This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8E61229E3AEA11EC84E6634EC4F9AE02.roa File: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (raw, json) Hash identifier: r/UrHR4/pq4iERDjBjufQuU/vYCRg4tIHiAlT6J6epA= Subject key identifier: A8:3E:67:F1:D3:EF:55:57:34:26:3E:2D:C1:40:FE:8E:FC:A2:63:60 Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0DA8 Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8E61229E3AEA11EC84E6634EC4F9AE02.roa Signing time: Sat 22 Nov 2025 17:37:44 +0000 ROA not before: Sat 22 Nov 2025 17:37:44 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 55799 IP address blocks: 27.122.56.0/24 maxlen: 24 27.122.57.0/24 maxlen: 24 27.122.58.0/24 maxlen: 24 27.122.59.0/24 maxlen: 24 43.239.156.0/22 maxlen: 22 43.239.156.0/23 maxlen: 23 43.239.156.0/24 maxlen: 24 43.239.157.0/24 maxlen: 24 43.239.158.0/23 maxlen: 23 43.239.158.0/24 maxlen: 24 43.239.159.0/24 maxlen: 24 43.245.196.0/23 maxlen: 23 43.245.196.0/24 maxlen: 24 43.245.197.0/24 maxlen: 24 43.245.198.0/24 maxlen: 24 43.245.199.0/24 maxlen: 24 43.251.157.0/24 maxlen: 24 43.251.158.0/24 maxlen: 24 43.251.159.0/24 maxlen: 24 103.1.152.0/24 maxlen: 24 103.1.153.0/24 maxlen: 24 103.1.154.0/24 maxlen: 24 103.1.155.0/24 maxlen: 24 103.10.196.0/24 maxlen: 24 103.10.198.0/24 maxlen: 24 103.35.72.0/22 maxlen: 22 103.35.72.0/24 maxlen: 24 103.35.73.0/24 maxlen: 24 103.35.74.0/24 maxlen: 24 103.35.75.0/24 maxlen: 24 103.68.223.0/24 maxlen: 24 103.71.254.0/24 maxlen: 24 103.72.4.0/23 maxlen: 23 182.161.32.0/22 maxlen: 22 182.161.32.0/24 maxlen: 24 182.161.33.0/24 maxlen: 24 182.161.34.0/24 maxlen: 24 182.161.35.0/24 maxlen: 24 202.144.192.0/22 maxlen: 22 202.144.192.0/24 maxlen: 24 202.144.193.0/24 maxlen: 24 202.144.194.0/24 maxlen: 24 202.144.195.0/24 maxlen: 24 2402:c480:3001::/48 maxlen: 48 2402:c480:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3496 (0xda8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Nov 22 17:37:44 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6921f4e8-fec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:09:f0:cc:cf:bd:0b:e7:6a:f9:1c:1f:78:ff: e0:5a:8c:bc:80:e4:19:a6:69:da:e4:32:48:56:7c: 11:ad:b9:9e:de:3b:03:51:cb:ab:5d:71:24:25:6e: ac:28:d6:d2:97:ad:2f:91:57:c4:13:1a:21:c9:6b: f4:61:45:95:7e:99:51:08:ab:d8:2e:2f:2f:0a:72: cd:15:a0:c6:f2:b4:99:39:50:53:a3:67:36:c7:39: ef:50:f5:e6:b9:f7:ae:f0:8b:0a:1b:fc:77:fc:11: 5e:5a:4a:a9:c0:00:35:eb:91:bd:34:f7:a3:21:7a: 45:bd:4a:4d:f3:54:f1:55:90:ab:7b:e2:58:c6:7b: 0e:35:bf:a0:c7:bb:25:70:2d:f7:72:bc:a2:4b:9d: 8f:fa:4a:94:13:66:18:69:da:e8:dd:f3:d3:be:c4: bd:76:80:14:e6:c9:ab:06:98:0b:46:f8:ca:07:d3: 18:97:ad:41:6e:56:88:e8:61:a7:1b:78:c3:2d:06: 83:92:50:9f:f2:9d:36:46:75:be:6b:f7:cc:2d:18: 6c:ed:e1:e4:89:27:0b:ee:3a:6e:f7:43:d8:ed:56: 65:09:2d:5c:88:91:0b:f4:aa:23:d2:42:86:2b:77: f7:9d:f4:12:d6:82:cf:81:ed:6c:e2:6d:49:09:5a: 48:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3E:67:F1:D3:EF:55:57:34:26:3E:2D:C1:40:FE:8E:FC:A2:63:60 X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8E61229E3AEA11EC84E6634EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.122.56.0/22 43.239.156.0/22 43.245.196.0/22 43.251.157.0-43.251.159.255 103.1.152.0/22 103.10.196.0/24 103.10.198.0/24 103.35.72.0/22 103.68.223.0/24 103.71.254.0/24 103.72.4.0/23 182.161.32.0/22 202.144.192.0/22 IPv6: 2402:c480:3001::/48 2402:c480:8001::/48 Signature Algorithm: sha256WithRSAEncryption 1d:c8:bc:c4:64:ea:53:25:44:6c:7f:70:ad:03:e3:a9:33:55: ab:0f:7e:ac:dd:b5:74:90:36:26:67:fb:77:e6:f0:1d:a4:6e: c2:92:dd:22:70:40:86:df:fc:a1:97:e6:d9:70:80:05:2c:86: a6:e8:d5:8d:e2:98:18:02:09:56:01:7f:82:b8:c8:05:67:40: d1:07:91:71:ec:3f:85:b9:8c:96:f1:93:5c:82:b7:c2:8b:49: 24:28:ea:d2:24:c1:3e:dc:7a:d9:d8:63:2a:91:76:5e:4a:ca: 71:8b:df:d2:fb:0b:29:a8:5d:80:a4:08:c4:16:56:c2:08:3c: c5:e6:db:8d:3c:da:04:a8:a8:22:c7:99:b7:2b:fd:03:df:c1: 2d:71:07:f5:7c:88:bc:59:e2:a1:02:52:c9:85:42:62:00:dd: 02:d4:b7:dc:17:82:b7:c7:59:f7:91:cc:cb:fb:df:77:a2:ea: 76:69:6b:fc:5d:12:0f:98:db:ad:32:72:a4:68:bc:84:49:11: d7:20:bc:b7:8d:10:43:73:26:0c:e9:e4:1e:3c:64:09:e4:e5: 48:32:4e:1c:b2:79:de:21:0a:f8:b5:9e:d1:5f:bd:34:6d:12: 10:6d:31:61:fb:df:83:08:b0:7e:6d:9e:2e:dc:5e:34:55:a4: 73:05:49:9f -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgICDagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjUxMTIyMTczNzQ0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTIxZjRlOC1mZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wnwzM+9C+dq+RwfeP/gWoy8gOQZpmna5DJIVnwRrbme3jsDUcurXXEkJW6s KNbSl60vkVfEExohyWv0YUWVfplRCKvYLi8vCnLNFaDG8rSZOVBTo2c2xznvUPXm ufeu8IsKG/x3/BFeWkqpwAA165G9NPejIXpFvUpN81TxVZCre+JYxnsONb+gx7sl cC33cryiS52P+kqUE2YYadro3fPTvsS9doAU5smrBpgLRvjKB9MYl61BblaI6GGn G3jDLQaDklCf8p02RnW+a/fMLRhs7eHkiScL7jpu90PY7VZlCS1ciJEL9Koj0kKG K3f3nfQS1oLPge1s4m1JCVpIzQIDAQABo4IDADCCAvwwHQYDVR0OBBYEFKg+Z/HT 71VXNCY+LcFA/o78omNgMB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg4NUMvNUMxOUY4NDJGMjY3MTFFOTg3QzcxMzFGQzRGOUFFMDIvOEU2MTIyOUUz QUVBMTFFQzg0RTY2MzRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYkGCCsGAQUFBwEHAQH/ BHoweDBcBAIAATBWAwQCG3o4AwQCK++cAwQCK/XEMAwDBAAr+50DBAUr+4ADBAJn AZgDBABnCsQDBABnCsYDBAJnI0gDBABnRN8DBABnR/4DBAFnSAQDBAK2oSADBALK kMAwGAQCAAIwEgMHACQCxIAwAQMHACQCxICAATANBgkqhkiG9w0BAQsFAAOCAQEA Hci8xGTqUyVEbH9wrQPjqTNVqw9+rN21dJA2Jmf7d+bwHaRuwpLdInBAht/8oZfm 2XCABSyGpujVjeKYGAIJVgF/grjIBWdA0QeRcew/hbmMlvGTXIK3wotJJCjq0iTB Ptx62dhjKpF2XkrKcYvf0vsLKahdgKQIxBZWwgg8xebbjTzaBKioIseZtyv9A9/B LXEH9XyIvFnioQJSyYVCYgDdAtS33BeCt8dZ95HMy/vfd6Lqdmlr/F0SD5jbrTJy pGi8hEkR1yC8t40QQ3MmDOnkHjxkCeTlSDJOHLJ53iEK+LWe0V+9NG0SEG0xYfvf gwiwfm2eLtxeNFWkcwVJnw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:02 2025 by rpki-client