This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/D2AD822AF2A711F0B86D5E54726F56BC.roa File: D2AD822AF2A711F0B86D5E54726F56BC.roa (raw, json) Hash identifier: nPEmHrBlmYb4U4/8lQqL1RY3eskN/FMJbxCuQDtni7A= Subject key identifier: 5D:04:12:EC:26:C2:B7:F6:41:DA:F4:B4:CC:36:B7:71:77:77:8C:D2 Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Certificate serial: 24CB Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/D2AD822AF2A711F0B86D5E54726F56BC.roa Signing time: Fri 16 Jan 2026 06:52:07 +0000 ROA not before: Fri 16 Jan 2026 06:52:07 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45352 IP address blocks: 14.102.144.0/21 maxlen: 24 14.192.64.0/24 maxlen: 24 14.192.65.0/24 maxlen: 24 14.192.66.0/24 maxlen: 24 14.192.70.0/23 maxlen: 24 43.252.152.0/22 maxlen: 24 45.64.168.0/22 maxlen: 24 58.84.8.0/22 maxlen: 22 58.84.8.0/24 maxlen: 24 58.84.9.0/24 maxlen: 24 58.84.10.0/24 maxlen: 24 58.84.11.0/24 maxlen: 24 103.3.172.0/24 maxlen: 24 103.3.173.0/24 maxlen: 24 103.3.174.0/23 maxlen: 24 103.10.156.0/23 maxlen: 24 103.10.158.0/23 maxlen: 24 103.23.45.0/24 maxlen: 24 103.40.204.0/22 maxlen: 24 118.107.200.0/21 maxlen: 24 118.107.208.0/24 maxlen: 24 118.107.209.0/24 maxlen: 24 118.107.210.0/24 maxlen: 24 118.107.211.0/24 maxlen: 24 118.107.232.0/24 maxlen: 24 118.107.233.0/24 maxlen: 24 118.107.234.0/23 maxlen: 23 118.107.235.0/24 maxlen: 24 118.107.236.0/24 maxlen: 24 118.107.237.0/24 maxlen: 24 118.107.238.0/24 maxlen: 24 118.107.239.0/24 maxlen: 24 118.107.240.0/24 maxlen: 24 118.107.241.0/24 maxlen: 24 118.107.242.0/24 maxlen: 24 118.107.243.0/24 maxlen: 24 183.81.160.0/21 maxlen: 24 192.82.56.0/21 maxlen: 21 192.82.56.0/24 maxlen: 24 192.82.57.0/24 maxlen: 24 192.82.58.0/24 maxlen: 24 192.82.59.0/24 maxlen: 24 192.82.60.0/24 maxlen: 24 192.82.61.0/24 maxlen: 24 192.82.62.0/24 maxlen: 24 192.82.63.0/24 maxlen: 24 210.5.40.0/22 maxlen: 24 210.5.44.0/22 maxlen: 24 2401:3400::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9419 (0x24cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C Validity Not Before: Jan 16 06:52:07 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6969e017-adbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:86:2a:43:58:2d:d4:fd:79:a3:05:22:00: 40:50:bf:fb:90:aa:f0:28:02:3b:34:5d:cd:c8:8d: 5c:c2:b7:ba:58:d1:eb:43:73:10:28:1b:07:c7:fb: f3:b6:a6:69:bd:f1:7c:9a:9d:01:6b:df:02:3b:03: 7c:ad:9d:fa:83:f0:a8:94:96:f4:cd:84:52:12:9e: 8b:52:30:b6:7d:4f:dc:bf:c7:65:3e:b1:32:5f:38: 05:6e:35:a4:75:8e:c3:bd:3d:6b:6a:c2:27:18:a8: 80:14:fb:db:c4:96:4b:01:d3:f9:2b:e9:69:05:d8: 24:96:f1:c1:3e:40:75:6e:e5:25:a3:2f:16:22:42: eb:b4:14:81:a4:08:c1:71:f3:8f:75:e5:2e:cc:23: 3e:88:b6:78:c3:4f:aa:08:05:f0:e5:96:19:b5:06: d6:23:94:9f:8a:da:72:18:a0:c7:fc:f2:7a:3a:1a: 4f:31:66:ea:2d:be:ad:21:b0:35:8f:fd:56:87:d9: 97:ab:34:05:3b:70:c7:76:d1:2b:c1:b1:f5:31:9c: 1b:27:16:8a:ac:f0:c7:37:19:62:b2:e4:25:86:7c: c1:9e:93:54:63:85:f5:8b:e1:15:ac:38:00:1c:f7: 24:1d:21:a8:58:cd:c0:3c:b0:c0:ba:12:c1:30:71: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:04:12:EC:26:C2:B7:F6:41:DA:F4:B4:CC:36:B7:71:77:77:8C:D2 X509v3 Authority Key