This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/C81AC00EB14111EB959D4D3CC4F9AE02.roa File: C81AC00EB14111EB959D4D3CC4F9AE02.roa (raw, json) Hash identifier: 2B6MyeDlusb2e4Wysz6uj9aO5/idmj+cmIrB8/V1Q4Q= Subject key identifier: A1:86:0E:9E:FA:42:E3:CD:B7:DA:10:3A:2A:BC:EA:A5:AE:C4:74:F3 Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F4E Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/C81AC00EB14111EB959D4D3CC4F9AE02.roa Signing time: Fri 12 Dec 2025 16:13:48 +0000 ROA not before: Fri 12 Dec 2025 16:13:48 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 37963 IP address blocks: 43.0.0.0/9 maxlen: 15 43.0.0.0/16 maxlen: 24 43.1.0.0/16 maxlen: 24 43.2.0.0/16 maxlen: 24 43.3.0.0/16 maxlen: 24 43.4.0.0/16 maxlen: 24 43.5.0.0/16 maxlen: 24 43.6.0.0/16 maxlen: 24 43.7.0.0/16 maxlen: 16 43.7.0.0/16 maxlen: 24 43.8.0.0/16 maxlen: 24 43.9.0.0/16 maxlen: 24 43.10.0.0/16 maxlen: 24 43.11.0.0/16 maxlen: 24 43.12.0.0/16 maxlen: 24 43.13.0.0/16 maxlen: 24 43.14.0.0/16 maxlen: 24 43.15.0.0/16 maxlen: 24 43.16.0.0/16 maxlen: 24 43.17.0.0/16 maxlen: 24 43.18.0.0/16 maxlen: 24 43.19.0.0/16 maxlen: 24 43.20.0.0/16 maxlen: 24 43.21.0.0/16 maxlen: 24 43.22.0.0/16 maxlen: 24 43.23.0.0/16 maxlen: 24 43.24.0.0/16 maxlen: 24 43.25.0.0/16 maxlen: 24 43.26.0.0/16 maxlen: 24 43.27.0.0/16 maxlen: 24 43.28.0.0/16 maxlen: 24 43.29.0.0/16 maxlen: 24 43.30.0.0/16 maxlen: 24 43.31.0.0/16 maxlen: 24 43.32.0.0/16 maxlen: 16 43.32.0.0/16 maxlen: 24 43.33.0.0/16 maxlen: 24 43.35.0.0/16 maxlen: 24 43.36.0.0/16 maxlen: 24 43.37.0.0/16 maxlen: 24 43.38.0.0/16 maxlen: 24 43.39.0.0/16 maxlen: 24 43.40.0.0/16 maxlen: 24 43.41.0.0/16 maxlen: 24 43.42.0.0/16 maxlen: 24 43.43.0.0/16 maxlen: 24 43.44.0.0/16 maxlen: 24 43.45.0.0/16 maxlen: 24 43.46.0.0/16 maxlen: 24 43.47.0.0/16 maxlen: 24 43.48.0.0/16 maxlen: 24 43.49.0.0/16 maxlen: 24 43.50.0.0/16 maxlen: 24 43.51.0.0/16 maxlen: 24 43.52.0.0/16 maxlen: 24 43.53.0.0/16 maxlen: 24 43.54.0.0/16 maxlen: 24 43.55.0.0/16 maxlen: 24 43.56.0.0/16 maxlen: 24 43.57.0.0/16 maxlen: 24 43.58.0.0/16 maxlen: 24 43.59.0.0/16 maxlen: 24 43.60.0.0/16 maxlen: 24 43.61.0.0/16 maxlen: 24 43.62.0.0/16 maxlen: 24 43.63.0.0/16 maxlen: 24 43.64.0.0/16 maxlen: 24 43.65.0.0/16 maxlen: 24 43.66.0.0/16 maxlen: 24 43.67.0.0/16 maxlen: 24 43.68.0.0/16 maxlen: 24 43.69.0.0/16 maxlen: 24 43.70.0.0/16 maxlen: 24 43.71.0.0/16 maxlen: 24 43.72.0.0/16 maxlen: 24 43.73.0.0/16 maxlen: 24 43.74.0.0/16 maxlen: 24 43.75.0.0/16 maxlen: 24 43.76.0.0/16 maxlen: 16 43.76.0.0/16 maxlen: 24 43.78.0.0/16 maxlen: 24 43.79.0.0/16 maxlen: 24 43.80.0.0/16 maxlen: 24 43.81.0.0/16 maxlen: 24 43.82.0.0/16 maxlen: 24 43.83.0.0/16 maxlen: 24 43.84.0.0/16 maxlen: 24 43.85.0.0/16 maxlen: 24 43.86.0.0/16 maxlen: 24 43.87.0.0/16 maxlen: 24 43.88.0.0/16 maxlen: 24 43.89.0.0/16 maxlen: 24 43.90.0.0/16 maxlen: 24 43.91.0.0/16 maxlen: 24 43.95.0.0/16 maxlen: 24 43.96.