This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/42D4386CDFDB11F0A18E0FE3536F56BC.roa File: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (raw, json) Hash identifier: mJLvR1p4ts88KkpVKKt2PVk1iLkTAtrbOa4ytntbS6o= Subject key identifier: 43:6B:37:80:8C:E9:AE:B5:53:06:6D:0C:6E:DB:14:29:EB:A0:D8:FB Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Certificate serial: 0226 Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/42D4386CDFDB11F0A18E0FE3536F56BC.roa Signing time: Tue 23 Dec 2025 08:45:18 +0000 ROA not before: Tue 23 Dec 2025 08:45:18 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45352 IP address blocks: 45.117.120.0/24 maxlen: 24 45.117.121.0/24 maxlen: 24 45.117.122.0/24 maxlen: 24 103.57.188.0/24 maxlen: 24 103.57.189.0/24 maxlen: 24 103.57.190.0/23 maxlen: 24 2403:1cc0::/48 maxlen: 48 2403:1cc0:1000::/48 maxlen: 48 2403:1cc0:1001::/48 maxlen: 48 2403:1cc0:1002::/48 maxlen: 48 2403:1cc0:1003::/48 maxlen: 48 2403:1cc0:1007::/48 maxlen: 48 2403:1cc0:1008::/48 maxlen: 48 2403:1cc0:1201::/48 maxlen: 48 2403:1cc0:1301::/48 maxlen: 48 2403:1cc0:1303::/48 maxlen: 48 2403:1cc0:1401::/48 maxlen: 48 2403:1cc0:2000::/48 maxlen: 48 2403:1cc0:2201::/48 maxlen: 48 2403:1cc0:2300::/48 maxlen: 48 2403:1cc0:3201::/48 maxlen: 48 2403:1cc0:3202::/48 maxlen: 48 2403:1cc0:3203::/48 maxlen: 48 2403:1cc0:4101::/48 maxlen: 48 2403:1cc0:5201::/48 maxlen: 48 2403:1cc0:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 01:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A Validity Not Before: Dec 23 08:45:18 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=694a569e-debf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:fa:13:97:35:d2:ee:c8:99:86:06:0d:04: 1e:66:0c:42:30:99:b9:79:bb:3c:d5:b6:aa:86:42: 2c:35:b1:e0:d7:a1:87:dd:1d:22:e3:96:27:0e:39: 3d:14:f7:45:55:3f:5d:20:26:8a:2b:ae:5e:88:d4: 81:fc:28:2c:b7:1b:7e:9c:2b:cb:21:93:25:1a:66: e7:ed:58:39:d5:c3:d4:cf:57:68:22:b4:e3:5b:2b: 70:02:a3:09:38:68:46:da:bc:95:52:87:ca:7b:90: 6c:cf:3c:a2:8b:e2:6a:dc:83:bc:48:8b:91:f6:f9: 6e:52:47:b8:5e:c8:f9:e1:ba:a0:d3:09:4e:1f:f6: 42:96:b8:89:5f:87:4d:2f:19:6c:b3:3e:71:6a:be: 2b:be:d0:a4:2b:51:76:e0:cb:ed:4e:5c:3a:65:89: 31:1c:49:eb:f5:6e:20:ec:42:64:cf:2b:b1:47:25: 84:8e:14:e7:db:22:d3:98:18:86:82:67:a9:1b:ca: a0:13:94:d8:24:b9:9d:10:6a:b1:10:10:9d:d9:ec: dd:2d:57:19:9a:99:ec:7d:be:6b:fb:8b:ec:c8:bb: 57:54:14:49:19:08:31:89:47:97:7f:ff:da:6b:f1: a6:bc:59:c9:8c:8f:fb:3b:42:8a:b0:27:00:d7:37: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6B:37:80:8C:E9:AE:B5:53:06:6D:0C:6E:DB:14:29:EB:A0:D8:FB X509v3 Authority Key Identifier: keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/42D4386CDFDB11F0A18E0FE3536F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.117.120.0-45.117.122.255 103.57.188.0/22 IPv6: 2403:1cc0::/48 2403:1cc0:1000::/46 2403:1cc0:1007::-2403:1cc0:1008:ffff:ffff:ffff:ffff:ffff 2403:1cc0:1201::/48 2403:1cc0:1301::/48 