This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/67A60C64441E11EB861F005AC4F9AE02.roa File: 67A60C64441E11EB861F005AC4F9AE02.roa (raw, json) Hash identifier: D5CUsTP2i0/HciFNANN82DTJAFUcohbemvIx6yZbLyQ= Subject key identifier: 03:0B:0C:32:02:0F:45:A0:2F:20:C4:62:B9:41:63:9B:D4:46:F4:DC Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 09FE Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/67A60C64441E11EB861F005AC4F9AE02.roa Signing time: Fri 02 Jan 2026 19:16:08 +0000 ROA not before: Fri 02 Jan 2026 19:16:08 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138654 IP address blocks: 120.88.96.0/24 maxlen: 24 120.88.97.0/24 maxlen: 24 120.88.98.0/24 maxlen: 24 120.88.99.0/24 maxlen: 24 120.88.100.0/24 maxlen: 24 120.88.101.0/24 maxlen: 24 120.88.102.0/24 maxlen: 24 120.88.103.0/24 maxlen: 24 120.88.104.0/24 maxlen: 24 120.88.105.0/24 maxlen: 24 120.88.106.0/24 maxlen: 24 120.88.107.0/24 maxlen: 24 120.88.108.0/24 maxlen: 24 120.88.109.0/24 maxlen: 24 120.88.110.0/24 maxlen: 24 120.88.111.0/24 maxlen: 24 2406:f0c0::/32 maxlen: 32 2406:f0c0::/32 maxlen: 40 2406:f0c0:96::/48 maxlen: 48 2406:f0c0:97::/48 maxlen: 48 2406:f0c0:98::/48 maxlen: 48 2406:f0c0:99::/48 maxlen: 48 2406:f0c0:100::/48 maxlen: 48 2406:f0c0:101::/48 maxlen: 48 2406:f0c0:102::/48 maxlen: 48 2406:f0c0:103::/48 maxlen: 48 2406:f0c0:104::/48 maxlen: 48 2406:f0c0:105::/48 maxlen: 48 2406:f0c0:106::/48 maxlen: 48 2406:f0c0:107::/48 maxlen: 48 2406:f0c0:108::/48 maxlen: 48 2406:f0c0:109::/48 maxlen: 48 2406:f0c0:110::/48 maxlen: 48 2406:f0c0:111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2558 (0x9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4, serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: Jan 2 19:16:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69581978-6d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:81:f2:36:ba:14:19:28:42:96:74:77:fe:af: 81:d7:ee:bc:55:cc:4e:61:6b:7b:a7:a4:17:37:59: a7:67:a3:9f:14:4b:77:ea:7c:2a:ee:40:6e:72:b2: 88:ec:64:44:cc:c5:4b:04:37:6d:fa:29:a0:e7:5f: 2c:85:b4:9f:98:cb:e8:90:8e:b1:f8:9c:5b:0d:ff: 7e:6d:88:0f:23:00:be:51:d3:17:d1:d0:1a:1e:15: 65:c3:ff:68:36:9e:ae:e9:27:54:07:9f:da:dc:ba: 7e:cf:7e:aa:f3:3e:08:cb:3a:00:94:e3:b1:cb:51: e3:6c:bf:f4:01:27:d0:68:32:6c:c9:5f:cf:14:31: fc:05:1d:0d:c7:88:47:90:d0:16:17:b2:0f:06:e5: e5:bf:dd:53:b2:4a:ae:91:ef:f1:b2:71:64:5e:7a: eb:f8:b2:1b:12:26:79:d3:de:d9:8a:ef:a0:de:af: 93:e3:ce:1d:f3:fe:4d:5f:95:58:86:33:e8:fd:93: 77:ce:71:e7:c6:48:39:86:0b:8a:1c:b6:34:78:e7: 