This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/6D2F20B6ECEB11EE960F5531C4F9AE02.roa File: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (raw, json) Hash identifier: g9HYL1+pTKAa4euOG+/9SYVSf8XxoFi+2Ggs2G8Lo5g= Subject key identifier: E9:10:80:C6:2C:DA:A5:2A:6B:55:C2:88:18:4F:79:B9:00:6F:22:82 Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 223C Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/6D2F20B6ECEB11EE960F5531C4F9AE02.roa Signing time: Wed 31 Dec 2025 16:13:09 +0000 ROA not before: Wed 31 Dec 2025 16:13:09 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 55915 IP address blocks: 43.231.208.0/22 maxlen: 24 45.64.160.0/22 maxlen: 24 45.123.220.0/22 maxlen: 24 49.236.212.0/22 maxlen: 24 103.1.92.0/22 maxlen: 24 103.51.16.0/22 maxlen: 24 103.192.76.0/22 maxlen: 24 202.94.66.0/24 maxlen: 24 2407:5200::/32 maxlen: 32 2407:5200:1::/48 maxlen: 48 2407:5200:32::/48 maxlen: 48 2407:5200:48::/48 maxlen: 48 2407:5200:49::/48 maxlen: 48 2407:5200:4c::/46 maxlen: 48 2407:5200:50::/46 maxlen: 48 2407:5200:200::/46 maxlen: 48 2407:5200:204::/46 maxlen: 48 2407:5200:300::/46 maxlen: 48 2407:5200:400::/46 maxlen: 48 2407:5200:404::/46 maxlen: 48 2407:5200:600::/46 maxlen: 48 2407:5200:1000::/40 maxlen: 48 2407:5200:1200::/40 maxlen: 48 2407:5200:1300::/40 maxlen: 48 2407:5200:1500::/40 maxlen: 40 2407:5200:4920::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 16:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8764 (0x223c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: Dec 31 16:13:09 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69554b95-aee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:12:b1:ac:ee:cc:8c:7c:4f:ce:8d:bb:0b:99: 4a:e4:48:e5:39:22:bb:29:ad:06:bd:6e:0d:91:92: e6:38:4c:b2:09:34:b7:9b:46:61:bf:71:22:2b:80: bd:5e:2f:24:0b:7d:91:60:0c:1c:56:c3:4e:51:a0: c6:e6:73:14:b1:c0:24:5b:60:91:66:c1:47:b1:3f: f3:92:b6:93:4d:c5:26:85:21:e9:a9:97:0b:f9:32: b6:4a:39:9c:a2:fe:31:b4:88:81:fe:a8:d8:e1:b1: 78:2f:44:fb:69:8e:21:1a:6a:07:4b:c5:1a:de:15: d2:2b:56:c0:f7:33:c3:ec:c1:7e:37:e8:e9:ef:f6: d3:5b:38:db:44:e2:ca:3f:b1:27:4b:21:df:42:fd: 6c:bb:0f:9b:21:39:71:26:43:57:7e:ff:37:87:35: 84:e9:fa:ed:3f:c5:01:d0:30:86:7e:65:cc:93:6c: 00:e0:d0:fc:f5:d3:56:dc:8e:a5:e3:c3:a5:d8:58: 3c:df:e7:60:48:b6:76:72:f0:e2:03:b0:c1:d1:4d: b4:1b:16:df:e8:12:32:3a:95:81:94:87:f8:e8:05: 68:4e:9e:3e:c2:6d:2a:dc:60:02:25:d9:11:9c:34: 7f:17:35:d3:92:38:0a:91:6f:16:5d:cb:71:01:07: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:10:80:C6:2C:DA:A5:2A:6B:55:C2:88:18:4F:79:B9:00:6F:22:82 