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8014 (0x1f4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Dec 12 16:13:48 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693c3f3c-a9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:0c:17:25:8c:48:13:95:84:ae:75:4a:48: 9f:55:4b:9d:f4:3b:e9:5e:8e:f3:5c:a4:60:01:5e: 68:43:94:d6:a0:0f:e6:03:6b:0b:e8:7b:3e:0e:b3: 4e:04:0b:4f:7b:8a:9b:bd:cd:79:2b:45:1b:6c:99: b5:6d:aa:88:d5:6b:77:2b:27:9f:6a:75:c6:de:21: a8:11:9b:65:21:f1:1c:53:86:31:e7:46:44:6d:fd: 4e:ac:ed:2c:2f:98:b3:59:57:c7:91:97:53:6f:1f: a6:b9:79:1b:de:8b:2a:0d:bf:95:16:f7:56:32:6f: 6b:9c:c9:fa:96:cf:2f:59:1d:d0:84:25:f1:f9:b0: a3:45:f8:63:5d:17:e4:ac:a4:62:99:94:19:d5:42: 25:5a:a8:ac:d3:f4:45:42:ad:da:81:26:5b:1a:5d: 84:70:37:06:65:8c:e3:a5:02:98:57:8e:37:e4:ea: 5d:36:e3:e8:13:bd:d3:dd:22:3d:d1:d8:e5:aa:26: 7e:9f:09:57:84:29:85:b8:8b:3d:82:d4:05:f9:32: 87:bc:bf:6d:04:59:44:dd:00:e2:bb:85:f0:d7:f0: ef:79:5f:33:01:eb:29:74:8e:87:70:6a:6f:c2:66: 3f:e3:09:c8:b9:76:31:62:4e:98:71:56:34:20:ae: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:86:0E:9E:FA:42:E3:CD:B7:DA:10:3A:2A:BC:EA:A5:AE:C4:74:F3 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/C81AC00EB14111EB959D4D3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.0.0.0/9 Signature Algorithm: sha256WithRSAEncryption 45:72:5a:f7:f5:33:4b:c2:2b:9f:a0:87:da:c9:85:81:0b:e5: ea:24:62:b4:b4:45:42:98:a3:01:4d:fa:46:4f:6f:52:ee:dd: 42:73:b3:09:35:d3:05:33:d4:57:ec:eb:a1:26:a0:96:38:14: 8b:82:96:9f:e4:66:4d:c2:6d:f6:20:70:d9:b3:13:4b:96:cd: da:4c:88:12:a1:70:b2:1d:8f:d1:92:ae:dc:55:21:01:26:bb: c4:16:36:2f:43:93:86:34:a7:88:ba:cd:4d:14:78:43:54:1c: 88:1b:e0:23:ab:ba:fb:4c:cf:3d:bc:42:95:4f:0c:a9:b2:6f: 61:35:9b:ea:47:36:4c:cc:a2:65:d5:18:47:85:03:75:53:c3: ec:0d:33:e7:ff:bf:0c:48:fd:1d:2e:15:58:74:e6:53:ec:38: 91:0f:69:64:61:c0:17:21:e7:dc:08:dc:da:01:92:1f:72:70: df:fd:1b:02:79:b3:98:18:02:cb:ca:c3:3b:5a:18:36:cb:47: d6:14:96:11:5e:f5:09:80:80:f5:0b:54:38:97:28:3c:c1:ea: be:19:b1:f7:a1:a4:7f:21:4d:b5:91:47:3f:0c:7d:55:d6:cb: 16:c2:3b:bc:0a:84:bd:7e:eb:40:87:f9:a0:28:10:0f:2b:3c: 83:bf:fb:b3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICH04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUxMjEyMTYxMzQ4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjM2YzYy1hOWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNUMFyWMSBOVhK51SkifVUud9DvpXo7zXKRgAV5oQ5TWoA/mA2sL6Hs+DrNO BAtPe4qbvc15K0UbbJm1baqI1Wt3KyefanXG3iGoEZtlIfEcU4Yx50ZEbf1OrO0s L5izWVfHkZdTbx+muXkb3osqDb+VFvdWMm9rnMn6ls8vWR3QhCXx+bCjRfhjXRfk rKRimZQZ1UIlWqis0/RFQq3agSZbGl2EcDcGZYzjpQKYV4435OpdNuPoE73T3SI9 0djlqiZ+nwlXhCmFuIs9gtQF+TKHvL9tBFlE3QDiu4Xw1/DveV8zAespdI6HcGpv wmY/4wnIuXYxYk6YcVY0IK4fJwIDAQABo4IClDCCApAwHQYDVR0OBBYEFKGGDp76 QuPNt9oQOiq86qWuxHTzMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvOTkzRjIwOTBBQkM0MTFFNkJENkJFRDE0QzRGOUFFMDIvQzgxQUMwMEVC MTQxMTFFQjk1OUQ0RDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwcrADANBgkqhkiG9w0BAQsFAAOCAQEARXJa9/UzS8Irn6CH 2smFgQvl6iRitLRFQpijAU36Rk9vUu7dQnOzCTXTBTPUV+zroSagljgUi4KWn+Rm TcJt9iBw2bMTS5bN2kyIEqFwsh2P0ZKu3FUhASa7xBY2L0OThjSniLrNTRR4Q1Qc iBvgI6u6+0zPPbxClU8MqbJvYTWb6kc2TMyiZdUYR4UDdVPD7A0z5/+/DEj9HS4V WHTmU+w4kQ9pZGHAFyHn3Ajc2gGSH3Jw3/0bAnmzmBgCy8rDO1oYNstH1hSWEV71 CYCA9QtUOJcoPMHqvhmx96GkfyFNtZFHPwx9VdbLFsI7vAqEvX7rQIf5oCgQDys8 g7/7sw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:54 2025 by rpki-client