04:9a:c7:40:a1:34:56:24:64:68:98:09:d2:76:57: c8:f3:07:05:a6:6b:d1:86:a1:f0:1a:c0:3d:62:c4: a2:be:99:12:b8:dc:83:a3:06:56:93:7c:d5:3f:04: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0B:0C:32:02:0F:45:A0:2F:20:C4:62:B9:41:63:9B:D4:46:F4:DC X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/67A60C64441E11EB861F005AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.88.96.0/20 IPv6: 2406:f0c0::/32 Signature Algorithm: sha256WithRSAEncryption 8e:75:a9:3f:ec:ea:e3:a6:4b:9f:42:68:f4:dc:41:d4:90:ca: f6:4d:c6:84:bb:07:61:52:58:a4:7c:31:0a:55:8b:7e:00:1c: 90:25:6c:b7:89:0e:bd:70:59:f6:58:e5:7f:de:53:c5:e1:c9: be:12:41:6a:d8:26:79:84:8b:9f:0a:6f:42:8a:90:fd:16:24: 81:5e:77:85:d7:f4:8f:55:08:f5:01:3f:a2:47:02:03:7d:ad: e0:5b:14:90:ea:94:01:df:fe:dd:1b:0b:81:2e:f4:dd:c3:8b: 9c:30:c7:a7:60:62:18:58:cd:d2:f8:eb:35:47:dd:4c:3f:e9: cf:6a:63:24:68:e7:5f:ab:3f:b6:94:24:41:97:30:3a:41:cf: 45:99:e7:54:77:f0:32:85:e4:7a:c1:30:cd:60:9d:0f:78:7d: bc:65:2d:5f:f9:9a:9d:6a:f0:8f:86:cf:ab:ef:e9:13:c2:e0: af:03:33:e3:c5:b3:95:22:61:85:1e:d3:b6:91:94:48:31:2e: 19:14:fe:de:44:c5:e6:98:a0:04:f6:f6:f2:61:35:a1:7b:df: 0c:a3:5d:4a:d5:99:3a:5f:14:b6:6e:50:77:ce:ab:62:4a:83: 84:4a:ad:7c:f0:cc:6a:bf:c3:fa:c6:7a:ad:2e:96:f9:11:2c: 12:2e:4f:f2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjYwMTAyMTkxNjA4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU4MTk3OC02ZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAioHyNroUGShClnR3/q+B1+68VcxOYWt7p6QXN1mnZ6OfFEt36nwq7kBucrKI 7GREzMVLBDdt+img518shbSfmMvokI6x+JxbDf9+bYgPIwC+UdMX0dAaHhVlw/9o Np6u6SdUB5/a3Lp+z36q8z4IyzoAlOOxy1HjbL/0ASfQaDJsyV/PFDH8BR0Nx4hH kNAWF7IPBuXlv91Tskquke/xsnFkXnrr+LIbEiZ5097Ziu+g3q+T484d8/5NX5VY hjPo/ZN3znHnxkg5hguKHLY0eOcEmsdAoTRWJGRomAnSdlfI8wcFpmvRhqHwGsA9 YsSivpkSuNyDowZWk3zVPwQdMQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAMLDDIC D0WgLyDEYrlBY5vURvTcMB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVBRDQvMTEyMjZCN0U4RjhBMTFFQTk4MjhDNjVEQzRGOUFFMDIvNjdBNjBDNjQ0 NDFFMTFFQjg2MUYwMDVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAR4WGAwDQQCAAIwBwMFACQG8MAwDQYJKoZIhvcNAQELBQAD ggEBAI51qT/s6uOmS59CaPTcQdSQyvZNxoS7B2FSWKR8MQpVi34AHJAlbLeJDr1w WfZY5X/eU8Xhyb4SQWrYJnmEi58Kb0KKkP0WJIFed4XX9I9VCPUBP6JHAgN9reBb FJDqlAHf/t0bC4Eu9N3Di5wwx6dgYhhYzdL46zVH3Uw/6c9qYyRo51+rP7aUJEGX MDpBz0WZ51R38DKF5HrBMM1gnQ94fbxlLV/5mp1q8I+Gz6vv6RPC4K8DM+PFs5Ui YYUe07aRlEgxLhkU/t5ExeaYoAT29vJhNaF73wyjXUrVmTpfFLZuUHfOq2JKg4RK rXzwzGq/w/rGeq0ulvkRLBIuT/I= -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:03 2026 by rpki-client