This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/C3D03364CC6511F0A9733883C4F9AE02.roa File: C3D03364CC6511F0A9733883C4F9AE02.roa (raw, json) Hash identifier: KSOQKILeRuvG96eEaMwaX1hZLod3jsbwPCaLou1WSdA= Subject key identifier: 04:5E:80:B2:F3:C3:52:23:8B:9A:3A:C0:85:FB:45:A4:C4:1F:43:89 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 3682 Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/C3D03364CC6511F0A9733883C4F9AE02.roa Signing time: Fri 28 Nov 2025 14:23:10 +0000 ROA not before: Fri 28 Nov 2025 14:23:10 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 23750 IP address blocks: 103.207.86.0/24 maxlen: 24 103.207.87.0/24 maxlen: 24 116.90.100.0/24 maxlen: 24 116.90.106.0/24 maxlen: 24 116.90.107.0/24 maxlen: 24 116.90.108.0/24 maxlen: 24 116.90.109.0/24 maxlen: 24 116.90.110.0/24 maxlen: 24 116.90.111.0/24 maxlen: 24 116.90.120.0/24 maxlen: 24 116.90.123.0/24 maxlen: 24 116.90.124.0/24 maxlen: 24 116.90.125.0/24 maxlen: 24 116.90.126.0/24 maxlen: 24 116.90.127.0/24 maxlen: 24 121.46.64.0/24 maxlen: 24 121.46.65.0/24 maxlen: 24 121.46.66.0/24 maxlen: 24 121.46.67.0/24 maxlen: 24 202.69.32.0/24 maxlen: 24 202.69.33.0/24 maxlen: 24 202.69.34.0/24 maxlen: 24 202.69.35.0/24 maxlen: 24 202.69.36.0/24 maxlen: 24 202.69.37.0/24 maxlen: 24 202.69.38.0/24 maxlen: 24 202.69.39.0/24 maxlen: 24 202.69.40.0/24 maxlen: 24 202.69.41.0/24 maxlen: 24 202.69.42.0/24 maxlen: 24 202.69.43.0/24 maxlen: 24 202.69.44.0/24 maxlen: 24 202.69.45.0/24 maxlen: 24 202.69.46.0/24 maxlen: 24 202.69.47.0/24 maxlen: 24 202.69.48.0/24 maxlen: 24 202.69.49.0/24 maxlen: 24 202.69.50.0/24 maxlen: 24 202.69.51.0/24 maxlen: 24 202.69.52.0/24 maxlen: 24 202.69.53.0/24 maxlen: 24 202.69.54.0/24 maxlen: 24 202.69.55.0/24 maxlen: 24 202.69.56.0/24 maxlen: 24 202.69.57.0/24 maxlen: 24 202.69.58.0/24 maxlen: 24 202.69.59.0/24 maxlen: 24 202.69.60.0/24 maxlen: 24 202.69.61.0/24 maxlen: 24 202.69.62.0/24 maxlen: 24 202.69.63.0/24 maxlen: 24 202.142.144.0/24 maxlen: 24 202.142.145.0/24 maxlen: 24 202.142.146.0/24 maxlen: 24 202.142.147.0/24 maxlen: 24 202.142.148.0/24 maxlen: 24 202.142.149.0/24 maxlen: 24 202.142.150.0/24 maxlen: 24 202.142.152.0/24 maxlen: 24 202.142.153.0/24 maxlen: 24 202.142.154.0/24 maxlen: 24 202.142.156.0/24 maxlen: 24 202.142.157.0/24 maxlen: 24 202.142.158.0/24 maxlen: 24 202.142.159.0/24 maxlen: 24 2406:ac00:1::/48 maxlen: 48 2406:ac00:2::/48 maxlen: 48 2406:ac00:203::/48 maxlen: 48 2406:ac00:204::/48 maxlen: 48 2406:ac00:205::/48 maxlen: 48 2406:ac00:206::/48 maxlen: 48 2406:ac00:207::/48 maxlen: 48 2406:ac00:208::/48 maxlen: 48 2406:ac00:209::/48 maxlen: 48 2406:ac00:300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13954 (0x3682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Nov 28 14:23:10 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6929b04e-063e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:ab:8a:40:7a:d3:8c:6f:91:50:9a:c3:bd: 8a:79:80:df:6d:f5:cf:5c:37:34:36:e1:94:70:9a: e7:8f:27:3d:12:78:b0:b7:1b:08:a6:c5:df:e4:1c: 90:24:11:74:1e:bb:6c:6a:03:b5:a2:1c:64:56:97: cc:2b:0a:ff:a1:5a:6b:bb:51:a5:69:2c:88:59:c6: e8:a0:35:82:3c:cf:d5:c5:3e:73:0f:2f:a4:3d:6d: c4:40:ab:0c:d2:94:bb:0c:2e:32:7b:0b:13:fd:5b: ff:62:28:76:68:9a:4d:1a:af:a3:22:76:11:cf:40: 18:e2:6e:60:5f:7f:a7:3d:a8:f1:f4:d1:85:52:66: 