This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/CEFDECF850B011F0B9262D4FC4F9AE02.roa File: CEFDECF850B011F0B9262D4FC4F9AE02.roa (raw, json) Hash identifier: CLQ3/hXK7ryJwut8NCieyr8cQPTKzXF6ACByOsd3FLE= Subject key identifier: AD:79:59:4A:14:64:3B:31:F0:B0:5F:4F:EA:79:D0:D3:87:32:88:1B Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0C00 Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/CEFDECF850B011F0B9262D4FC4F9AE02.roa Signing time: Thu 20 Nov 2025 18:38:54 +0000 ROA not before: Thu 20 Nov 2025 18:38:54 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9729 IP address blocks: 202.85.128.0/20 maxlen: 20 202.85.128.0/24 maxlen: 24 202.85.129.0/24 maxlen: 24 202.85.131.0/24 maxlen: 24 202.85.132.0/24 maxlen: 24 202.85.137.0/24 maxlen: 24 202.85.138.0/24 maxlen: 24 202.85.140.0/24 maxlen: 24 202.85.144.0/20 maxlen: 24 202.85.164.0/23 maxlen: 23 202.85.165.0/24 maxlen: 24 202.85.166.0/23 maxlen: 23 202.85.167.0/24 maxlen: 24 202.85.168.0/22 maxlen: 22 202.85.169.0/24 maxlen: 24 202.85.170.0/24 maxlen: 24 202.85.171.0/24 maxlen: 24 202.85.172.0/22 maxlen: 22 202.85.172.0/24 maxlen: 24 202.85.180.0/22 maxlen: 22 202.85.181.0/24 maxlen: 24 202.85.184.0/22 maxlen: 22 202.85.188.0/24 maxlen: 24 202.85.190.0/24 maxlen: 24 202.85.191.0/24 maxlen: 24 203.194.128.0/21 maxlen: 21 203.194.133.0/24 maxlen: 24 203.194.135.0/24 maxlen: 24 203.194.136.0/21 maxlen: 21 203.194.136.0/24 maxlen: 24 203.194.140.0/22 maxlen: 24 203.194.144.0/21 maxlen: 21 203.194.144.0/24 maxlen: 24 203.194.145.0/24 maxlen: 24 203.194.146.0/24 maxlen: 24 203.194.148.0/24 maxlen: 24 203.194.149.0/24 maxlen: 24 203.194.152.0/21 maxlen: 21 203.194.153.0/24 maxlen: 24 203.194.159.0/24 maxlen: 24 203.194.160.0/22 maxlen: 24 203.194.164.0/22 maxlen: 22 203.194.168.0/22 maxlen: 22 203.194.168.0/24 maxlen: 24 203.194.169.0/24 maxlen: 24 203.194.170.0/24 maxlen: 24 203.194.171.0/24 maxlen: 24 203.194.176.0/22 maxlen: 22 203.194.176.0/24 maxlen: 24 203.194.177.0/24 maxlen: 24 203.194.179.0/24 maxlen: 24 203.194.183.0/24 maxlen: 24 203.194.186.0/23 maxlen: 24 203.194.188.0/22 maxlen: 22 203.194.188.0/24 maxlen: 24 203.194.192.0/21 maxlen: 21 203.194.196.0/24 maxlen: 24 203.194.199.0/24 maxlen: 24 203.194.200.0/22 maxlen: 22 203.194.200.0/23 maxlen: 23 203.194.204.0/22 maxlen: 22 203.194.206.0/24 maxlen: 24 203.194.208.0/22 maxlen: 22 203.194.208.0/24 maxlen: 24 203.194.209.0/24 maxlen: 24 203.194.211.0/24 maxlen: 24 203.194.212.0/22 maxlen: 22 203.194.212.0/23 maxlen: 23 203.194.216.0/22 maxlen: 22 203.194.216.0/24 maxlen: 24 203.194.217.0/24 maxlen: 24 203.194.218.0/24 maxlen: 24 203.194.219.0/24 maxlen: 24 203.194.220.0/22 maxlen: 22 203.194.220.0/24 maxlen: 24 203.194.221.0/24 maxlen: 24 203.194.223.0/24 maxlen: 24 203.194.224.0/22 maxlen: 22 203.194.224.0/24 maxlen: 24 203.194.227.0/24 maxlen: 24 203.194.228.0/22 maxlen: 22 203.194.228.0/24 maxlen: 24 203.194.232.0/22 maxlen: 22 203.194.232.0/24 maxlen: 24 203.194.233.0/24 maxlen: 24 203.194.236.0/22 maxlen: 24 203.194.240.0/22 maxlen: 22 203.194.244.0/22 