2403:1cc0:1303::/48 2403:1cc0:1401::/48 2403:1cc0:2000::/48 2403:1cc0:2201::/48 2403:1cc0:2300::/48 2403:1cc0:3201::-2403:1cc0:3203:ffff:ffff:ffff:ffff:ffff 2403:1cc0:4101::/48 2403:1cc0:5201::/48 2403:1cc0:6000::/48 Signature Algorithm: sha256WithRSAEncryption 44:bc:e3:da:2d:c3:3d:bf:64:98:58:60:49:24:1a:33:f3:d9: e1:09:09:35:6e:a9:37:72:c0:23:10:19:a3:6b:a4:c6:b2:9d: f0:0a:a7:26:1c:6b:a8:df:2d:e4:09:25:b3:7f:b3:74:8a:07: 82:c4:19:43:1d:5d:6c:01:79:6d:64:f3:04:d4:e8:0d:ee:ce: 0d:86:19:02:dc:0a:04:12:ee:95:2a:9d:75:6d:0d:89:4d:e3: d5:fb:ee:d1:19:5f:3a:06:3b:0d:cd:c6:0d:a8:2b:32:de:e2: 17:8e:2d:ef:7c:65:f4:9f:33:3c:85:2b:85:38:4f:79:fb:97: 75:49:b9:9c:e0:fb:b3:ad:aa:d4:86:ae:f9:8f:11:fb:e4:5a: d8:93:43:16:49:e0:9b:3f:f7:c3:7d:27:5a:db:ca:51:3b:23: bc:57:5f:7f:d5:c3:43:b4:e0:43:30:ce:f8:65:fe:a8:01:93: d0:a8:8f:51:56:5e:cc:73:af:88:93:28:15:03:64:e6:80:c1: 99:f7:75:c4:a0:ee:20:c8:a7:24:c9:70:1e:1f:21:55:b8:22: 2c:39:a2:da:7f:65:94:82:e3:22:2b:75:e3:6b:2f:e0:7c:7c: 33:d1:34:1d:9d:21:e8:1e:03:4d:20:2a:2d:a2:01:62:87:88: fa:b0:62:d4 -----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4RTIxMTAvBgNVBAUTKEI0ODE5ODczMzFFMUVENDA4QjUxQ0I5RkQ4RUY0QTY1 MEFDODY2OUEwHhcNMjUxMjIzMDg0NTE4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRhNTY5ZS1kZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs576E5c10u7ImYYGDQQeZgxCMJm5ebs81baqhkIsNbHg16GH3R0i45YnDjk9 FPdFVT9dICaKK65eiNSB/Cgstxt+nCvLIZMlGmbn7Vg51cPUz1doIrTjWytwAqMJ OGhG2ryVUofKe5Bszzyii+Jq3IO8SIuR9vluUke4Xsj54bqg0wlOH/ZClriJX4dN Lxlssz5xar4rvtCkK1F24MvtTlw6ZYkxHEnr9W4g7EJkzyuxRyWEjhTn2yLTmBiG gmepG8qgE5TYJLmdEGqxEBCd2ezdLVcZmpnsfb5r+4vsyLtXVBRJGQgxiUeXf//a a/GmvFnJjI/7O0KKsCcA1zeKfwIDAQABo4IDRDCCA0AwHQYDVR0OBBYEFENrN4CM 6a61UwZtDG7bFCnroNj7MB8GA1UdIwQYMBaAFLSBmHMx4e1Ai1HLn9jvSmUKyGaa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhFMi85NTJGQTYzMkQy RTYxMUVEOUE1MkQ1NUFDNEY5QUUwMi90SUdZY3pIaDdVQ0xVY3VmMk85S1pRckla cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJR1ljekhoN1VDTFVjdWYyTzlLWlFySVpwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI4RTIvOTUyRkE2MzJEMkU2MTFFRDlBNTJENTVBQzRGOUFFMDIvNDJENDM4NkNE RkRCMTFGMEExOEUwRkUzNTM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgc0GCCsGAQUFBwEHAQH/ BIG9MIG6MBoEAgABMBQwDAMEAy11eAMEAC11egMEAmc5vDCBmwQCAAIwgZQDBwAk AxzAAAADBwIkAxzAEAAwEgMHACQDHMAQBwMHACQDHMAQCAMHACQDHMASAQMHACQD HMATAQMHACQDHMATAwMHACQDHMAUAQMHACQDHMAgAAMHACQDHMAiAQMHACQDHMAj ADASAwcAJAMcwDIBAwcCJAMcwDIAAwcAJAMcwEEBAwcAJAMcwFIBAwcAJAMcwGAA MA0GCSqGSIb3DQEBCwUAA4IBAQBEvOPaLcM9v2SYWGBJJBoz89nhCQk1bqk3csAj EBmja6TGsp3wCqcmHGuo3y3kCSWzf7N0igeCxBlDHV1sAXltZPME1OgN7s4NhhkC 3AoEEu6VKp11bQ2JTePV++7RGV86BjsNzcYNqCsy3uIXji3vfGX0nzM8hSuFOE95 +5d1Sbmc4PuzrarUhq75jxH75FrYk0MWSeCbP/fDfSda28pROyO8V19/1cNDtOBD MM74Zf6oAZPQqI9RVl7Mc6+IkygVA2TmgMGZ93XEoO4gyKckyXAeHyFVuCIsOaLa f2WUguMiK3Xjay/gfHwz0TQdnSHoHgNNICotogFih4j6sGLU -----END CERTIFICATE-----Generated at Mon Dec 29 16:25:45 2025 by rpki-client