78:4f:e7:16:ee:43:13:63:bb:9a:10:71:25:55:71: 2c:51:3d:58:c1:d2:32:1f:06:27:4a:53:bf:3a:4c: 9e:b7:57:2c:d3:e9:a0:e1:92:79:0e:ba:27:e7:b0: f1:a4:53:eb:cd:97:91:6d:57:80:dd:d5:e7:e1:0a: fc:96:69:dc:4a:3d:bf:69:ad:95:8a:8e:85:ce:dd: a4:9c:8b:3a:ed:75:b5:0c:7d:c6:da:64:05:5e:e6: 43:c0:74:93:e5:3c:fe:0a:96:1a:03:e8:53:e2:8e: 19:3c:08:a5:57:a4:bc:a2:18:d5:01:37:be:74:4a: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5E:80:B2:F3:C3:52:23:8B:9A:3A:C0:85:FB:45:A4:C4:1F:43:89 X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/C3D03364CC6511F0A9733883C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.207.86.0/23 116.90.100.0/24 116.90.106.0-116.90.111.255 116.90.120.0/24 116.90.123.0-116.90.127.255 121.46.64.0/22 202.69.32.0/19 202.142.144.0-202.142.150.255 202.142.152.0-202.142.154.255 202.142.156.0/22 IPv6: 2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff 2406:ac00:203::-2406:ac00:209:ffff:ffff:ffff:ffff:ffff 2406:ac00:300::/48 Signature Algorithm: sha256WithRSAEncryption 27:f6:f5:92:34:15:c0:07:cb:0c:80:a8:8a:22:50:78:40:43: bc:08:b5:4b:24:9d:6e:fd:bd:da:e8:3e:84:a0:ef:b5:99:27: de:a3:25:fc:04:6b:36:70:1c:8e:07:78:18:bb:eb:a2:fe:4e: 0d:a0:a8:74:f5:c2:03:eb:e4:95:b9:87:ab:c5:33:77:d4:35: 8f:d3:49:be:51:17:a7:6e:a1:45:10:ad:d9:30:ea:1c:64:f4: 28:48:90:a9:c6:6f:f4:24:1f:30:15:57:99:2a:bf:1f:f2:a8: 7f:2a:9b:f8:3e:1b:4f:16:43:51:22:59:8f:bb:40:4e:47:2c: 4d:5e:a4:45:ce:e5:d5:4d:32:26:00:00:55:27:59:d4:8f:5d: f0:4a:71:86:71:9d:eb:e2:28:e0:c7:d7:55:98:22:53:21:a6: ef:45:73:86:97:17:0a:e2:8e:90:4c:d4:dc:77:77:05:8c:22: 9b:a1:38:6e:12:26:3e:aa:fc:dc:db:bd:42:cc:ed:2e:65:ec: 4f:c9:f3:be:b7:7f:b8:0f:b7:a3:2d:a4:79:fb:b0:d0:49:6e: 78:b6:c1:20:f2:2d:9c:4d:52:a6:03:d9:1c:24:3a:56:e7:0c: d0:07:15:ad:b3:d7:eb:fc:ee:32:39:9e:a2:31:ae:c9:3e:da: 55:58:95:61 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgICNoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjUxMTI4MTQyMzEwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5YjA0ZS0wNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVyrikB604xvkVCaw72KeYDfbfXPXDc0NuGUcJrnjyc9EniwtxsIpsXf5ByQ JBF0HrtsagO1ohxkVpfMKwr/oVpru1GlaSyIWcbooDWCPM/VxT5zDy+kPW3EQKsM 0pS7DC4yewsT/Vv/Yih2aJpNGq+jInYRz0AY4m5gX3+nPajx9NGFUmZ4T+cW7kMT Y7uaEHElVXEsUT1YwdIyHwYnSlO/Okyet1cs0+mg4ZJ5Dron57DxpFPrzZeRbVeA 3dXn4Qr8lmncSj2/aa2Vio6Fzt2knIs67XW1DH3G2mQFXuZDwHST5Tz+CpYaA+hT 4o4ZPAilV6S8ohjVATe+dEqMXQIDAQABo4IDJzCCAyMwHQYDVR0OBBYEFARegLLz w1Iji5o6wIX7RaTEH0OJMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvQzNEMDMzNjRD QzY1MTFGMEE5NzMzODgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbAGCCsGAQUFBwEHAQH/ BIGgMIGdMGIEAgABMFwDBAFnz1YDBAB0WmQwDAMEAXRaagMEBHRaYAMEAHRaeDAM AwQAdFp7AwQHdFoAAwQCeS5AAwQFykUgMAwDBATKjpADBADKjpYwDAMEA8qOmAME AMqOmgMEAsqOnDA3BAIAAjAxMBIDBwAkBqwAAAEDBwAkBqwAAAIwEgMHACQGrAAC AwMHASQGrAACCAMHACQGrAADADANBgkqhkiG9w0BAQsFAAOCAQEAJ/b1kjQVwAfL DICoiiJQeEBDvAi1SySdbv292ug+hKDvtZkn3qMl/ARrNnAcjgd4GLvrov5ODaCo dPXCA+vklbmHq8Uzd9Q1j9NJvlEXp26hRRCt2TDqHGT0KEiQqcZv9CQfMBVXmSq/ H/Kofyqb+D4bTxZDUSJZj7tATkcsTV6kRc7l1U0yJgAAVSdZ1I9d8EpxhnGd6+Io 4MfXVZgiUyGm70VzhpcXCuKOkEzU3Hd3BYwim6E4bhImPqr83Nu9QsztLmXsT8nz vrd/uA+3oy2kefuw0ElueLbBIPItnE1SpgPZHCQ6VucM0AcVrbPX6/zuMjmeojGu yT7aVViVYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:26:41 2025 by rpki-client