This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/FD9DD964D0FE11F09871A984C4F9AE02.roa File: FD9DD964D0FE11F09871A984C4F9AE02.roa (raw, json) Hash identifier: G1qGp3AbufezlzHrd+0qbgbIIfUHZdSitfvuprjoIJE= Subject key identifier: 4E:0B:4E:8B:AA:4C:04:EA:AA:FB:F5:72:D9:C2:F5:94:69:FA:24:76 Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Certificate serial: 0C71 Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/FD9DD964D0FE11F09871A984C4F9AE02.roa Signing time: Thu 04 Dec 2025 10:51:36 +0000 ROA not before: Thu 04 Dec 2025 10:51:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58895 IP address blocks: 36.255.100.0/22 maxlen: 22 36.255.100.0/24 maxlen: 24 36.255.101.0/24 maxlen: 24 36.255.102.0/24 maxlen: 24 36.255.103.0/24 maxlen: 24 43.229.164.0/22 maxlen: 22 43.229.164.0/24 maxlen: 24 43.229.165.0/24 maxlen: 24 43.229.166.0/24 maxlen: 24 43.229.167.0/24 maxlen: 24 43.231.60.0/22 maxlen: 22 43.231.60.0/24 maxlen: 24 43.231.61.0/24 maxlen: 24 43.231.62.0/24 maxlen: 24 43.231.63.0/24 maxlen: 24 43.248.12.0/24 maxlen: 24 43.248.13.0/24 maxlen: 24 43.248.14.0/24 maxlen: 24 45.113.124.0/22 maxlen: 22 45.113.124.0/24 maxlen: 24 45.113.125.0/24 maxlen: 24 45.113.126.0/24 maxlen: 24 45.113.127.0/24 maxlen: 24 45.117.105.0/24 maxlen: 24 45.117.106.0/24 maxlen: 24 45.117.107.0/24 maxlen: 24 103.24.96.0/22 maxlen: 24 103.35.214.0/24 maxlen: 24 103.35.215.0/24 maxlen: 24 103.39.80.0/22 maxlen: 22 103.39.80.0/24 maxlen: 24 103.39.81.0/24 maxlen: 24 103.39.82.0/24 maxlen: 24 103.39.83.0/24 maxlen: 24 103.49.136.0/24 maxlen: 24 103.49.137.0/24 maxlen: 24 103.49.138.0/24 maxlen: 24 103.49.139.0/24 maxlen: 24 103.50.156.0/22 maxlen: 22 103.50.156.0/24 maxlen: 24 103.50.157.0/24 maxlen: 24 103.50.158.0/24 maxlen: 24 103.50.159.0/24 maxlen: 24 103.53.44.0/22 maxlen: 22 103.53.44.0/24 maxlen: 24 103.53.45.0/24 maxlen: 24 103.53.46.0/24 maxlen: 24 103.53.47.0/24 maxlen: 24 103.57.168.0/22 maxlen: 22 103.57.168.0/24 maxlen: 24 103.57.169.0/24 maxlen: 24 103.57.170.0/24 maxlen: 24 103.57.171.0/24 maxlen: 24 103.70.84.0/24 maxlen: 24 103.70.85.0/24 maxlen: 24 103.200.196.0/24 maxlen: 24 103.200.197.0/24 maxlen: 24 103.200.198.0/24 maxlen: 24 103.200.199.0/24 maxlen: 24 103.209.85.0/24 maxlen: 24 103.209.86.0/24 maxlen: 24 103.209.87.0/24 maxlen: 24 117.53.40.0/22 maxlen: 22 117.53.40.0/24 maxlen: 24 117.53.41.0/24 maxlen: 24 117.53.42.0/24 maxlen: 24 117.53.43.0/24 maxlen: 24 150.129.4.0/22 maxlen: 22 150.129.4.0/24 maxlen: 24 150.129.5.0/24 maxlen: 24 150.129.6.0/24 maxlen: 24 150.129.7.0/24 maxlen: 24 2400:1680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Validity Not Before: Dec 4 10:51:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=693167b7-3d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:40:1e:7d:67:d3:d3:c7:8a:e1:03:ff:64:bf: 00:6c:92:f0:fa:0b:75:9c:65:02:0a:21:f7:83:05: 3b:59:62:4d:89:f6:35:3e:3f:aa:84:19:7b:60:6f: 32:4c:b6:a0:85:33:2e:0d:41:e2:2b:8d:d7:9d:9a: e7:c4:d1:13:0a:8d:0f:23:b4:76:da:93:4a:ab:90: a1:0e:73:95:3a:c2:02:fa:c3:d4:d8:99:bd:c0:2c: 65:a9:3a:5c:a4:f7:e7:30:2e:b0:4a:0f:f7:f4:cd: 2c:fb:8e:09:5a:fc:4a:db:1e:31:a2:42:2e:78:d5: 57:56:88:2e:1c:d7:c6:ec:6f:22:da:ee:db:30:67: 3c:06:35:a3:8b:16:52:92:23:52:37:24:4c:2f:60: c5:28:30:0b:68:12:e1:c1:b6:73:24:38:82:45:3d: 51:4a:e8:7c:b5:86:34:46:39:9d:fb:2f:28:c1:74: 55:5c:be:f3:80:34:27:e6:7f:e8:b6:a7:5b:06:66: 0e:24:2f:de:5f:e1:e5:f2:13:43:2d:2e:b2:cd:83: 