maxlen: 22 203.194.244.0/24 maxlen: 24 203.194.248.0/21 maxlen: 21 203.194.251.0/24 maxlen: 24 203.194.255.0/24 maxlen: 24 210.184.96.0/22 maxlen: 22 210.184.97.0/24 maxlen: 24 210.184.99.0/24 maxlen: 24 210.184.100.0/22 maxlen: 22 210.184.108.0/22 maxlen: 22 210.184.110.0/24 maxlen: 24 210.184.112.0/21 maxlen: 21 210.184.113.0/24 maxlen: 24 210.184.114.0/24 maxlen: 24 210.184.120.0/24 maxlen: 24 210.184.121.0/24 maxlen: 24 210.184.122.0/24 maxlen: 24 210.184.124.0/24 maxlen: 24 210.184.127.0/24 maxlen: 24 210.184.128.0/17 maxlen: 17 210.184.128.0/21 maxlen: 21 210.184.136.0/22 maxlen: 22 210.184.137.0/24 maxlen: 24 210.184.139.0/24 maxlen: 24 210.184.142.0/24 maxlen: 24 210.184.152.0/22 maxlen: 22 210.184.156.0/23 maxlen: 23 210.184.158.0/23 maxlen: 23 210.184.164.0/22 maxlen: 22 210.184.167.0/24 maxlen: 24 210.184.168.0/22 maxlen: 22 210.184.172.0/23 maxlen: 23 210.184.174.0/23 maxlen: 23 210.184.178.0/23 maxlen: 23 210.184.178.0/24 maxlen: 24 210.184.180.0/22 maxlen: 22 210.184.180.0/24 maxlen: 24 210.184.184.0/22 maxlen: 22 210.184.189.0/24 maxlen: 24 210.184.190.0/23 maxlen: 23 210.184.190.0/24 maxlen: 24 210.184.192.0/24 maxlen: 24 210.184.193.0/24 maxlen: 24 210.184.194.0/24 maxlen: 24 210.184.196.0/22 maxlen: 22 210.184.196.0/24 maxlen: 24 210.184.197.0/24 maxlen: 24 210.184.198.0/23 maxlen: 24 210.184.200.0/22 maxlen: 22 210.184.200.0/24 maxlen: 24 210.184.201.0/24 maxlen: 24 210.184.202.0/24 maxlen: 24 210.184.203.0/24 maxlen: 24 210.184.204.0/22 maxlen: 22 210.184.208.0/24 maxlen: 24 210.184.209.0/24 maxlen: 24 210.184.210.0/24 maxlen: 24 210.184.211.0/24 maxlen: 24 210.184.212.0/24 maxlen: 24 210.184.213.0/24 maxlen: 24 210.184.214.0/24 maxlen: 24 210.184.215.0/24 maxlen: 24 210.184.216.0/24 maxlen: 24 210.184.217.0/24 maxlen: 24 210.184.218.0/24 maxlen: 24 210.184.219.0/24 maxlen: 24 210.184.220.0/24 maxlen: 24 210.184.221.0/24 maxlen: 24 210.184.222.0/24 maxlen: 24 210.184.223.0/24 maxlen: 24 210.184.224.0/24 maxlen: 24 210.184.225.0/24 maxlen: 24 210.184.226.0/24 maxlen: 24 210.184.240.0/24 maxlen: 24 210.184.241.0/24 maxlen: 24 210.184.242.0/23 maxlen: 24 210.184.248.0/21 maxlen: 22 210.184.248.0/23 maxlen: 24 210.184.251.0/24 maxlen: 24 210.184.254.0/24 maxlen: 24 2403:2400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3072 (0xc00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Nov 20 18:38:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691f603e-29c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:37:83:b3:dd:28:54:9f:8c:ca:e8:f9:8c: 1b:76:b7:10:62:28:3b:01:c1:e5:83:4c:fc:c8:35: af:d1:00:28:97:7a:90:b0:e3:46:1a:3b:c2:fc:5c: 3e:67:cd:11:64:14:33:77:70:b7:39:ed:64:51:db: fc:70:37:7d:1d:9b:82:32:21:c3:08:1b:f5:18:a0: 86:e0:46:0f:12:ad:7d:5d:c3:2c:59:51:61:72:8c: 21:c6:5a:9c:81:ac:0d:17:75:ca:84:af:13:a3:3a: 1a:78:fc:b5:5f:37:66:2d:c0:9f:6c:a6:d0:c6:0a: a4:7f:53:9e:c6:49:6f:84:0b:49:05:22:f5:aa:c8: ff:ef:8e:7b:4b:4a:87:56:6b:e1:34:91:b5:72:22: b2:5f:2a:f7:4c:fa:88:76:1c:cc:67:60:3f:56:68: f2:e9:f1:8b:9b:7b:fe:8b:52:4b:82:98:f6:b0:6e: 