This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/6AC5AB5CEAB811F088FEC0005D6F56BC.roa File: 6AC5AB5CEAB811F088FEC0005D6F56BC.roa (raw, json) Hash identifier: 734lTvZrIGJ1eMbZE3vuqH7Z4/sAAYm2oyvhDXTS6bc= Subject key identifier: CC:C3:02:44:6C:69:30:83:98:A8:72:08:69:D8:30:F3:AF:D4:1F:43 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0BD9 Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/6AC5AB5CEAB811F088FEC0005D6F56BC.roa Signing time: Tue 06 Jan 2026 04:30:23 +0000 ROA not before: Tue 06 Jan 2026 04:30:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55501 IP address blocks: 103.225.220.0/22 maxlen: 22 103.225.220.0/24 maxlen: 24 103.225.221.0/24 maxlen: 24 103.225.222.0/24 maxlen: 24 103.225.223.0/24 maxlen: 24 202.166.160.0/23 maxlen: 23 202.166.160.0/24 maxlen: 24 202.166.161.0/24 maxlen: 24 202.166.162.0/23 maxlen: 23 202.166.162.0/24 maxlen: 24 202.166.163.0/24 maxlen: 24 202.166.164.0/23 maxlen: 24 202.166.166.0/23 maxlen: 23 202.166.166.0/24 maxlen: 24 202.166.167.0/24 maxlen: 24 202.166.168.0/22 maxlen: 22 202.166.168.0/24 maxlen: 24 202.166.169.0/24 maxlen: 24 202.166.170.0/23 maxlen: 23 202.166.170.0/24 maxlen: 24 202.166.171.0/24 maxlen: 24 202.166.172.0/23 maxlen: 24 202.166.174.0/23 maxlen: 23 202.166.174.0/24 maxlen: 24 202.166.175.0/24 maxlen: 24 2401:ea00::/48 maxlen: 48 2401:ea00:1::/48 maxlen: 48 2401:ea00:2::/48 maxlen: 48 2401:ea00:3::/48 maxlen: 48 2401:ea00:4::/48 maxlen: 48 2401:ea00:5::/48 maxlen: 48 2401:ea00:6::/48 maxlen: 48 2401:ea00:7::/48 maxlen: 48 2401:ea00:8::/48 maxlen: 48 2401:ea00:9::/48 maxlen: 48 2401:ea00:a::/48 maxlen: 48 2401:ea00:b::/48 maxlen: 48 2401:ea00:c::/48 maxlen: 48 2401:ea00:d::/48 maxlen: 48 2401:ea00:e::/48 maxlen: 48 2401:ea00:f::/48 maxlen: 48 2401:ea00:10::/48 maxlen: 48 2401:ea00:11::/48 maxlen: 48 2401:ea00:12::/48 maxlen: 48 2401:ea00:13::/48 maxlen: 48 2401:ea00:20::/48 maxlen: 48 2401:ea00:25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3033 (0xbd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: Jan 6 04:30:23 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=695c8fdf-0755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:39:4b:21:e5:2f:ec:0f:9f:6d:4d:00:61: 89:6d:c3:54:62:ad:b0:de:f4:32:41:c2:66:59:b4: 47:da:37:ba:77:6f:74:a2:64:6c:2b:af:ec:b0:46: 37:7a:7a:90:51:bf:bb:71:d8:fc:f5:89:2b:3e:b7: bd:3c:78:d2:9a:8f:53:b0:f0:d0:8c:d4:52:19:3a: 00:fc:ef:7e:2c:9d:d9:ab:1d:af:ee:cf:25:c9:fd: ea:ef:c2:cd:14:32:ad:db:4f:91:12:b8:1e:41:f3: 36:60:68:7d:83:b4:e4:59:5d:f3:85:92:63:7a:84: 1a:a1:8b:3a:c8:91:af:bb:79:3a:e1:d8:c9:08:b1: 16:90:a2:aa:ce:a7:57:cc:92:63:00:b0:ae:16:bb: b0:9e:48:a0:6a:e8:d5:04:1b:83:76:fc:a9:94:69: ed:fd:7a:5e:54:d5:1b:30:25:e4:46:e5:d4:46:0c: de:58:6b:da:99:51:23:8a:57:52:f7:22:66:5d:20: 5a:05:9b:74:47:e8:40:31:96:2c:b3:a9:81:39:7c: 