This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/B6D9896CD51111F0AE06421FC4F9AE02.roa File: B6D9896CD51111F0AE06421FC4F9AE02.roa (raw, json) Hash identifier: JeWsOi+knaSUxggDbgl626QjqrgQeIlCOoedWQ2j1gw= Subject key identifier: 0A:66:5F:89:FE:BA:82:94:AB:F6:32:0F:4F:24:2A:13:AF:55:3E:6B Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F4F Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/B6D9896CD51111F0AE06421FC4F9AE02.roa Signing time: Fri 12 Dec 2025 16:13:49 +0000 ROA not before: Fri 12 Dec 2025 16:13:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45102 IP address blocks: 14.1.112.0/22 maxlen: 24 43.0.0.0/9 maxlen: 15 43.91.0.0/16 maxlen: 24 43.96.0.0/16 maxlen: 24 43.97.0.0/16 maxlen: 24 43.98.0.0/16 maxlen: 24 43.99.0.0/16 maxlen: 24 43.100.0.0/16 maxlen: 24 43.101.0.0/16 maxlen: 24 43.102.0.0/16 maxlen: 24 43.103.0.0/16 maxlen: 24 43.104.0.0/16 maxlen: 24 43.105.0.0/16 maxlen: 24 43.106.0.0/16 maxlen: 24 43.107.0.0/16 maxlen: 16 43.107.0.0/16 maxlen: 24 43.108.0.0/16 maxlen: 24 43.109.0.0/16 maxlen: 24 43.110.0.0/16 maxlen: 24 43.111.0.0/16 maxlen: 16 43.111.0.0/16 maxlen: 24 43.112.0.0/16 maxlen: 16 43.112.0.0/16 maxlen: 24 43.113.0.0/16 maxlen: 24 43.114.0.0/16 maxlen: 24 43.115.0.0/16 maxlen: 24 43.116.0.0/16 maxlen: 24 43.117.0.0/16 maxlen: 24 43.118.0.0/16 maxlen: 24 43.119.0.0/16 maxlen: 24 43.120.0.0/16 maxlen: 24 43.121.0.0/16 maxlen: 24 43.122.0.0/16 maxlen: 24 43.123.0.0/16 maxlen: 24 43.124.0.0/16 maxlen: 24 43.125.0.0/16 maxlen: 24 43.126.0.0/16 maxlen: 24 43.127.0.0/16 maxlen: 24 103.206.40.0/22 maxlen: 24 2404:2280::/32 maxlen: 48 240b:4000::/22 maxlen: 31 240b:4000::/32 maxlen: 48 240b:4001::/32 maxlen: 40 240b:4002::/32 maxlen: 48 240b:4003::/32 maxlen: 48 240b:4004::/32 maxlen: 48 240b:4005::/32 maxlen: 48 240b:4006::/32 maxlen: 48 240b:4007::/32 maxlen: 48 240b:4008::/32 maxlen: 48 240b:4009::/32 maxlen: 48 240b:400a::/32 maxlen: 48 240b:400b::/32 maxlen: 48 240b:400c::/32 maxlen: 48 240b:400d::/32 maxlen: 48 240b:400e::/32 maxlen: 48 240b:400f::/32 maxlen: 48 240b:4010::/32 maxlen: 48 240b:4011::/32 maxlen: 48 240b:4012::/32 maxlen: 48 240b:4013::/32 maxlen: 48 240b:4014::/32 maxlen: 48 240b:4015::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8015 (0x1f4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Dec 12 16:13:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693c3f3d-dbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8a:bf:9e:d7:86:12:e8:9c:a5:a8:85:64:bf: 92:59:d2:aa:c2:23:53:30:53:d0:94:81:a0:0d:e9: 6e:0a:5f:95:89:35:0e:56:cf:dd:67:fa:93:01:26: e7:14:48:ca:79:a9:b3:98:af:a6:41:79:33:f0:a3: c2:5e:59:f5:0b:ec:58:3e:53:3e:47:ce:eb:ad:99: f8:72:4e:62:9d:68:52:96:8d:f8:0a:a0:42:17:5f: 9f:02:42:13:61:2c:63:63:3b:8e:83:70:c3:7b:37: a7:43:b4:f6:5b:d9:fc:c4:15:ed:77:86:de:38:1a: 09:77:ed:b4:3f:95:9c:13:35:56:db:94:2c:ae:28: 