This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/CEBECC28D38811E8A763B462C4F9AE02.roa File: CEBECC28D38811E8A763B462C4F9AE02.roa (raw, json) Hash identifier: nxXSdnwoUfmzLx95eiSN62zk0YbQxEgJtgpJheqOOz4= Subject key identifier: 82:97:66:13:74:BF:2C:5F:F7:84:BF:C4:02:59:AA:E7:AF:1D:C3:A0 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 12F7 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/CEBECC28D38811E8A763B462C4F9AE02.roa Signing time: Fri 19 Dec 2025 02:13:02 +0000 ROA not before: Fri 19 Dec 2025 02:13:02 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 38001 IP address blocks: 43.245.60.0/24 maxlen: 24 43.245.61.0/24 maxlen: 24 43.245.62.0/24 maxlen: 24 43.245.63.0/24 maxlen: 24 45.119.200.0/24 maxlen: 24 45.119.201.0/24 maxlen: 24 45.119.202.0/24 maxlen: 24 103.14.76.0/24 maxlen: 24 103.14.77.0/24 maxlen: 24 103.14.79.0/24 maxlen: 24 103.25.52.0/24 maxlen: 24 103.60.8.0/24 maxlen: 24 103.60.11.0/24 maxlen: 24 103.200.216.0/24 maxlen: 24 103.200.217.0/24 maxlen: 24 103.200.218.0/24 maxlen: 24 103.200.219.0/24 maxlen: 24 119.161.101.0/24 maxlen: 24 119.161.102.0/24 maxlen: 24 119.161.103.0/24 maxlen: 24 202.150.208.0/20 maxlen: 20 202.150.208.0/24 maxlen: 24 202.150.209.0/24 maxlen: 24 202.150.210.0/24 maxlen: 24 202.150.211.0/24 maxlen: 24 202.150.212.0/24 maxlen: 24 202.150.213.0/24 maxlen: 24 202.150.214.0/24 maxlen: 24 202.150.215.0/24 maxlen: 24 202.150.216.0/24 maxlen: 24 202.150.217.0/24 maxlen: 24 202.150.218.0/24 maxlen: 24 202.150.219.0/24 maxlen: 24 202.150.220.0/24 maxlen: 24 202.150.221.0/24 maxlen: 24 202.150.222.0/24 maxlen: 24 202.150.223.0/24 maxlen: 24 203.174.80.0/21 maxlen: 21 203.174.80.0/24 maxlen: 24 203.174.81.0/24 maxlen: 24 203.174.82.0/24 maxlen: 24 203.174.83.0/24 maxlen: 24 203.174.84.0/24 maxlen: 24 203.174.85.0/24 maxlen: 24 203.174.86.0/24 maxlen: 24 203.174.87.0/24 maxlen: 24 2406:f400::/32 maxlen: 32 2406:f400::/44 maxlen: 44 2406:f400:20::/44 maxlen: 44 2406:f400:40::/44 maxlen: 44 2406:f400:80::/44 maxlen: 44 2406:f400:b0::/44 maxlen: 44 2406:f400:100::/44 maxlen: 44 2406:f400:130::/44 maxlen: 44 2406:f400:160::/44 maxlen: 44 2406:f400:161::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4855 (0x12f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Dec 19 02:13:02 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6944b4ae-3987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:9d:63:b3:20:51:1d:71:43:65:bd:c1:5b: d5:7f:26:07:12:f3:10:6b:26:24:05:ef:4a:41:86: fb:e8:a1:b5:91:76:cd:09:dd:86:94:48:66:3c:6b: c9:3e:e1:17:41:11:c5:e4:9b:b4:72:a1:a3:4b:ff: 57:f6:b1:43:6f:83:d9:10:7b:94:5f:f9:03:3b:c1: 32:b5:6d:c0:05:e1:a5:93:23:0b:09:be:0e:00:7a: 02:52:eb:94:02:c8:6d:24:30:f7:16:4a:2d:77:47: 4a:26:90:fc:8d:31:f2:ce:39:86:a1:0f:c4:a7:45: 3a:ad:f0:97:4a:b2:ed:f3:b2:45:05:31:56:f7:1f: a8:21:8b:25:34:31:ac:e7:de:5c:c3:cd:15:f3:a4: 29:f2:1a:6b:d2:a5:9c:aa:7b:2d:d4:00:c5:60:6d: 58:23:60:9a:a0:47:9b:5c:5e:58:14:ce:7b:58:45: 