X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/6D2F20B6ECEB11EE960F5531C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.208.0/22 45.64.160.0/22 45.123.220.0/22 49.236.212.0/22 103.1.92.0/22 103.51.16.0/22 103.192.76.0/22 202.94.66.0/24 IPv6: 2407:5200::/32 Signature Algorithm: sha256WithRSAEncryption 2d:1b:68:dc:05:c5:30:b9:ae:b0:76:e4:07:b8:fc:f7:68:17: 80:07:c0:9e:b0:6c:7a:94:a3:16:0f:72:47:df:41:c6:e0:f7: 48:93:ce:3e:64:46:d4:32:f2:54:df:83:0d:d2:57:25:46:b7: 4b:ee:62:0b:0d:b9:a8:61:ad:94:d9:41:d5:2c:15:d5:90:df: f3:ef:8d:3f:74:de:19:f9:76:86:66:57:61:f2:f6:d2:61:1b: ae:f7:8f:3c:bc:9a:d4:63:cb:5c:ad:96:0b:8e:cc:da:cb:d7: c2:36:29:5d:75:1e:d3:68:7d:c5:86:10:cd:28:db:1d:e2:ef: d3:93:06:25:59:63:29:0a:13:57:62:c6:c2:67:0a:19:e0:e5: 1f:fc:39:58:b8:aa:18:b6:37:69:a5:61:02:69:29:bb:3b:aa: 3e:d7:58:81:a2:d9:f7:25:3f:7d:61:f9:43:32:8b:5f:d0:20: fa:de:1d:9b:77:b8:1a:ea:db:44:1c:e1:d7:15:b4:93:1a:81: 74:7f:75:0d:b7:cc:29:f5:ee:15:2a:f3:44:40:39:d8:5c:3f: f0:5b:25:f7:7c:f6:18:7b:cb:02:78:cd:98:2b:59:ed:05:e2: 96:b1:d4:36:45:14:e5:6e:a8:ea:d4:93:a5:04:00:63:c5:2e: 1c:4b:72:09 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgICIjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUxMjMxMTYxMzA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1NGI5NS1hZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hKxrO7MjHxPzo27C5lK5EjlOSK7Ka0GvW4NkZLmOEyyCTS3m0Zhv3EiK4C9 Xi8kC32RYAwcVsNOUaDG5nMUscAkW2CRZsFHsT/zkraTTcUmhSHpqZcL+TK2Sjmc ov4xtIiB/qjY4bF4L0T7aY4hGmoHS8Ua3hXSK1bA9zPD7MF+N+jp7/bTWzjbROLK P7EnSyHfQv1suw+bITlxJkNXfv83hzWE6frtP8UB0DCGfmXMk2wA4ND89dNW3I6l 48Ol2Fg83+dgSLZ2cvDiA7DB0U20Gxbf6BIyOpWBlIf46AVoTp4+wm0q3GACJdkR nDR/FzXTkjgKkW8WXctxAQcLiQIDAQABo4ICzjCCAsowHQYDVR0OBBYEFOkQgMYs 2qUqa1XCiBhPebkAbyKCMB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVCRkIvREYyRTAxM0VEOUZCMTFFNTg0RDExQTc2QzRGOUFFMDIvNkQyRjIwQjZF Q0VCMTFFRTk2MEY1NTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWAYIKwYBBQUHAQcBAf8E STBHMDYEAgABMDADBAIr59ADBAItQKADBAIte9wDBAIx7NQDBAJnAVwDBAJnMxAD BAJnwEwDBADKXkIwDQQCAAIwBwMFACQHUgAwDQYJKoZIhvcNAQELBQADggEBAC0b aNwFxTC5rrB25Ae4/PdoF4AHwJ6wbHqUoxYPckffQcbg90iTzj5kRtQy8lTfgw3S VyVGt0vuYgsNuahhrZTZQdUsFdWQ3/PvjT903hn5doZmV2Hy9tJhG673jzy8mtRj y1ytlguOzNrL18I2KV11HtNofcWGEM0o2x3i79OTBiVZYykKE1dixsJnChng5R/8 OVi4qhi2N2mlYQJpKbs7qj7XWIGi2fclP31h+UMyi1/QIPreHZt3uBrq20Qc4dcV tJMagXR/dQ23zCn17hUq80RAOdhcP/BbJfd89hh7ywJ4zZgrWe0F4pax1DZFFOVu qOrUk6UEAGPFLhxLcgk= -----END CERTIFICATE-----Generated at Thu Jan 1 21:22:11 2026 by rpki-client