This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/0DCBAC3863C111EE9A8AA77AC4F9AE02.roa File: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (raw, json) Hash identifier: +1v8a+kd3vrNlmA49WuinXFLbTN3K9vA54mVSEDCwVI= Subject key identifier: C2:27:A3:A5:03:E3:9C:68:86:B3:CA:31:F1:4D:03:FF:18:61:5D:CD Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Certificate serial: 024F Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/0DCBAC3863C111EE9A8AA77AC4F9AE02.roa Signing time: Wed 17 Dec 2025 02:21:24 +0000 ROA not before: Wed 17 Dec 2025 02:21:24 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 8075 IP address blocks: 128.94.0.0/16 maxlen: 16 135.149.0.0/16 maxlen: 16 138.239.0.0/16 maxlen: 16 147.145.0.0/16 maxlen: 16 148.7.0.0/16 maxlen: 16 155.62.0.0/16 maxlen: 16 158.23.0.0/16 maxlen: 16 158.158.0.0/16 maxlen: 16 167.105.0.0/16 maxlen: 16 167.220.240.0/22 maxlen: 24 169.138.0.0/16 maxlen: 16 170.165.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Validity Not Before: Dec 17 02:21:24 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=694213a4-bbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:9f:9a:48:3d:01:fd:d7:9f:03:d2:de:32: af:38:61:89:db:3d:64:f3:35:66:e6:85:6c:8d:e0: c0:37:ab:d8:de:81:23:e3:e7:50:1d:ae:be:b1:0a: fd:8c:e5:7f:e0:e4:c0:93:fc:0b:fe:de:d3:f0:c1: a9:c4:97:fe:b2:13:c9:7c:c1:41:d6:21:58:0f:3f: 8f:64:f2:de:6b:8f:4f:cc:f7:87:3b:41:f6:6d:1d: 50:74:41:19:91:b4:dd:3a:2a:0f:16:75:ba:1c:d2: 27:6f:eb:b4:f9:7e:e1:67:65:64:bb:b5:50:51:09: d9:3a:78:7b:0e:d6:bc:de:56:f5:65:69:17:7e:dc: d4:19:1a:cd:b3:2f:3e:9e:85:fe:bf:c1:15:16:cf: 62:47:8b:c7:84:3e:cc:90:14:ff:fe:b8:09:3c:f5: d5:e1:84:b5:75:eb:b8:b8:ed:bd:9a:f5:de:75:b7: 3d:2e:6c:64:1a:90:c1:59:09:fd:97:e7:e5:a2:b9: d8:ad:32:b2:2c:6e:29:06:65:55:53:27:0d:6f:0c: c4:70:53:60:0a:62:e4:69:c0:5e:1e:9a:27:ad:0e: e0:f6:97:96:cb:ca:a4:69:7d:9b:bc:99:0a:c3:03: 2e:a7:3e:0a:a6:ce:53:03:69:32:eb:ee:2c:b6:78: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:27:A3:A5:03:E3:9C:68:86:B3:CA:31:F1:4D:03:FF:18:61:5D:CD X509v3 Authority Key Identifier: keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/0DCBAC3863C111EE9A8AA77AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.94.0.0/16 135.149.0.0/16 138.239.0.0/16 147.145.0.0/16 148.7.0.0/16 155.62.0.0/16 158.23.0.0/16 158.158.0.0/16 167.105.0.0/16 167.220.240.0/22 169.138.0.0/16 170.165.0.0/16 Signature Algorithm: sha256WithRSAEncryption 14:7b:55:59:4c:6f:cd:0b:db:68:f6:5d:5d:26:df:54:00:30: b1:b9:9f:57:49:5f:66:a1:ca:58:81:a0:cb:a1:1f:31:50:e0: 56:67:c3:45:3e:0e:a5:57:a5:41:5b:a5:3d:c0:86:23:ae:48: ae:c1:cf:90:1c:2d:db:4c:ac:c8:5f:95:e3:c8:06:ac:38:76: 4e:f6:36:39:00:60:b4:d1:ca:45:2e:3e:45:7c:ab:38:6f:c1: 3e:bb:48:23:a4:cc:b7:6b:f1:c8:c1:6d:47:72:a1:85:b6:2b: 60:40:55:5f:49:4f:39:05:54:e4:43:d6:e4:48:51:32:02:5b: fd:91:83:b5:c0:df:72:cb:b8:a1:2a:21:44:7f:e9:1f:1a:3a: 90:ae:e2:36:b4:25:46:2d:cd:9d:97:e5:6a:86:f2:2a:1d:17: 6e:9a:3b:cf:8d:4a:d6:35:34:be:c7:fe:b4:3d:4a:fb:6c:66: 65:21:1f:7c:95:d3:0f:80:0c:0a:9b:96:2b:e5:83:47:da:e9: 9f:8c:8b:86:f2:b7:04:d1:1c:a8:cd:0d:d5:52:66:ab:01:93: b8:bc:28:19:91:3e:1a:a5:58:7a:bc:7f:d8:63:11:2b:74:c4: 3d:9f:b3:51:ce:48:d4:03:4d:0b:45:6a:77:5b:0e:f5:e5:2e: 0f:f7:e0:ec -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx MTBENDVCRTMwHhcNMjUxMjE3MDIyMTI0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyMTNhNC1iYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTafmkg9Af3XnwPS3jKvOGGJ2z1k8zVm5oVsjeDAN6vY3oEj4+dQHa6+sQr9 jOV/4OTAk/wL/t7T8MGpxJf+shPJfMFB1iFYDz+PZPLea49PzPeHO0H2bR1QdEEZ kbTdOioPFnW6HNInb+u0+X7hZ2Vku7VQUQnZOnh7Dta83lb1ZWkXftzUGRrNsy8+ noX+v8EVFs9iR4vHhD7MkBT//rgJPPXV4YS1deu4uO29mvXedbc9LmxkGpDBWQn9 l+flornYrTKyLG4pBmVVUycNbwzEcFNgCmLkacBeHponrQ7g9peWy8qkaX2bvJkK wwMupz4Kps5TA2ky6+4stnhw0wIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFMIno6UD 45xohrPKMfFNA/8YYV3NMB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNFM0YvMzA1RUI4NzY3Q0RCMTFFREFCODQ0QzE5QzRGOUFFMDIvMERDQkFDMzg2 M0MxMTFFRTlBOEFBNzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVgYIKwYBBQUHAQcBAf8E RzBFMEMEAgABMD0DAwCAXgMDAIeVAwMAiu8DAwCTkQMDAJQHAwMAmz4DAwCeFwMD AJ6eAwMAp2kDBAKn3PADAwCpigMDAKqlMA0GCSqGSIb3DQEBCwUAA4IBAQAUe1VZ TG/NC9to9l1dJt9UADCxuZ9XSV9mocpYgaDLoR8xUOBWZ8NFPg6lV6VBW6U9wIYj rkiuwc+QHC3bTKzIX5XjyAasOHZO9jY5AGC00cpFLj5FfKs4b8E+u0gjpMy3a/HI wW1HcqGFtitgQFVfSU85BVTkQ9bkSFEyAlv9kYO1wN9yy7ihKiFEf+kfGjqQruI2 tCVGLc2dl+VqhvIqHRdumjvPjUrWNTS+x/60PUr7bGZlIR98ldMPgAwKm5Yr5YNH 2umfjIuG8rcE0RyozQ3VUmarAZO4vCgZkT4apVh6vH/YYxErdMQ9n7NRzkjUA00L RWp3Ww715S4P9+Ds -----END CERTIFICATE-----Generated at Sat Dec 20 04:29:16 2025 by rpki-client