7e:10:1d:4d:15:5e:36:dd:02:49:f0:8e:ed:bc:48: 79:85:8e:b8:9f:e8:7f:7c:d8:8d:81:62:98:fe:22: 77:9e:20:67:44:cb:4a:fb:03:c3:39:d1:98:99:b7: 6e:92:e3:ba:ae:b2:77:e0:75:89:78:2c:96:ab:82: 6c:a0:90:b1:33:ad:86:cd:84:0c:61:e2:e6:9d:7e: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:97:66:13:74:BF:2C:5F:F7:84:BF:C4:02:59:AA:E7:AF:1D:C3:A0 X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/CEBECC28D38811E8A763B462C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.60.0/22 45.119.200.0-45.119.202.255 103.14.76.0/23 103.14.79.0/24 103.25.52.0/24 103.60.8.0/24 103.60.11.0/24 103.200.216.0/22 119.161.101.0-119.161.103.255 202.150.208.0/20 203.174.80.0/21 IPv6: 2406:f400::/32 Signature Algorithm: sha256WithRSAEncryption 1d:ab:a5:ec:65:f4:b4:46:0c:a8:43:9a:66:43:a7:dc:77:dd: d2:a8:f5:79:0c:95:0a:3c:e4:1e:24:d1:30:77:cb:cc:31:9d: d8:78:03:5e:4c:32:5b:32:52:ab:ab:c0:16:87:16:c3:86:b2: d7:f5:3e:0a:ab:6f:49:7e:18:c7:f4:e7:06:71:7f:a6:65:38: fb:3c:75:c2:43:87:01:c6:81:9b:24:03:b1:bd:d6:4b:33:fe: 51:38:d0:c2:98:63:78:7f:23:0d:b0:1d:92:a7:4e:ce:2e:26: 45:09:46:63:1d:60:d3:99:0b:f6:e3:ed:00:4a:7b:95:81:c5: 51:51:fd:32:9b:e1:b9:d8:d3:14:9b:fe:83:4e:9c:1c:44:f2: 2c:d2:f8:90:b4:91:ed:10:8b:b3:af:29:9c:e3:da:c6:db:3c: c5:f5:6a:bc:56:09:dc:b7:34:27:ed:90:ee:28:77:91:92:bd: bb:d7:43:54:1e:4f:60:e8:f5:81:c1:99:08:06:89:5a:6c:93: 0a:40:a6:f3:38:b7:d7:3b:13:61:ab:2f:16:88:54:8b:18:22: 37:99:e1:e5:1f:cc:1e:e5:ef:f4:f5:99:55:bd:79:48:90:d7: d0:b4:19:18:c9:e3:2f:61:b4:fd:36:6f:b7:96:f4:d9:6f:c7: 21:84:b9:34 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgICEvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUxMjE5MDIxMzAyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ0YjRhZS0zOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWmdY7MgUR1xQ2W9wVvVfyYHEvMQayYkBe9KQYb76KG1kXbNCd2GlEhmPGvJ PuEXQRHF5Ju0cqGjS/9X9rFDb4PZEHuUX/kDO8EytW3ABeGlkyMLCb4OAHoCUuuU AshtJDD3Fkotd0dKJpD8jTHyzjmGoQ/Ep0U6rfCXSrLt87JFBTFW9x+oIYslNDGs 595cw80V86Qp8hpr0qWcqnst1ADFYG1YI2CaoEebXF5YFM57WEV+EB1NFV423QJJ 8I7tvEh5hY64n+h/fNiNgWKY/iJ3niBnRMtK+wPDOdGYmbdukuO6rrJ34HWJeCyW q4JsoJCxM62GzYQMYeLmnX7G9QIDAQABo4IC8DCCAuwwHQYDVR0OBBYEFIKXZhN0 vyxf94S/xAJZquevHcOgMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkZFNkEvMUQ2NDMyOEVEMzg3MTFFOEJENzA3NTVDQzRGOUFFMDIvQ0VCRUNDMjhE Mzg4MTFFOEE3NjNCNDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwegYIKwYBBQUHAQcBAf8E azBpMFgEAgABMFIDBAIr9TwwDAMEAy13yAMEAC13ygMEAWcOTAMEAGcOTwMEAGcZ NAMEAGc8CAMEAGc8CwMEAmfI2DAMAwQAd6FlAwQDd6FgAwQEypbQAwQDy65QMA0E AgACMAcDBQAkBvQAMA0GCSqGSIb3DQEBCwUAA4IBAQAdq6XsZfS0RgyoQ5pmQ6fc d93SqPV5DJUKPOQeJNEwd8vMMZ3YeANeTDJbMlKrq8AWhxbDhrLX9T4Kq29JfhjH 9OcGcX+mZTj7PHXCQ4cBxoGbJAOxvdZLM/5RONDCmGN4fyMNsB2Sp07OLiZFCUZj HWDTmQv24+0ASnuVgcVRUf0ym+G52NMUm/6DTpwcRPIs0viQtJHtEIuzrymc49rG 2zzF9Wq8VgnctzQn7ZDuKHeRkr2710NUHk9g6PWBwZkIBolabJMKQKbzOLfXOxNh qy8WiFSLGCI3meHlH8we5e/09ZlVvXlIkNfQtBkYyeMvYbT9Nm+3lvTZb8chhLk0 -----END CERTIFICATE-----Generated at Sun Dec 21 13:24:53 2025 by rpki-client