This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa File: 42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa (raw, json) Hash identifier: dDD+LZT9S8HnXTwcKU4HQsoKgKy7868Kw6CTASPw/Z8= Subject key identifier: EA:69:DC:C9:F3:58:E9:6F:FA:26:B3:C3:5D:DC:85:BD:D8:31:23:90 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4F31 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa Signing time: Wed 26 Nov 2025 04:33:30 +0000 ROA not before: Wed 26 Nov 2025 04:33:30 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131386 IP address blocks: 45.119.80.0/22 maxlen: 24 45.119.84.0/22 maxlen: 24 103.2.228.0/22 maxlen: 24 103.27.236.0/22 maxlen: 24 103.87.220.0/22 maxlen: 24 103.89.92.0/22 maxlen: 24 103.95.156.0/22 maxlen: 24 103.200.24.0/22 maxlen: 24 2403:bf40::/48 maxlen: 48 2403:bf40:2::/48 maxlen: 48 2403:bf40:6::/48 maxlen: 48 2403:bf40:240::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20273 (0x4f31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Nov 26 04:33:30 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6926831a-26fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:9f:8d:b3:82:59:90:93:be:7e:88:a4:03: cc:80:00:86:a1:22:1e:c6:63:63:d1:d4:95:dc:58: 5d:9f:e9:fa:22:a8:0e:43:5e:bc:cb:b6:65:6b:bb: 3e:72:58:49:30:ff:fe:a0:02:1f:b5:a7:e0:75:93: fc:7a:68:cd:f6:0f:ff:c8:db:21:ca:7d:69:c0:b6: a2:f4:42:05:37:9f:43:5e:2a:24:81:43:f3:6a:9c: 5f:5e:15:62:60:6a:3d:61:0e:b9:56:0e:cf:21:75: 5d:95:e3:bc:7a:66:d3:ac:82:10:9c:55:46:a5:f9: 5c:0f:09:d5:ec:6e:7f:33:85:6c:6d:cf:cc:6c:13: aa:e5:b9:42:0e:1b:b9:a5:4e:1e:20:ba:45:f3:ac: 49:0c:d9:39:bf:d2:5d:33:d1:df:f8:3b:86:47:51: 19:af:fc:a3:bf:bc:0c:b8:d7:01:ed:54:61:ef:8d: cf:f7:4e:a3:33:8d:3a:00:50:9c:b8:ea:60:8b:62: d8:82:74:ee:fe:22:55:13:ff:d3:5d:67:f7:db:ca: 78:c3:a9:38:23:5f:04:08:23:0e:c9:33:90:b2:7a: b4:8c:b6:58:c5:e4:57:7f:4e:d8:01:41:bd:c5:db: 6b:5f:da:22:48:f1:f8:2e:f0:0f:08:27:5f:5a:ad: 66:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:69:DC:C9:F3:58:E9:6F:FA:26:B3:C3:5D:DC:85:BD:D8:31:23:90 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.80.0/21 103.2.228.0/22 103.27.236.0/22 103.87.220.0/22 103.89.92.0/22 103.95.156.0/22 103.200.24.0/22 IPv6: 2403:bf40::/48 2403:bf40:2::/48 2403:bf40:6::/48 2403:bf40:240::/42 Signature Algorithm: sha256WithRSAEncryption 3e:ae:16:ff:81:bd:79:ba:b4:64:dd:75:a2:f2:d6:10:d8:04: a7:7d:a7:53:f8:d5:8b:6d:25:d0:44:54:34:cc:ea:09:07:95: b6:5b:62:17:da:2e:22:6a:e1:d4:ee:fc:d6:b4:2a:db:73:5e: 1e:28:39:69:9b:a5:6c:09:1c:35:a9:ba:57:98:26:24:3a:78: 8e:93:65:0f:9b:91:da:c8:77:99:5d:f6:ff:fb:02:16:4e:97: fa:26:63:b3:b9:7e:60:34:22:d4:b9:a0:1c:c7:cf:e1:b3:d2: 8f:d6:b6:4a:12:99:af:00:47:19:a1:0a:22:43:b7:73:f6:d4: c3:03:0b:42:a6:17:03:b4:c6:d5:68:7f:02:f8:ca:ba:26:6d: 29:7d:32:20:b8:d3:8d:ab:7b:16:24:f8:53:68:40:6e:81:83: aa:df:9f:13:39:4e:ad:e6:01:33:83:cd:a7:a6:3a:22:9f:36: 4b:9c:e8:1f:d1:b2:0c:a7:ac:87:9b:d5:84:9e:ad:8c:b4:e0: e6:47:ba:79:ef:cb:76:f1:d3:cd:3c:22:25:08:63:d0:d9:fb: e4:54:c5:4b:6b:03:96:54:dd:36:0b:9e:ea:4d:b8:88:55:44: a1:ac:03:48:68:22:c4:e1:c0:1e:e9:44:e3:18:0b:3d:34:c1: cb:15:65:d4 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgICTzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUxMTI2MDQzMzMwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI2ODMxYS0yNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YqfjbOCWZCTvn6IpAPMgACGoSIexmNj0dSV3Fhdn+n6IqgOQ168y7Zla7s+ clhJMP/+oAIftafgdZP8emjN9g//yNshyn1pwLai9EIFN59DXiokgUPzapxfXhVi YGo9YQ65Vg7PIXVdleO8embTrIIQnFVGpflcDwnV7G5/M4Vsbc/MbBOq5blCDhu5 pU4eILpF86xJDNk5v9JdM9Hf+DuGR1EZr/yjv7wMuNcB7VRh743P906jM406AFCc uOpgi2LYgnTu/iJVE//TXWf328p4w6k4I18ECCMOyTOQsnq0jLZYxeRXf07YAUG9 xdtrX9oiSPH4LvAPCCdfWq1mZQIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFOpp3Mnz WOlv+iazw13chb3YMSOQMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDJDRTJBRjRD RTNEMTFFRkI2NEMyRDFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbwYIKwYBBQUHAQcBAf8E YDBeMDAEAgABMCoDBAMtd1ADBAJnAuQDBAJnG+wDBAJnV9wDBAJnWVwDBAJnX5wD BAJnyBgwKgQCAAIwJAMHACQDv0AAAAMHACQDv0AAAgMHACQDv0AABgMHBiQDv0AC QDANBgkqhkiG9w0BAQsFAAOCAQEAPq4W/4G9ebq0ZN11ovLWENgEp32nU/jVi20l 0ERUNMzqCQeVtltiF9ouImrh1O781rQq23NeHig5aZulbAkcNam6V5gmJDp4jpNl D5uR2sh3mV32//sCFk6X+iZjs7l+YDQi1LmgHMfP4bPSj9a2ShKZrwBHGaEKIkO3 c/bUwwMLQqYXA7TG1Wh/AvjKuiZtKX0yILjTjat7FiT4U2hAboGDqt+fEzlOreYB M4PNp6Y6Ip82S5zoH9GyDKesh5vVhJ6tjLTg5ke6ee/LdvHTzTwiJQhj0Nn75FTF S2sDllTdNgue6k24iFVEoawDSGgixOHAHulE4xgLPTTByxVl1A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:53 2025 by rpki-client