This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/CF1B3152CCE111EB90AF2C7AC4F9AE02.roa File: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (raw, json) Hash identifier: 8wjeVWlfo9cZAtiKpo1BdMOi+myZ3L7JFzRUdzBXzoo= Subject key identifier: 46:CF:50:D5:70:4C:F8:12:49:B0:0A:9B:C0:3E:D8:B3:2F:7B:4C:78 Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C96 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/CF1B3152CCE111EB90AF2C7AC4F9AE02.roa Signing time: Tue 02 Dec 2025 17:17:58 +0000 ROA not before: Tue 02 Dec 2025 17:17:58 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134739 IP address blocks: 185.205.140.0/22 maxlen: 22 185.205.140.0/24 maxlen: 24 185.205.141.0/24 maxlen: 24 185.205.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Dec 2 17:17:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f1f46-7f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:51:5f:4e:fa:32:85:67:b7:7b:3e:f9:4d: bf:8c:b4:5c:91:cd:6e:a1:3c:d0:db:a0:00:89:fd: 13:a5:fb:e2:bb:7c:9b:ff:de:96:15:e0:9f:32:e7: f1:cb:1a:97:e2:5b:41:80:55:2c:06:96:a0:b0:3d: 94:fe:f7:04:05:c3:92:09:12:b0:d8:ab:36:60:4f: 3a:9a:13:8f:da:c6:72:ff:3d:c2:8f:ba:9d:de:42: 8d:d4:14:60:c6:59:72:7c:3b:58:fc:00:5d:36:b6: 43:49:30:1e:f5:89:81:07:d8:0a:8c:07:03:fe:8b: 29:72:bf:81:da:ca:1a:61:b2:84:e8:a6:91:3a:19: f4:1a:8a:ee:26:b4:d5:e8:40:09:f6:06:0f:bb:32: 6f:ef:d4:aa:49:25:73:d5:46:81:e2:54:90:91:bf: 62:ab:b0:2c:bc:41:88:da:b5:28:02:a6:bb:82:79: 37:a9:5a:fa:e4:3d:a5:58:d6:f7:a2:e3:7e:f7:1f: ad:4c:65:c8:55:43:93:28:b0:9e:9d:a9:06:ed:97: 3b:d7:4c:04:88:18:dd:93:fb:63:ac:6f:ba:37:1c: 55:29:0d:05:f1:b7:c7:cf:49:3a:d1:ef:70:37:e0: 17:8a:98:3f:0f:2e:1c:94:7d:cc:66:9c:ec:f0:85: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CF:50:D5:70:4C:F8:12:49:B0:0A:9B:C0:3E:D8:B3:2F:7B:4C:78 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/CF1B3152CCE111EB90AF2C7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.205.140.0/22 Signature Algorithm: sha256WithRSAEncryption 73:0b:ad:6a:a8:70:bd:b8:20:da:04:c4:53:a9:8c:db:5a:4f: 76:f3:2e:47:c8:9f:04:8d:82:49:ab:a1:da:22:99:cf:5b:9d: 22:2e:1e:cf:35:70:7f:90:7b:3f:e2:42:57:ee:fa:57:81:b8: b9:c6:c4:ac:4c:00:ca:a5:f0:93:86:e4:05:3a:85:8e:f6:af: fd:2e:4e:ee:73:0d:8e:70:e8:f2:13:05:4d:80:50:10:2d:5b: ae:46:e9:f4:1a:63:6b:07:02:7e:6a:fc:a9:52:02:39:d1:41: 0e:08:71:8a:7b:8e:2a:90:c8:ca:2d:f6:13:0d:27:32:4d:6a: 4d:82:64:d8:1b:31:74:34:c7:41:bd:06:0b:bb:f6:2d:8e:85: 30:01:5b:27:93:3e:70:37:bd:42:6f:5c:af:e1:86:e8:2b:f9: e5:7d:2e:24:30:4b:49:ac:5c:34:0a:f0:3e:ee:21:17:d5:96: a3:b2:c9:b1:cb:7f:2f:2a:40:79:43:92:5a:b2:be:88:57:6a: ff:29:87:a8:aa:31:bf:48:67:82:fa:25:d8:35:24:f8:d6:35: e7:16:98:e7:dd:34:2a:7f:9c:d3:85:60:a6:8f:e0:15:03:38: 5f:71:5f:bf:ed:83:86:32:f6:e7:7f:e5:8a:df:4a:07:1c:c3: d8:14:0f:cd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUxMjAyMTcxNzU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmMWY0Ni03ZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyudRX076MoVnt3s++U2/jLRckc1uoTzQ26AAif0Tpfviu3yb/96WFeCfMufx yxqX4ltBgFUsBpagsD2U/vcEBcOSCRKw2Ks2YE86mhOP2sZy/z3Cj7qd3kKN1BRg xllyfDtY/ABdNrZDSTAe9YmBB9gKjAcD/ospcr+B2soaYbKE6KaROhn0GoruJrTV 6EAJ9gYPuzJv79SqSSVz1UaB4lSQkb9iq7AsvEGI2rUoAqa7gnk3qVr65D2lWNb3 ouN+9x+tTGXIVUOTKLCenakG7Zc710wEiBjdk/tjrG+6NxxVKQ0F8bfHz0k60e9w N+AXipg/Dy4clH3MZpzs8IVBAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEbPUNVw TPgSSbAKm8A+2LMve0x4MB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg2RDAvOEQ4RjBBQkUwQjVBMTFFQTkwOTIzMDY2QzRGOUFFMDIvQ0YxQjMxNTJD Q0UxMTFFQjkwQUYyQzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAK5zYwwDQYJKoZIhvcNAQELBQADggEBAHMLrWqocL24INoE xFOpjNtaT3bzLkfInwSNgkmrodoimc9bnSIuHs81cH+Qez/iQlfu+leBuLnGxKxM AMql8JOG5AU6hY72r/0uTu5zDY5w6PITBU2AUBAtW65G6fQaY2sHAn5q/KlSAjnR QQ4IcYp7jiqQyMot9hMNJzJNak2CZNgbMXQ0x0G9Bgu79i2OhTABWyeTPnA3vUJv XK/hhugr+eV9LiQwS0msXDQK8D7uIRfVlqOyybHLfy8qQHlDklqyvohXav8ph6iq Mb9IZ4L6Jdg1JPjWNecWmOfdNCp/nNOFYKaP4BUDOF9xX7/tg4Yy9ud/5YrfSgcc w9gUD80= -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:52 2025 by rpki-client