This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E108D92ECDDD11EDAB222013C4F9AE02.roa File: E108D92ECDDD11EDAB222013C4F9AE02.roa (raw, json) Hash identifier: ndDCovgOPto1pQHxA8j8O02iq9LQK/m4eBLB6dtRuDE= Subject key identifier: BF:0B:CB:CE:C0:45:B6:F1:73:2C:18:49:84:3B:B7:82:D9:1E:47:3F Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4F4E Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E108D92ECDDD11EDAB222013C4F9AE02.roa Signing time: Fri 12 Dec 2025 03:56:20 +0000 ROA not before: Fri 12 Dec 2025 03:56:20 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131429 IP address blocks: 42.1.64.0/18 maxlen: 24 45.117.156.0/22 maxlen: 22 45.121.24.0/22 maxlen: 24 59.153.220.0/22 maxlen: 24 59.153.224.0/22 maxlen: 24 59.153.228.0/22 maxlen: 24 59.153.232.0/22 maxlen: 24 59.153.236.0/22 maxlen: 24 59.153.240.0/22 maxlen: 24 59.153.244.0/22 maxlen: 24 59.153.248.0/22 maxlen: 24 59.153.252.0/22 maxlen: 24 103.7.174.0/23 maxlen: 24 103.53.252.0/22 maxlen: 24 103.156.0.0/23 maxlen: 23 103.156.0.0/24 maxlen: 24 103.156.1.0/24 maxlen: 24 103.156.2.0/23 maxlen: 23 103.156.2.0/24 maxlen: 24 103.156.3.0/24 maxlen: 24 103.156.4.0/23 maxlen: 23 103.156.4.0/24 maxlen: 24 103.156.5.0/24 maxlen: 24 103.156.6.0/24 maxlen: 24 103.156.7.0/24 maxlen: 24 103.156.8.0/24 maxlen: 24 103.156.9.0/24 maxlen: 24 103.156.38.0/24 maxlen: 24 103.156.39.0/24 maxlen: 24 103.156.40.0/24 maxlen: 24 103.156.41.0/24 maxlen: 24 103.156.42.0/24 maxlen: 24 103.156.43.0/24 maxlen: 24 103.156.44.0/24 maxlen: 24 103.156.45.0/24 maxlen: 24 103.156.46.0/24 maxlen: 24 103.156.47.0/24 maxlen: 24 103.156.48.0/24 maxlen: 24 103.156.49.0/24 maxlen: 24 103.156.58.0/24 maxlen: 24 103.156.59.0/24 maxlen: 24 103.156.60.0/24 maxlen: 24 103.156.61.0/24 maxlen: 24 103.162.20.0/24 maxlen: 24 103.199.20.0/22 maxlen: 24 103.199.24.0/22 maxlen: 24 103.199.28.0/22 maxlen: 24 103.199.32.0/22 maxlen: 24 103.199.36.0/22 maxlen: 24 103.199.40.0/22 maxlen: 24 103.199.44.0/22 maxlen: 24 103.199.48.0/22 maxlen: 24 103.199.52.0/22 maxlen: 24 103.199.56.0/22 maxlen: 24 103.199.60.0/22 maxlen: 24 103.199.64.0/22 maxlen: 24 103.199.68.0/22 maxlen: 24 103.199.72.0/22 maxlen: 24 103.199.76.0/22 maxlen: 24 103.238.80.0/22 maxlen: 22 137.59.24.0/22 maxlen: 24 137.59.28.0/22 maxlen: 24 137.59.32.0/22 maxlen: 24 137.59.36.0/22 maxlen: 24 137.59.40.0/22 maxlen: 24 137.59.44.0/22 maxlen: 24 203.160.132.0/22 maxlen: 22 2402:9d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 10:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20302 (0x4f4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Dec 12 03:56:20 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=693b9264-c6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:48:dc:6a:66:6f:d2:23:cb:35:d2:4e:96: df:be:dc:d9:84:a4:d2:ff:a8:73:69:5f:15:fe:d9: 85:40:bf:6a:59:ad:ca:87:60:15:9b:c1:45:da:93: ac:aa:bb:fd:74:b4:f8:a0:fd:2e:62:3d:73:4d:6a: bd:4e:13:f0:78:f6:da:09:4e:97:12:f1:38:6d:95: 58:78:6c:5f:46:9e:d5:8a:3b:ee:86:b1:b4:60:f2: c1:83:d3:92:ba:fa:fc:ed:84:8b:9f:3e:39:07:28: 8c:74:a3:8b:b9:92:b9:da:96:6f:8f:3e:97:c8:f5: 05:9c:dc:d0:0f:26:d0:e2:85:5d:51:a9:67:78:a7: f1:f7:12:3d:e8:da:d5:78:7d:15:a2:ff:63:b2:26: d5:0b:ec:2f:2c:29:44:cf:3b:c4:b0:26:a3:63:8b: 4b:eb:48:46:a6:3c:c1:57:c9:3b:52:3b:71:ce:52: 89:83:23:5a:30:9c:f6:ed:a5:cc:02:76:83:03:c2: cf:d5:93:7d:4e:2f:b5:66:78:29:49:df:f7:c3:de: ef:8e:0f:3f:04:46:1a:47:fa:52:93:01:45:35:da: 1e:2c:8b:b7:03:57:97:ab:66:8e:fc:52:05:7c:23: 21:d3:80:a1:2e:49:c1:d6:ec:a4:fa:54:cd:1b:b2: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0B:CB:CE:C0:45:B6:F1:73:2C:18:49:84:3B:B7:82:D9:1E:47:3F X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E108D92ECDDD11EDAB222013C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 42.1.64.0/18 45.117.156.0/22 45.121.24.0/22 59.153.220.0-59.153.255.255 103.7.174.0/23 103.53.252.0/22 103.156.0.0-103.156.9.255 103.156.38.0-103.156.49.255 103.156.58.0-103.156.61.255 103.162.20.0/24 103.199.20.0-103.199.79.255 103.238.80.0/22 137.59.24.0-137.59.47.255 203.160.132.0/22 IPv6: 2402:9d80::/32 Signature Algorithm: sha256WithRSAEncryption 8f:30:3c:e9:43:a6:21:63:12:60:b4:5c:f6:ce:62:c6:ea:f1: 40:79:2a:ac:3d:cd:15:bc:e3:12:22:b5:8f:55:37:a3:23:86: 0b:d3:18:c2:a3:8e:e9:d8:50:66:74:40:a2:8f:ab:c4:5f:d7: c4:20:bb:b6:3c:1f:1d:e4:a6:7f:57:8b:a4:c3:28:88:48:0d: 86:20:8e:19:e6:a1:fa:38:04:d3:28:2c:0f:99:56:b5:9e:c8: c5:22:b4:58:1f:46:46:88:7e:07:9a:39:ed:91:64:b0:33:aa: 65:35:f2:8b:dc:97:1b:ac:51:0e:19:ca:d4:41:41:86:40:41: 17:2a:e5:47:88:6f:b6:54:5b:d1:92:45:db:d9:c3:41:43:9f: 0f:8d:c7:5c:f7:0d:3c:f5:ab:51:35:f7:ba:41:c2:65:9e:06: 38:eb:28:22:fd:ee:39:a3:53:31:43:b8:f2:4a:41:f4:47:d3: 44:82:b4:a2:ee:24:c4:41:15:05:9c:6e:6d:3d:e0:d3:4e:fb: d4:23:c8:33:0e:81:5c:09:e1:42:ea:70:30:cb:05:a6:a2:05: ac:c1:ec:9c:83:d7:c2:06:c7:8f:0c:e8:c8:75:b2:85:76:c1: 03:d0:39:08:54:60:fb:a6:bf:24:2c:4c:18:a2:b0:68:e2:38: a6:05:60:b9 -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgICT04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUxMjEyMDM1NjIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNiOTI2NC1jNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkjVI3Gpmb9IjyzXSTpbfvtzZhKTS/6hzaV8V/tmFQL9qWa3Kh2AVm8FF2pOs qrv9dLT4oP0uYj1zTWq9ThPwePbaCU6XEvE4bZVYeGxfRp7VijvuhrG0YPLBg9OS uvr87YSLnz45ByiMdKOLuZK52pZvjz6XyPUFnNzQDybQ4oVdUalneKfx9xI96NrV eH0Vov9jsibVC+wvLClEzzvEsCajY4tL60hGpjzBV8k7UjtxzlKJgyNaMJz27aXM AnaDA8LP1ZN9Ti+1ZngpSd/3w97vjg8/BEYaR/pSkwFFNdoeLIu3A1eXq2aO/FIF fCMh04ChLknB1uyk+lTNG7LPgQIDAQABo4IDJTCCAyEwHQYDVR0OBBYEFL8Ly87A RbbxcywYSYQ7t4LZHkc/MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTEwOEQ5MkVD REREMTFFREFCMjIyMDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwga4GCCsGAQUFBwEHAQH/ BIGeMIGbMIGJBAIAATCBggMEBioBQAMEAi11nAMEAi15GDALAwQCO5ncAwMBO5gD BAFnB64DBAJnNfwwCwMDAmecAwQBZ5wIMAwDBAFnnCYDBAFnnDAwDAMEAWecOgME AWecPAMEAGeiFDAMAwQCZ8cUAwQEZ8dAAwQCZ+5QMAwDBAOJOxgDBASJOyADBALL oIQwDQQCAAIwBwMFACQCnYAwDQYJKoZIhvcNAQELBQADggEBAI8wPOlDpiFjEmC0 XPbOYsbq8UB5Kqw9zRW84xIitY9VN6MjhgvTGMKjjunYUGZ0QKKPq8Rf18Qgu7Y8 Hx3kpn9Xi6TDKIhIDYYgjhnmofo4BNMoLA+ZVrWeyMUitFgfRkaIfgeaOe2RZLAz qmU18ovclxusUQ4ZytRBQYZAQRcq5UeIb7ZUW9GSRdvZw0FDnw+Nx1z3DTz1q1E1 97pBwmWeBjjrKCL97jmjUzFDuPJKQfRH00SCtKLuJMRBFQWcbm094NNO+9QjyDMO gVwJ4ULqcDDLBaaiBazB7JyD18IGx48M6Mh1soV2wQPQOQhUYPumvyQsTBiisGji OKYFYLk= -----END CERTIFICATE-----Generated at Sat Dec 20 09:51:12 2025 by rpki-client