24:d7:ac:67:d9:69:d7:75:f7:b4:fc:49:c1:60:b7: 9d:49:b0:b0:ec:ab:6c:74:54:3e:8d:37:26:f6:60: 76:55:28:66:12:86:63:69:82:5e:cf:55:81:36:36: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0B:4E:8B:AA:4C:04:EA:AA:FB:F5:72:D9:C2:F5:94:69:FA:24:76 X509v3 Authority Key Identifier: keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/FD9DD964D0FE11F09871A984C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.100.0/22 43.229.164.0/22 43.231.60.0/22 43.248.12.0-43.248.14.255 45.113.124.0/22 45.117.105.0-45.117.107.255 103.24.96.0/22 103.35.214.0/23 103.39.80.0/22 103.49.136.0/22 103.50.156.0/22 103.53.44.0/22 103.57.168.0/22 103.70.84.0/23 103.200.196.0/22 103.209.85.0-103.209.87.255 117.53.40.0/22 150.129.4.0/22 IPv6: 2400:1680::/32 Signature Algorithm: sha256WithRSAEncryption 38:48:86:12:a5:58:e6:d0:f0:f7:68:6f:bc:1c:e1:65:bc:c8: 07:1c:b9:b5:5a:f0:3b:87:6b:b1:be:3d:ec:cc:47:7b:5a:bf: d9:21:d4:26:d9:39:06:2b:6c:e5:b4:34:11:85:f1:9b:04:9c: 4f:9e:e7:f9:71:50:c2:8f:aa:48:8d:78:68:1d:48:25:69:14: 74:12:06:29:39:ef:36:ce:9f:dc:00:b0:fe:6e:3f:50:66:b8: 42:6b:25:ad:3e:68:a3:8c:43:c1:3d:96:62:4a:fd:c0:b3:c2: 96:00:08:74:99:b6:09:07:d9:3b:53:63:d1:93:d7:ed:e6:2a: a3:40:88:8d:49:07:d7:26:ac:0d:b2:a7:8c:b7:da:40:2f:70: b5:f1:71:c8:34:13:dd:7e:74:b1:91:ec:27:a2:5f:06:64:4e: 43:a7:d7:df:00:5a:67:ae:7c:4b:ef:73:09:08:85:54:ca:8a: 10:77:8a:1d:5e:10:9a:0c:c6:15:72:6b:84:50:9c:f3:93:47: 78:cc:e1:5b:a4:2c:31:66:86:42:b9:52:fe:0c:a4:fa:12:9b: b5:75:ec:b3:ef:53:ee:f6:5c:cd:f9:6a:0d:9d:b7:83:0d:87: bb:99:76:da:d7:9b:40:e0:ff:df:05:fd:8a:69:64:f5:de:30: 50:84:21:4c -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4REExMTAvBgNVBAUTKEZDQUEwODYyMjZERjAyQUY4Mzk0RkFCMjJEMUZCOTZF MEI3RDY1REQwHhcNMjUxMjA0MTA1MTM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxNjdiNy0zZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UAefWfT08eK4QP/ZL8AbJLw+gt1nGUCCiH3gwU7WWJNifY1Pj+qhBl7YG8y TLaghTMuDUHiK43XnZrnxNETCo0PI7R22pNKq5ChDnOVOsIC+sPU2Jm9wCxlqTpc pPfnMC6wSg/39M0s+44JWvxK2x4xokIueNVXVoguHNfG7G8i2u7bMGc8BjWjixZS kiNSNyRML2DFKDALaBLhwbZzJDiCRT1RSuh8tYY0Rjmd+y8owXRVXL7zgDQn5n/o tqdbBmYOJC/eX+Hl8hNDLS6yzYMk16xn2WnXdfe0/EnBYLedSbCw7KtsdFQ+jTcm 9mB2VShmEoZjaYJez1WBNjZdUQIDAQABo4IDJzCCAyMwHQYDVR0OBBYEFE4LTouq TATqqvv1ctnC9ZRp+iR2MB8GA1UdIwQYMBaAFPyqCGIm3wKvg5T6si0fuW4LfWXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThEQS8zNEYzNjEyRTI2 ODExMUVBOTAzRDcwNThDNEY5QUUwMi9fS29JWWliZkFxLURsUHF5TFItNWJndDla ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Lb0lZaWJmQXEtRGxQcXlMUi01Ymd0OVpkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk4REEvMzRGMzYxMkUyNjgxMTFFQTkwM0Q3MDU4QzRGOUFFMDIvRkQ5REQ5NjRE MEZFMTFGMDk4NzFBOTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbAGCCsGAQUFBwEHAQH/ BIGgMIGdMIGLBAIAATCBhAMEAiT/ZAMEAivlpAMEAivnPDAMAwQCK/gMAwQAK/gO AwQCLXF8MAwDBAAtdWkDBAItdWgDBAJnGGADBAFnI9YDBAJnJ1ADBAJnMYgDBAJn MpwDBAJnNSwDBAJnOagDBAFnRlQDBAJnyMQwDAMEAGfRVQMEA2fRUAMEAnU1KAME ApaBBDANBAIAAjAHAwUAJAAWgDANBgkqhkiG9w0BAQsFAAOCAQEAOEiGEqVY5tDw 92hvvBzhZbzIBxy5tVrwO4drsb497MxHe1q/2SHUJtk5Bits5bQ0EYXxmwScT57n +XFQwo+qSI14aB1IJWkUdBIGKTnvNs6f3ACw/m4/UGa4QmslrT5oo4xDwT2WYkr9 wLPClgAIdJm2CQfZO1Nj0ZPX7eYqo0CIjUkH1yasDbKnjLfaQC9wtfFxyDQT3X50 sZHsJ6JfBmROQ6fX3wBaZ658S+9zCQiFVMqKEHeKHV4QmgzGFXJrhFCc85NHeMzh W6QsMWaGQrlS/gyk+hKbtXXss+9T7vZczflqDZ23gw2Hu5l22tebQOD/3wX9imlk 9d4wUIQhTA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:13:26 2025 by rpki-client