Identifier: keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/D2AD822AF2A711F0B86D5E54726F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.102.144.0/21 14.192.64.0-14.192.66.255 14.192.70.0/23 43.252.152.0/22 45.64.168.0/22 58.84.8.0/22 103.3.172.0/22 103.10.156.0/22 103.23.45.0/24 103.40.204.0/22 118.107.200.0-118.107.211.255 118.107.232.0-118.107.243.255 183.81.160.0/21 192.82.56.0/21 210.5.40.0/21 IPv6: 2401:3400::/32 Signature Algorithm: sha256WithRSAEncryption 37:ce:dc:c5:9c:89:4a:92:b9:bc:84:43:a2:b8:3a:f0:34:d7: f4:97:08:97:fd:20:97:7c:df:c3:52:0b:82:80:48:60:76:32: c6:a5:ab:34:dc:d6:e3:ec:61:c4:8a:6f:f9:58:fe:c6:46:45: f2:c4:3d:06:5a:cf:21:bc:1d:d5:93:dd:5c:ab:d6:fa:88:b5: cf:cc:09:ed:bc:0a:15:bc:41:2e:60:dc:2e:7c:40:02:94:d0: f9:be:f7:09:56:b4:cd:9d:88:65:85:83:66:32:6a:47:44:87: 13:9d:98:3c:f4:8d:29:5a:92:ec:69:fc:cb:bd:35:19:63:a0: d3:b9:06:ee:33:a5:07:dc:ce:d0:7d:f8:25:bf:eb:6b:5d:ea: a6:28:c1:58:b9:e8:e9:90:ba:55:a5:b3:9a:a4:df:6d:6e:28: b6:80:83:d3:95:57:c8:a5:4f:a6:a5:09:14:f0:13:5c:cb:59: 56:fb:30:b2:29:22:53:ff:b7:a9:16:b6:91:ff:64:77:b1:be: 20:26:0d:04:65:54:35:cf:a6:2a:3f:73:b4:90:1d:82:31:ee: c3:01:6b:4b:4f:88:46:59:5e:2c:7c:16:d7:88:b7:4f:d6:6e: 9a:34:c6:b7:d5:94:26:12:24:58:3b:96:bf:4f:45:98:b5:94: 33:96:c6:3b -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgICJMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKDdBQzBDMDBGMEZDQTQ3OUVFNDY1RTRGN0Y1NDVFOEM5 NDk5M0Q2MUMwHhcNMjYwMTE2MDY1MjA3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY5ZTAxNy1hZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunKGKkNYLdT9eaMFIgBAUL/7kKrwKAI7NF3NyI1cwre6WNHrQ3MQKBsHx/vz tqZpvfF8mp0Ba98COwN8rZ36g/ColJb0zYRSEp6LUjC2fU/cv8dlPrEyXzgFbjWk dY7DvT1rasInGKiAFPvbxJZLAdP5K+lpBdgklvHBPkB1buUloy8WIkLrtBSBpAjB cfOPdeUuzCM+iLZ4w0+qCAXw5ZYZtQbWI5SfitpyGKDH/PJ6OhpPMWbqLb6tIbA1 j/1Wh9mXqzQFO3DHdtErwbH1MZwbJxaKrPDHNxlisuQlhnzBnpNUY4X1i+EVrDgA HPckHSGoWM3APLDAuhLBMHHmsQIDAQABo4IDEzCCAw8wHQYDVR0OBBYEFF0EEuwm wrf2Qdr0tMw2t3F3d4zSMB8GA1UdIwQYMBaAFHrAwA8Pykee5GXk9/VF6MlJk9Yc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81QUZDMjY5MjY1 MkIxMUU1OTdBODY4ODFDNEY5QUUwMi9lc0RBRHdfS1I1N2taZVQzOVVYb3lVbVQx aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzREFEd19LUjU3a1plVDM5VVhveVVtVDFody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2OTEvNUFGQzI2OTI2NTJCMTFFNTk3QTg2ODgxQzRGOUFFMDIvRDJBRDgyMkFG MkE3MTFGMEI4NkQ1RTU0NzI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZwGCCsGAQUFBwEHAQH/ BIGMMIGJMHgEAgABMHIDBAMOZpAwDAMEBg7AQAMEAA7AQgMEAQ7ARgMEAiv8mAME Ai1AqAMEAjpUCAMEAmcDrAMEAmcKnAMEAGcXLQMEAmcozDAMAwQDdmvIAwQCdmvQ MAwDBAN2a+gDBAJ2a/ADBAO3UaADBAPAUjgDBAPSBSgwDQQCAAIwBwMFACQBNAAw DQYJKoZIhvcNAQELBQADggEBADfO3MWciUqSubyEQ6K4OvA01/SXCJf9IJd838NS C4KASGB2MsalqzTc1uPsYcSKb/lY/sZGRfLEPQZazyG8HdWT3Vyr1vqItc/MCe28 ChW8QS5g3C58QAKU0Pm+9wlWtM2diGWFg2YyakdEhxOdmDz0jSlakuxp/Mu9NRlj oNO5Bu4zpQfcztB9+CW/62td6qYowVi56OmQulWls5qk321uKLaAg9OVV8ilT6al CRTwE1zLWVb7MLIpIlP/t6kWtpH/ZHexviAmDQRlVDXPpio/c7SQHYIx7sMBa0tP iEZZXix8FteIt0/Wbpo0xrfVlCYSJFg7lr9PRZi1lDOWxjs= -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:18 2026 by rpki-client