This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/60523BEA0CA411ED96936D79C4F9AE02.roa File: 60523BEA0CA411ED96936D79C4F9AE02.roa (raw, json) Hash identifier: OQIkbwlCViwSOj9dfBW5VkaYDNYnAz/ZF6UE1oh8y0o= Subject key identifier: AB:07:1B:BC:27:46:FF:8A:7E:42:C7:EC:AF:B6:11:49:4F:14:F0:1F Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 0435 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/60523BEA0CA411ED96936D79C4F9AE02.roa Signing time: Wed 07 Jan 2026 11:55:46 +0000 ROA not before: Wed 07 Jan 2026 11:55:46 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133861 IP address blocks: 43.225.44.0/24 maxlen: 24 43.225.45.0/24 maxlen: 24 43.225.46.0/24 maxlen: 24 43.225.47.0/24 maxlen: 24 43.240.28.0/22 maxlen: 22 43.240.28.0/24 maxlen: 24 43.240.29.0/24 maxlen: 24 43.240.30.0/24 maxlen: 24 43.240.31.0/24 maxlen: 24 43.242.32.0/22 maxlen: 22 43.242.32.0/24 maxlen: 24 43.242.33.0/24 maxlen: 24 43.242.34.0/24 maxlen: 24 43.242.35.0/24 maxlen: 24 45.119.96.0/24 maxlen: 24 45.119.97.0/24 maxlen: 24 45.119.98.0/24 maxlen: 24 45.119.99.0/24 maxlen: 24 103.44.28.0/24 maxlen: 24 103.44.29.0/24 maxlen: 24 103.44.30.0/24 maxlen: 24 103.44.31.0/24 maxlen: 24 103.59.144.0/24 maxlen: 24 103.59.145.0/24 maxlen: 24 103.59.146.0/24 maxlen: 24 103.59.147.0/24 maxlen: 24 103.249.108.0/24 maxlen: 24 103.249.109.0/24 maxlen: 24 103.249.110.0/24 maxlen: 24 103.249.111.0/24 maxlen: 24 103.254.148.0/24 maxlen: 24 103.254.149.0/24 maxlen: 24 103.254.150.0/24 maxlen: 24 103.254.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 12:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Jan 7 11:55:46 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=695e49c2-76ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:48:53:a3:f5:01:a8:1c:7a:85:c3:34:31: 33:e1:bc:50:56:97:93:b7:aa:31:43:a0:67:21:42: 53:e6:66:f3:e4:c9:ca:5c:19:e4:f1:1e:3a:72:81: dd:a3:a0:26:15:d5:16:9b:78:d0:28:7e:4a:5e:da: 6f:ba:4e:9a:c6:6a:d4:c4:b9:af:09:25:95:54:ba: 88:11:9a:a0:03:54:cd:cb:9f:db:d3:0e:40:ae:bc: 0a:a2:1f:a1:fa:49:12:37:47:b6:41:eb:d4:6a:b5: ec:a4:1d:85:1b:74:0c:08:6c:da:64:e3:0a:9c:ea: c2:4b:19:74:58:de:a4:f2:19:4f:4a:9c:4d:e1:4a: c2:1e:6e:dc:df:2f:3c:08:47:9b:df:2f:c7:60:2a: 2f:66:d3:85:aa:4a:cb:be:50:ef:ee:e4:29:09:10: 03:89:7d:ac:d7:7c:d3:72:db:ff:22:7e:28:98:b0: dc:4a:91:c4:8c:3c:00:fa:2d:6b:f7:41:6b:db:9b: 61:3a:f2:05:07:0d:ee:b4:24:da:d7:c4:42:9d:d4: 8b:15:10:29:04:6e:36:26:d6:f3:ea:93:87:5e:2c: 1a:b1:05:81:88:22:9a:e8:df:80:74:ed:ae:da:57: 5a:c0:91:1c:b9:2a:a5:37:1d:25:99:ed:11:1a:16: 3f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:07:1B:BC:27:46:FF:8A:7E:42:C7:EC:AF:B6:11:49:4F:14:F0:1F X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/60523BEA0CA411ED96936D79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.44.0/22 43.240.28.0/22 43.242.32.0/22 45.119.96.0/22 103.44.28.0/22 103.59.144.0/22 103.249.108.0/22 103.254.148.