84:c1:9d:ab:2e:69:e7:89:d7:c1:8c:9a:00:84:69: a1:35:59:b8:be:28:49:b0:2e:6d:f1:22:ee:b9:1d: cc:68:52:03:d8:88:3d:2e:7a:0e:d0:37:f9:41:72: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C3:02:44:6C:69:30:83:98:A8:72:08:69:D8:30:F3:AF:D4:1F:43 X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/6AC5AB5CEAB811F088FEC0005D6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.225.220.0/22 202.166.160.0/20 IPv6: 2401:ea00::-2401:ea00:13:ffff:ffff:ffff:ffff:ffff 2401:ea00:20::/48 2401:ea00:25::/48 Signature Algorithm: sha256WithRSAEncryption 47:15:73:c7:b8:12:7c:10:6f:97:a6:01:bd:aa:63:26:79:e9: ee:30:13:4c:82:fa:15:8c:38:e2:73:43:81:cf:09:21:83:84: 73:49:da:91:5b:37:88:9e:d8:e0:da:95:df:b0:7c:63:de:01: 70:9d:f5:56:01:b5:d8:46:82:42:3b:34:15:74:30:98:f2:ad: 10:2c:b7:29:d0:d8:8c:64:6d:66:6c:94:d4:62:9d:9c:cb:60: 7f:02:d1:89:51:1e:27:72:c4:f4:81:56:da:9c:b3:71:ed:7e: 33:4c:9f:9e:5f:34:b9:ee:44:b9:b4:cf:a5:bb:44:1a:76:77: 6b:40:54:ce:bb:71:f3:9e:67:9b:d8:b1:d0:b8:1a:c8:67:45: 10:2d:d8:02:19:37:ef:cd:45:96:18:bd:5c:8b:2c:e2:04:5b: 03:61:51:96:b0:4e:a8:89:f9:24:51:d6:7c:1a:d7:d1:92:08: 7f:50:ea:7a:2d:7b:ab:c9:e8:bb:7b:94:76:f4:3f:d3:4d:8a: 71:0f:48:ad:da:4b:70:07:6b:31:1b:9c:13:bd:36:a2:bd:69: 00:66:82:4d:b3:5e:9c:82:a7:62:a3:88:43:3a:54:1f:4b:70: 7d:1b:26:64:4d:4a:30:7c:92:82:4e:a1:cf:91:dd:58:e8:c9: 9b:6f:96:49 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgICC9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjYwMTA2MDQzMDIzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVjOGZkZi0wNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRw5SyHlL+wPn21NAGGJbcNUYq2w3vQyQcJmWbRH2je6d290omRsK6/ssEY3 enqQUb+7cdj89YkrPre9PHjSmo9TsPDQjNRSGToA/O9+LJ3Zqx2v7s8lyf3q78LN FDKt20+RErgeQfM2YGh9g7TkWV3zhZJjeoQaoYs6yJGvu3k64djJCLEWkKKqzqdX zJJjALCuFruwnkigaujVBBuDdvyplGnt/XpeVNUbMCXkRuXURgzeWGvamVEjildS 9yJmXSBaBZt0R+hAMZYss6mBOXyEwZ2rLmnnidfBjJoAhGmhNVm4vihJsC5t8SLu uR3MaFID2Ig9LnoO0Df5QXLprwIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFMzDAkRs aTCDmKhyCGnYMPOv1B9DMB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJDNDMvREMyRjU0NjgzOUU0MTFFQTk2MTczMzc0QzRGOUFFMDIvNkFDNUFCNUNF QUI4MTFGMDg4RkVDMDAwNUQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUAYIKwYBBQUHAQcBAf8E QTA/MBIEAgABMAwDBAJn4dwDBATKpqAwKQQCAAIwIzAPAwQBJAHqAwcCJAHqAAAQ AwcAJAHqAAAgAwcAJAHqAAAlMA0GCSqGSIb3DQEBCwUAA4IBAQBHFXPHuBJ8EG+X pgG9qmMmeenuMBNMgvoVjDjic0OBzwkhg4RzSdqRWzeIntjg2pXfsHxj3gFwnfVW AbXYRoJCOzQVdDCY8q0QLLcp0NiMZG1mbJTUYp2cy2B/AtGJUR4ncsT0gVbanLNx 7X4zTJ+eXzS57kS5tM+lu0QadndrQFTOu3Hznmeb2LHQuBrIZ0UQLdgCGTfvzUWW GL1ciyziBFsDYVGWsE6oifkkUdZ8GtfRkgh/UOp6LXuryei7e5R29D/TTYpxD0it 2ktwB2sxG5wTvTaivWkAZoJNs16cgqdio4hDOlQfS3B9GyZkTUowfJKCTqHPkd1Y 6Mmbb5ZJ -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:03 2026 by rpki-client