6f:c5:ac:03:ef:6a:d0:00:05:36:d7:5b:37:d9:a7: 92:21:cf:a9:5c:0b:28:12:05:1a:07:1c:df:c1:6a: ed:7c:08:07:49:cb:a3:52:54:3e:90:68:d8:f7:17: 61:ac:3a:b8:e0:95:9f:4a:76:52:7f:86:58:7c:87: 9e:0a:ed:f0:61:db:a5:93:f0:73:e4:bf:43:70:1c: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:79:59:4A:14:64:3B:31:F0:B0:5F:4F:EA:79:D0:D3:87:32:88:1B X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/CEFDECF850B011F0B9262D4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.85.128.0/19 202.85.164.0-202.85.175.255 202.85.180.0-202.85.188.255 202.85.190.0/23 203.194.128.0-203.194.171.255 203.194.176.0/22 203.194.183.0/24 203.194.186.0-203.194.255.255 210.184.96.0/21 210.184.108.0-210.184.122.255 210.184.124.0/24 210.184.127.0-210.184.255.255 IPv6: 2403:2400::/32 Signature Algorithm: sha256WithRSAEncryption 64:9c:87:a4:a3:49:e2:ad:85:00:10:b3:3b:ea:00:b6:9a:f6: 90:d3:38:35:d2:88:62:6b:97:86:84:4b:5e:de:38:eb:ce:3b: 18:1a:b9:c9:a2:22:a8:80:54:89:3a:a5:b3:41:a3:c8:e5:d6: 54:a3:a7:4f:5a:35:aa:66:31:61:c8:c7:17:c6:d1:fc:60:b3: 95:93:f2:34:8f:ef:95:00:d5:3b:b4:b0:86:f5:ad:04:3f:46: 7d:b8:95:25:8d:58:8b:17:20:01:6d:39:27:45:3e:9a:a3:ca: 11:84:0c:59:36:e9:48:78:27:56:57:c4:17:75:e2:5e:b3:3e: b8:ed:9b:34:fa:00:2d:46:53:4e:5b:34:9a:47:85:0d:b9:de: 34:b3:be:dd:e1:22:81:25:0d:1c:ff:16:22:a3:ca:4d:eb:3d: d1:30:20:26:7d:ce:c1:ae:e7:50:c9:83:0d:b3:0e:49:05:af: 38:d7:23:da:dd:c4:e6:c3:3b:a6:7f:6f:09:e1:76:41:6b:b6: 8b:29:76:98:42:0a:dd:0d:31:06:80:00:d6:8f:d5:76:7a:67: 8f:cd:f4:1c:5d:fd:44:f4:78:fd:7b:0c:19:ad:2a:ce:d7:fc: df:72:94:7b:84:26:93:2c:13:cb:37:37:84:c3:18:43:92:57: 2d:9b:46:42 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjUxMTIwMTgzODU0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmNjAzZS0yOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI43g7PdKFSfjMro+YwbdrcQYig7AcHlg0z8yDWv0QAol3qQsONGGjvC/Fw+ Z80RZBQzd3C3Oe1kUdv8cDd9HZuCMiHDCBv1GKCG4EYPEq19XcMsWVFhcowhxlqc gawNF3XKhK8TozoaePy1XzdmLcCfbKbQxgqkf1OexklvhAtJBSL1qsj/7457S0qH VmvhNJG1ciKyXyr3TPqIdhzMZ2A/Vmjy6fGLm3v+i1JLgpj2sG5vxawD72rQAAU2 11s32aeSIc+pXAsoEgUaBxzfwWrtfAgHScujUlQ+kGjY9xdhrDq44JWfSnZSf4ZY fIeeCu3wYdulk/Bz5L9DcBx36QIDAQABo4IDFzCCAxMwHQYDVR0OBBYEFK15WUoU ZDsx8LBfT+p50NOHMogbMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA5QkYvRDEzREExRDQyREZDMTFFQUJDMUI2QjgyQzRGOUFFMDIvQ0VGREVDRjg1 MEIwMTFGMEI5MjYyRDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgaAGCCsGAQUFBwEHAQH/ BIGQMIGNMHwEAgABMHYDBAXKVYAwDAMEAspVpAMEBMpVoDAMAwQCylW0AwQAylW8 AwQBylW+MAwDBAfLwoADBALLwqgDBALLwrADBADLwrcwCwMEAcvCugMDAMvCAwQD 0rhgMAwDBALSuGwDBADSuHoDBADSuHwwCwMEANK4fwMDANK4MA0EAgACMAcDBQAk AyQAMA0GCSqGSIb3DQEBCwUAA4IBAQBknIeko0nirYUAELM76gC2mvaQ0zg10ohi a5eGhEte3jjrzjsYGrnJoiKogFSJOqWzQaPI5dZUo6dPWjWqZjFhyMcXxtH8YLOV k/I0j++VANU7tLCG9a0EP0Z9uJUljViLFyABbTknRT6ao8oRhAxZNulIeCdWV8QX deJesz647Zs0+gAtRlNOWzSaR4UNud40s77d4SKBJQ0c/xYio8pN6z3RMCAmfc7B rudQyYMNsw5JBa841yPa3cTmwzumf28J4XZBa7aLKXaYQgrdDTEGgADWj9V2emeP zfQcXf1E9Hj9ewwZrSrO1/zfcpR7hCaTLBPLNzeEwxhDklctm0ZC -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:35 2025 by rpki-client