This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/617AEF02C0A211F0834F0B2EC4F9AE02.roa File: 617AEF02C0A211F0834F0B2EC4F9AE02.roa (raw, json) Hash identifier: e2cBgK3GRmfDjSm1Qqg4IoisAWAPLTjuVCxKZ4c2zQ4= Subject key identifier: 17:8A:07:81:30:0B:B9:B7:BE:9F:28:99:C9:91:50:F5:16:A3:71:55 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 06A1 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/617AEF02C0A211F0834F0B2EC4F9AE02.roa Signing time: Thu 13 Nov 2025 15:06:50 +0000 ROA not before: Thu 13 Nov 2025 15:06:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 58955 IP address blocks: 43.239.251.0/24 maxlen: 24 43.249.35.0/24 maxlen: 24 45.64.184.0/24 maxlen: 24 45.64.185.0/24 maxlen: 24 45.64.186.0/24 maxlen: 24 45.64.187.0/24 maxlen: 24 103.27.200.0/24 maxlen: 24 103.27.201.0/24 maxlen: 24 103.27.202.0/24 maxlen: 24 103.27.203.0/24 maxlen: 24 103.40.116.0/24 maxlen: 24 103.40.117.0/24 maxlen: 24 103.70.4.0/24 maxlen: 24 103.70.5.0/24 maxlen: 24 103.70.7.0/24 maxlen: 24 103.86.48.0/24 maxlen: 24 103.86.49.0/24 maxlen: 24 103.86.50.0/24 maxlen: 24 103.86.51.0/24 maxlen: 24 103.132.0.0/24 maxlen: 24 103.132.1.0/24 maxlen: 24 103.132.2.0/24 maxlen: 24 103.132.3.0/24 maxlen: 24 103.230.120.0/24 maxlen: 24 103.230.121.0/24 maxlen: 24 103.230.122.0/24 maxlen: 24 103.230.123.0/24 maxlen: 24 103.234.236.0/22 maxlen: 22 103.234.236.0/24 maxlen: 24 103.234.237.0/24 maxlen: 24 103.234.238.0/24 maxlen: 24 103.245.165.0/24 maxlen: 24 103.245.166.0/24 maxlen: 24 103.249.212.0/22 maxlen: 24 116.204.180.0/24 maxlen: 24 116.204.181.0/24 maxlen: 24 116.204.182.0/24 maxlen: 24 116.204.183.0/24 maxlen: 24 160.238.12.0/23 maxlen: 24 2407:7900:1000::/40 maxlen: 40 2407:7900:2000::/40 maxlen: 40 2407:7900:9999::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1697 (0x6a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Nov 13 15:06:50 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6915f40a-3d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:8e:7a:bb:ca:03:1a:62:6e:64:7f:13:9e: a8:3c:0c:aa:c4:dc:0c:cb:c2:d9:30:0e:22:26:54: d4:36:c4:0d:05:db:45:03:2c:0a:a7:90:af:da:45: 66:47:15:1c:83:14:5e:c1:86:7d:ec:d4:11:b9:20: d0:9c:47:f9:c9:44:ab:09:b3:99:65:9f:57:e6:3d: 7e:45:19:a1:75:e9:65:c5:ba:f6:b3:4e:c7:aa:c3: a7:22:08:fb:45:fd:f0:09:80:ca:0d:bc:30:78:fe: cc:ef:0b:d1:93:41:ad:c6:65:11:73:e3:cf:b2:f2: b8:74:9d:5c:fe:8f:27:a8:1b:d6:c6:84:47:b4:f7: 68:0c:35:ee:3e:f4:1b:c5:8b:67:70:24:c0:27:af: 3a:16:0b:dc:59:52:be:0c:6e:82:da:47:34:fe:c6: 4d:c9:fc:fd:4d:4c:32:04:6c:d3:10:da:ca:5c:3f: 0d:e8:44:c0:87:0b:64:1d:5a:80:0b:a6:98:12:1a: 28:09:e6:57:8d:62:a6:2f:6c:cc:49:da:d0:2d:4d: 3c:c7:44:a1:a4:dd:67:b5:79:8a:f4:d1:33:49:1d: ff:07:98:5b:3e:38:22:ce:7f:e5:13:ba:ab:84:69: 9c:26:10:fe:f7:c8:e2:0c:56:f0:63:27:4c:68:aa: 13:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8A:07:81:30:0B:B9:B7:BE:9F:28:99:C9:91:50:F5:16:A3:71:55 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/617AEF02C0A211F0834F0B2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.251.0/24 43.249.35.0/24 45.64.184.0/22 103.27.200.0/22 103.40.116.0/23 103.70.4.0/23 103.70.7.0/24 103.86.48.0/22 103.132.0.0/22 103.230.120.0/22 103.234.236.0/22 103.245.165.0-103.245.166.255 103.249.212.0/22 116.204.180.0/22 160.238.12.0/23 IPv6: 2407:7900:1000::/40 2407:7900:2000::/40 2407:7900:9999::/48 Signature Algorithm: sha256WithRSAEncryption 68:6f:b1:58:54:70:31:0c:1e:26:c4:83:98:1a:db:87:ea:c9: 12:19:ba:cb:07:68:2d:ef:c1:f1:6a:ab:43:c9:cb:5b:58:68: 8e:de:55:87:dc:22:46:ea:6b:dc:69:78:cd:72:ac:c1:24:47: 20:72:85:e6:f7:61:16:25:c4:fd:b1:81:ac:41:57:ea:28:7c: 3e:54:29:8f:ef:d3:0f:37:97:0f:62:c3:b5:0d:6c:14:7e:97: 5e:eb:15:38:ee:7c:e6:43:fd:0b:79:37:13:f4:7c:ea:ac:26: 08:b8:ca:9d:b5:7f:66:1e:a2:51:4e:16:90:5c:79:09:35:20: 96:6a:2d:13:a9:26:12:dd:49:40:5f:43:26:82:f7:d2:f5:9f: 97:cd:fa:eb:e2:33:02:70:cc:89:e8:99:57:72:3f:07:2d:92: dd:32:6d:9a:f7:7d:7b:7f:4f:bf:85:18:b8:be:0a:f6:9e:d6: 02:e9:e3:2c:b8:39:b9:8b:30:14:34:00:ef:05:08:09:03:7a: 9d:4c:2c:99:71:29:e0:6b:16:39:11:bd:d0:8b:5b:23:21:f8: 8c:ab:e2:ea:dd:66:63:83:52:4c:d5:1f:cd:cc:af:f5:ea:c1: 53:a5:92:ab:c2:1d:c4:eb:35:74:d5:7d:2a:e8:11:ed:63:76: 04:ea:14:13 -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUxMTEzMTUwNjUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE1ZjQwYS0zZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnKOervKAxpibmR/E56oPAyqxNwMy8LZMA4iJlTUNsQNBdtFAywKp5Cv2kVm RxUcgxRewYZ97NQRuSDQnEf5yUSrCbOZZZ9X5j1+RRmhdellxbr2s07HqsOnIgj7 Rf3wCYDKDbwweP7M7wvRk0GtxmURc+PPsvK4dJ1c/o8nqBvWxoRHtPdoDDXuPvQb xYtncCTAJ686FgvcWVK+DG6C2kc0/sZNyfz9TUwyBGzTENrKXD8N6ETAhwtkHVqA C6aYEhooCeZXjWKmL2zMSdrQLU08x0ShpN1ntXmK9NEzSR3/B5hbPjgizn/lE7qr hGmcJhD+98jiDFbwYydMaKoTZQIDAQABo4IDFTCCAxEwHQYDVR0OBBYEFBeKB4Ew C7m3vp8omcmRUPUWo3FVMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ2QjAvMzJFOTg3M0NCRkM4MTFFQkI5RTRFQjZFQzRGOUFFMDIvNjE3QUVGMDJD MEEyMTFGMDgzNEYwQjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZ4GCCsGAQUFBwEHAQH/ BIGOMIGLMGgEAgABMGIDBAAr7/sDBAAr+SMDBAItQLgDBAJnG8gDBAFnKHQDBAFn RgQDBABnRgcDBAJnVjADBAJnhAADBAJn5ngDBAJn6uwwDAMEAGf1pQMEAGf1pgME Amf51AMEAnTMtAMEAaDuDDAfBAIAAjAZAwYAJAd5ABADBgAkB3kAIAMHACQHeQCZ mTANBgkqhkiG9w0BAQsFAAOCAQEAaG+xWFRwMQweJsSDmBrbh+rJEhm6ywdoLe/B 8WqrQ8nLW1hojt5Vh9wiRupr3Gl4zXKswSRHIHKF5vdhFiXE/bGBrEFX6ih8PlQp j+/TDzeXD2LDtQ1sFH6XXusVOO585kP9C3k3E/R86qwmCLjKnbV/Zh6iUU4WkFx5 CTUglmotE6kmEt1JQF9DJoL30vWfl8366+IzAnDMieiZV3I/By2S3TJtmvd9e39P v4UYuL4K9p7WAunjLLg5uYswFDQA7wUICQN6nUwsmXEp4GsWORG90ItbIyH4jKvi 6t1mY4NSTNUfzcyv9erBU6WSq8IdxOs1dNV9KugR7WN2BOoUEw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:23 2025 by rpki-client