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:f5:59:f2:4d:cc:07:8d:34:0f:b4:05:e0:56:c2:b5:7f:af: 82:d9:7a:34:2f:1f:9d:78:40:98:a9:71:22:3a:88:0c:c9:56: 88:29:78:d7:4b:6e:00:f0:a2:49:dd:98:44:3f:5d:14:1d:6d: c6:33:ca:5a:d5:94:38:fc:ab:c6:bf:af:08:0a:0d:31:78:95: d6:b7:e6:98:8d:3d:84:79:72:95:fa:b0:db:26:8a:dd:47:ef: 15:20:05:4c:a5:80:c8:c8:30:41:5d:3b:7c:27:e7:66:0e:bd: 55:aa:3f:03:2d:97:e8:73:9d:95:b2:fd:85:18:b6:4d:85:90: ed:1b:13:69:a8:16:32:3d:f6:8e:22:e6:3d:86:e3:13:72:33: be:3d:30:4d:4e:6e:a8:17:e5:d7:bb:0e:f4:4e:ce:5b:20:55: 0c:d0:29:5d:54:bd:c4:e8:51:31:f8:83:ba:33:81:39:20:86: 6c:10:81:cd:69:a5:22:f1:1a:19:1b:14:b9:91:d8:72:a2:c5: ba:a5:2c:da:df:d8:9a:87:df:cd:51:85:5b:07:0f:46:79:e3: 5d:66:e9:4f:97:3a:5a:b8:fb:14:5a:32:18:3c:f9:73:b3:59: 8b:78:60:21:e3:9a:4a:bf:b6:d0:34:6f:0a:14:9b:12:d9:41: f9:4b:75:19 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjYwMTA3MTE1NTQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVlNDljMi03NmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudJIU6P1AagceoXDNDEz4bxQVpeTt6oxQ6BnIUJT5mbz5MnKXBnk8R46coHd o6AmFdUWm3jQKH5KXtpvuk6axmrUxLmvCSWVVLqIEZqgA1TNy5/b0w5ArrwKoh+h +kkSN0e2QevUarXspB2FG3QMCGzaZOMKnOrCSxl0WN6k8hlPSpxN4UrCHm7c3y88 CEeb3y/HYCovZtOFqkrLvlDv7uQpCRADiX2s13zTctv/In4omLDcSpHEjDwA+i1r 90Fr25thOvIFBw3utCTa18RCndSLFRApBG42Jtbz6pOHXiwasQWBiCKa6N+AdO2u 2ldawJEcuSqlNx0lme0RGhY/HwIDAQABo4ICvzCCArswHQYDVR0OBBYEFKsHG7wn Rv+KfkLH7K+2EUlPFPAfMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTUwNEUvNTkwOTQ5OTA5NjA4MTFFQ0EwNEEwMDg2QzRGOUFFMDIvNjA1MjNCRUEw Q0E0MTFFRDk2OTM2RDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBAIr4SwDBAIr8BwDBAIr8iADBAItd2ADBAJnLBwDBAJnO5AD BAJn+WwDBAJn/pQwDQYJKoZIhvcNAQELBQADggEBAC/1WfJNzAeNNA+0BeBWwrV/ r4LZejQvH514QJipcSI6iAzJVogpeNdLbgDwokndmEQ/XRQdbcYzylrVlDj8q8a/ rwgKDTF4lda35piNPYR5cpX6sNsmit1H7xUgBUylgMjIMEFdO3wn52YOvVWqPwMt l+hznZWy/YUYtk2FkO0bE2moFjI99o4i5j2G4xNyM749ME1ObqgX5de7DvROzlsg VQzQKV1UvcToUTH4g7ozgTkghmwQgc1ppSLxGhkbFLmR2HKixbqlLNrf2JqH381R hVsHD0Z5411m6U+XOlq4+xRaMhg8+XOzWYt4YCHjmkq/ttA0bwoUmxLZQflLdRk= -----END CERTIFICATE-----Generated at Thu Jan 8 23:13:09 2026 by rpki-client