject key identifier: BB:CB:C5:84:A1:34:B4:55:C9:E0:DB:7A:BB:7A:6A:16:0C:F1:35:86 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0F04 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/F91AFD3EDA4711F084CDC7A990D3641D.roa Signing time: Tue 16 Dec 2025 06:25:11 +0000 ROA not before: Tue 16 Dec 2025 06:25:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133933 IP address blocks: 14.192.128.0/19 maxlen: 19 14.192.128.0/24 maxlen: 24 14.192.129.0/24 maxlen: 24 14.192.130.0/24 maxlen: 24 14.192.131.0/24 maxlen: 24 14.192.132.0/24 maxlen: 24 14.192.133.0/24 maxlen: 24 14.192.134.0/24 maxlen: 24 14.192.135.0/24 maxlen: 24 14.192.136.0/24 maxlen: 24 14.192.137.0/24 maxlen: 24 14.192.138.0/24 maxlen: 24 14.192.139.0/24 maxlen: 24 14.192.140.0/24 maxlen: 24 14.192.141.0/24 maxlen: 24 14.192.142.0/24 maxlen: 24 14.192.143.0/24 maxlen: 24 14.192.144.0/24 maxlen: 24 14.192.145.0/24 maxlen: 24 14.192.146.0/24 maxlen: 24 14.192.147.0/24 maxlen: 24 14.192.148.0/24 maxlen: 24 14.192.152.0/24 maxlen: 24 14.192.153.0/24 maxlen: 24 14.192.154.0/24 maxlen: 24 14.192.155.0/24 maxlen: 24 14.192.156.0/24 maxlen: 24 14.192.157.0/24 maxlen: 24 14.192.158.0/24 maxlen: 24 14.192.159.0/24 maxlen: 24 43.247.120.0/24 maxlen: 24 43.247.121.0/24 maxlen: 24 43.247.122.0/24 maxlen: 24 43.247.123.0/24 maxlen: 24 103.20.132.0/24 maxlen: 24 103.20.133.0/24 maxlen: 24 103.20.134.0/24 maxlen: 24 103.20.135.0/24 maxlen: 24 111.92.128.0/24 maxlen: 24 111.92.129.0/24 maxlen: 24 111.92.130.0/24 maxlen: 24 111.92.132.0/24 maxlen: 24 111.92.136.0/24 maxlen: 24 111.92.137.0/24 maxlen: 24 111.92.141.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 111.92.145.0/24 maxlen: 24 111.92.146.0/24 maxlen: 24 111.92.147.0/24 maxlen: 24 111.92.148.0/24 maxlen: 24 111.92.149.0/24 maxlen: 24 111.92.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3844 (0xf04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Dec 16 06:25:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6940fb46-d98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:d6:22:66:3c:14:1d:eb:86:bd:4a:de:39: f2:50:f6:2e:fc:dc:52:95:f5:d2:87:85:0e:f4:ea: d8:be:2c:4a:43:9f:8e:af:9e:17:68:f6:d5:8f:46: d1:2f:4d:c3:c6:3b:77:ec:f0:69:fe:8f:b4:09:44: 41:a8:b8:c8:43:6c:9f:2f:16:92:de:c1:e5:18:ca: c2:ec:45:d3:f9:79:7a:9d:64:5e:ac:59:21:f1:f9: 38:1d:57:60:82:08:73:cf:1f:d9:1b:4f:b1:1f:a5: ed:52:62:7c:b2:55:bc:84:56:b9:45:6c:06:73:39: 03:03:fd:04:85:0c:64:08:1a:dc:bf:b1:70:4f:9e: e9:96:fd:56:16:5b:63:59:00:5d:30:0f:20:03:b5: bd:9d:b5:7b:b7:2e:3c:70:ab:8e:37:d3:a7:8b:e1: 29:25:20:9c:f5:20:83:a4:f3:41:31:53:57:b4:a2: 0e:9e:59:75:3a:a2:7e:fa:30:3d:75:4f:68:67:37: d9:84:c9:d0:63:8e:e7:e5:7b:93:c1:f8:22:d9:00: 76:fd:d6:9b:67:bb:93:15:20:9b:de:7d:7a:19:38: ce:38:16:c0:25:1f:00:c4:24:89:02:5b:5b:41:50: 67:8a:97:2b:f6:98:62:15:db:d8:e2:f6:7b:a7:17: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CB:C5:84:A1:34:B4:55:C9:E0:DB:7A:BB:7A:6A:16:0C:F1:35:86 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/F91AFD3EDA4711F084CDC7A990D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.128.0/19 43.247.120.0/22 103.20.132.0/22 111.92.128.0-111.92.130.255 111.92.132.0/24 111.92.136.0/23 111.92.141.0/24 111.92.143.0-111.92.149.255 111.92.155.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:80:85:fd:42:25:e3:ac:a8:ff:16:94:71:28:e7:f5:42:f1: 65:39:82:cd:9d:e4:49:7a:af:9d:17:de:a9:24:0d:a2:50:25: fe:85:22:6c:ca:5f:8f:58:98:eb:4c:33:a0:0c:49:61:08:7b: 8f:18:25:1d:c6:e4:d4:51:1b:31:41:91:79:84:7d:07:1a:ce: 2a:16:92:79:30:60:32:7a:aa:63:6e:e1:fb:41:b8:e9:b0:26: 64:7b:85:11:6a:06:3f:71:6f:65:54:34:bf:2a:8c:15:f4:b7: e7:39:10:f7:44:c2:66:ca:a7:09:1f:2d:42:85:1e:e4:fb:d2: 29:ee:3b:c2:e0:58:26:8a:f8:20:c6:56:9c:43:fe:f0:22:47: 3a:25:d4:42:66:34:db:0d:95:55:04:d7:31:8c:3d:b0:e9:a9: 18:c1:09:e2:d8:8e:ab:46:1c:bb:1e:25:ed:c5:0a:21:d6:ad: df:e8:52:64:db:b1:9f:25:d7:aa:1b:13:e8:3f:53:c5:38:02: eb:b0:17:06:cd:bf:49:fe:df:ee:aa:6c:d0:56:89:60:48:78: a5:e1:fa:66:16:f2:d7:af:62:96:35:c2:d9:eb:c7:f5:19:4b: 6a:8d:36:69:7c:6e:70:db:9a:4b:f0:42:3e:ad:02:96:f9:a4: 98:e5:0d:91 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgICDwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMjE2MDYyNTExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQwZmI0Ni1kOThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1zWImY8FB3rhr1K3jnyUPYu/NxSlfXSh4UO9OrYvixKQ5+Or54XaPbVj0bR L03Dxjt37PBp/o+0CURBqLjIQ2yfLxaS3sHlGMrC7EXT+Xl6nWRerFkh8fk4HVdg gghzzx/ZG0+xH6XtUmJ8slW8hFa5RWwGczkDA/0EhQxkCBrcv7FwT57plv1WFltj WQBdMA8gA7W9nbV7ty48cKuON9Oni+EpJSCc9SCDpPNBMVNXtKIOnll1OqJ++jA9 dU9oZzfZhMnQY47n5XuTwfgi2QB2/dabZ7uTFSCb3n16GTjOOBbAJR8AxCSJAltb QVBnipcr9phiFdvY4vZ7pxcWIwIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFLvLxYSh NLRVyeDbert6ahYM8TWGMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvRjkxQUZEM0VE QTQ3MTFGMDg0Q0RDN0E5OTBEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXwYIKwYBBQUHAQcBAf8E UDBOMEwEAgABMEYDBAUOwIADBAIr93gDBAJnFIQwDAMEB29cgAMEAG9cggMEAG9c hAMEAW9ciAMEAG9cjTAMAwQAb1yPAwQBb1yUAwQAb1ybMA0GCSqGSIb3DQEBCwUA A4IBAQAdgIX9QiXjrKj/FpRxKOf1QvFlOYLNneRJeq+dF96pJA2iUCX+hSJsyl+P WJjrTDOgDElhCHuPGCUdxuTUURsxQZF5hH0HGs4qFpJ5MGAyeqpjbuH7QbjpsCZk e4URagY/cW9lVDS/KowV9LfnORD3RMJmyqcJHy1ChR7k+9Ip7jvC4Fgmivggxlac Q/7wIkc6JdRCZjTbDZVVBNcxjD2w6akYwQni2I6rRhy7HiXtxQoh1q3f6FJk27Gf JdeqGxPoP1PFOALrsBcGzb9J/t/uqmzQVolgSHil4fpmFvLXr2KWNcLZ68f1GUtq jTZpfG5w25pL8EI+rQKW+aSY5Q2R -----END CERTIFICATE-----Generated at Sat Dec 20 23:51:23 2025 by rpki-client