35:bf:8c:47:3f:ab:ba:6a:f4:6f:2a:62:41:8c:ad: 8d:89:06:87:9d:66:65:66:5d:28:0b:7f:e3:ae:99: 6b:c9:61:5f:ad:45:dc:e8:10:8f:5a:63:1d:ab:de: c8:f3:28:ee:ce:e7:fd:b3:28:9e:83:22:b5:aa:ec: 87:a0:b0:ed:43:39:b8:13:c0:91:e4:4b:d7:1c:86: c9:31:e1:bb:d3:74:4f:2b:bd:cc:d8:01:e7:6a:c7: 7d:03:b1:35:5b:bd:01:6d:75:95:63:9d:74:e4:30: f1:7d:dc:46:fa:89:a7:64:ac:57:26:78:ac:ac:4a: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:66:5F:89:FE:BA:82:94:AB:F6:32:0F:4F:24:2A:13:AF:55:3E:6B X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/B6D9896CD51111F0AE06421FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.1.112.0/22 43.0.0.0/9 103.206.40.0/22 IPv6: 2404:2280::/32 240b:4000::/22 Signature Algorithm: sha256WithRSAEncryption 56:17:4b:19:88:e4:74:2a:f0:69:22:a9:7b:f1:0d:3c:f6:5e: 19:e3:15:85:56:84:c1:1d:82:ef:78:e3:ab:20:bc:3f:c6:05: a4:61:26:79:1e:2a:0c:d1:17:7a:2c:5d:e2:ad:d1:59:3e:fd: df:62:61:02:6d:03:f7:d8:67:a9:49:39:51:d4:7b:ed:a9:d4: a1:d1:09:af:22:6f:28:b8:4d:0a:f0:11:ef:c5:21:4e:78:ec: 29:cb:a7:d8:65:8e:e2:75:98:c1:c7:12:bd:15:cc:7c:22:6e: ac:99:b9:6a:4d:c9:b2:f8:35:9a:f9:0f:00:3f:96:88:5a:96: f3:80:1a:13:3e:3a:82:e5:9f:72:6e:32:31:1f:bb:0f:2e:0a: 48:d9:f1:54:49:f9:02:c5:9b:ad:b4:7a:e0:9b:55:1c:b9:08: 2e:e4:fc:32:2a:3a:db:6d:82:ed:d5:a2:39:e7:e5:36:9e:1b: f3:a9:f9:7a:7b:6c:00:2c:8e:74:5c:17:a3:de:d6:7e:71:71: 6d:58:e2:ea:ab:24:68:9e:82:1d:63:bf:e3:e4:3b:49:bf:5c: c7:d4:f0:ce:16:71:de:4b:a8:4d:d6:3b:a1:80:1e:9e:77:e3: a0:97:2d:ca:7d:f7:fd:38:30:34:40:ce:4d:4a:50:3e:cb:fe: 99:ba:25:db -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICH08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUxMjEyMTYxMzQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjM2YzZC1kYmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oq/nteGEuicpaiFZL+SWdKqwiNTMFPQlIGgDeluCl+ViTUOVs/dZ/qTASbn FEjKeamzmK+mQXkz8KPCXln1C+xYPlM+R87rrZn4ck5inWhSlo34CqBCF1+fAkIT YSxjYzuOg3DDezenQ7T2W9n8xBXtd4beOBoJd+20P5WcEzVW25Qsrig1v4xHP6u6 avRvKmJBjK2NiQaHnWZlZl0oC3/jrplryWFfrUXc6BCPWmMdq97I8yjuzuf9syie gyK1quyHoLDtQzm4E8CR5EvXHIbJMeG703RPK73M2AHnasd9A7E1W70BbXWVY510 5DDxfdxG+omnZKxXJnisrErTCwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFApmX4n+ uoKUq/YyD08kKhOvVT5rMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvOTkzRjIwOTBBQkM0MTFFNkJENkJFRDE0QzRGOUFFMDIvQjZEOTg5NkNE NTExMTFGMEFFMDY0MjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBcEAgABMBEDBAIOAXADAwcrAAMEAmfOKDATBAIAAjANAwUAJAQigAMEAiQL QDANBgkqhkiG9w0BAQsFAAOCAQEAVhdLGYjkdCrwaSKpe/ENPPZeGeMVhVaEwR2C 73jjqyC8P8YFpGEmeR4qDNEXeixd4q3RWT7932JhAm0D99hnqUk5UdR77anUodEJ ryJvKLhNCvAR78UhTnjsKcun2GWO4nWYwccSvRXMfCJurJm5ak3Jsvg1mvkPAD+W iFqW84AaEz46guWfcm4yMR+7Dy4KSNnxVEn5AsWbrbR64JtVHLkILuT8Mio6222C 7dWiOeflNp4b86n5entsACyOdFwXo97WfnFxbVji6qskaJ6CHWO/4+Q7Sb9cx9Tw zhZx3kuoTdY7oYAennfjoJctyn33/TgwNEDOTUpQPsv+mbol2w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:57:47 2025 by rpki-client