This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa File: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (raw, json) Hash identifier: T8t0u+yg7mtule8ArVhtoDM1ddDwweThTsXFq2+QBzE= Subject key identifier: 4B:36:D5:A3:1F:B6:40:94:80:D3:95:08:C2:2B:58:A2:CE:0B:AF:9D Certificate issuer: /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282 Certificate serial: 0797 Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa Signing time: Wed 26 Nov 2025 20:42:45 +0000 ROA not before: Wed 26 Nov 2025 20:42:45 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24323 IP address blocks: 45.64.132.0/22 maxlen: 24 103.4.64.0/22 maxlen: 22 103.4.64.0/24 maxlen: 24 103.4.65.0/24 maxlen: 24 103.4.66.0/24 maxlen: 24 103.4.67.0/24 maxlen: 24 182.160.96.0/19 maxlen: 24 202.74.240.0/21 maxlen: 24 203.202.240.0/20 maxlen: 24 2401:c000::/32 maxlen: 40 2401:c000::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1943 (0x797) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3834, serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282 Validity Not Before: Nov 26 20:42:45 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69276645-d985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:3f:77:32:77:3b:80:fd:c9:a1:5c:4e:23: 17:96:74:3a:45:f8:b2:2c:36:43:ba:e3:92:33:61: 13:d2:51:82:c4:76:b3:0a:86:1a:d4:ad:d9:a0:c6: 43:47:0e:b4:20:81:2b:51:43:60:e9:18:36:65:6e: bc:dd:ce:3a:99:c8:cd:26:36:43:73:20:aa:97:6c: 67:4b:f1:99:e7:a1:bb:8d:68:dc:28:37:e4:fe:40: 0e:02:d0:13:93:c6:e1:52:40:c0:c5:c6:01:2f:84: 42:08:a7:12:5b:e7:98:6c:ce:b5:d4:b7:fd:8e:23: e4:ff:71:4e:52:bf:a5:64:db:14:72:cd:a7:65:97: b4:f4:e8:25:15:1f:77:f5:b2:e9:00:fd:07:85:c9: 52:81:10:ca:94:5b:66:46:63:6d:a2:b7:9e:e6:4f: cf:89:c4:ad:55:37:4a:a0:d7:2f:6b:36:6b:31:69: e7:5a:0c:cd:67:66:34:34:55:b7:eb:81:30:22:e4: bf:d9:c6:cf:c1:24:dd:5d:cf:c9:6e:e6:71:aa:b4: 43:d8:12:0c:c2:e5:0d:24:15:ff:b3:ff:d1:f2:51: c9:5d:0b:6b:23:ef:36:77:b4:61:e4:e9:bf:21:e3: 82:ff:b5:fc:64:fb:80:36:d8:e4:f9:fd:bc:25:16: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:36:D5:A3:1F:B6:40:94:80:D3:95:08:C2:2B:58:A2:CE:0B:AF:9D X509v3 Authority Key Identifier: keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.132.0/22 103.4.64.0/22 182.160.96.0/19 202.74.240.0/21 203.202.240.0/20 IPv6: 2401:c000::/32 Signature Algorithm: sha256WithRSAEncryption 37:a9:9e:27:9e:92:dc:50:06:e6:28:7c:ed:be:ec:d4:fa:de: 0d:19:09:e6:a2:f1:79:97:90:e0:b6:ee:73:fb:ef:51:05:3a: ca:ce:2d:fc:20:2f:ed:fd:2e:64:2d:10:f6:55:63:0b:3a:49: 88:59:fd:ea:87:a7:c2:d5:e1:56:4f:f3:6d:07:90:b6:14:92: be:37:ff:3b:49:e5:91:ec:f6:0e:25:76:6d:ec:25:42:ff:53: 0f:e6:8b:70:2a:a9:6c:fc:ce:a2:10:6e:0d:31:05:11:ad:18: 67:fc:36:f2:82:f4:5d:8d:52:f3:70:4d:6a:72:65:09:83:43: bb:40:cc:34:ed:df:fb:a5:9a:51:e6:92:a0:c0:7c:3d:26:ca: 40:17:2d:0d:f4:9d:bc:72:35:d1:ee:15:6d:d0:ac:87:17:0e: df:cc:19:6e:e5:4e:e7:c7:cd:0b:15:b3:bb:83:b1:81:6b:6c: 2e:a1:cd:65:ae:c7:8f:44:11:d0:d8:2e:57:f4:4d:01:d5:06: c7:4a:03:78:21:3f:ba:c1:a1:3a:0b:8b:79:90:9f:08:e4:05: 42:ef:28:31:5a:56:51:21:ff:ab:2d:63:15:ae:c3:91:6f:c6: 40:02:46:b0:15:0d:71:f5:25:c3:d7:f4:b5:b5:65:f2:3e:30: 4a:da:f0:1a -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM4MzQxMTAvBgNVBAUTKDFBMEQwQkZBMTkxOTExRjg1NUI1QkFCREZBMDNCOUMw N0ZERDIyODIwHhcNMjUxMTI2MjA0MjQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3NjY0NS1kOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7A/dzJ3O4D9yaFcTiMXlnQ6RfiyLDZDuuOSM2ET0lGCxHazCoYa1K3ZoMZD Rw60IIErUUNg6Rg2ZW683c46mcjNJjZDcyCql2xnS/GZ56G7jWjcKDfk/kAOAtAT k8bhUkDAxcYBL4RCCKcSW+eYbM611Lf9jiPk/3FOUr+lZNsUcs2nZZe09OglFR93 9bLpAP0HhclSgRDKlFtmRmNtoree5k/PicStVTdKoNcvazZrMWnnWgzNZ2Y0NFW3 64EwIuS/2cbPwSTdXc/JbuZxqrRD2BIMwuUNJBX/s//R8lHJXQtrI+82d7Rh5Om/ IeOC/7X8ZPuANtjk+f28JRZOSwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFEs21aMf tkCUgNOVCMIrWKLOC6+dMB8GA1UdIwQYMBaAFBoNC/oZGRH4VbW6vfoDucB/3SKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzgzNC84QkMyRURCMDNB NDExMUVCODNCNTdGMTRDNEY5QUUwMi9HZzBMLWhrWkVmaFZ0YnE5LWdPNXdIX2RJ b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnMEwtaGtaRWZoVnRicTktZ081d0hfZElvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM4MzQvOEJDMkVEQjAzQTQxMTFFQjgzQjU3RjE0QzRGOUFFMDIvRjI2NTA1QTZB N0VBMTFFRjhDQkNDRjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAItQIQDBAJnBEADBAW2oGADBAPKSvADBATLyvAwDQQCAAIw BwMFACQBwAAwDQYJKoZIhvcNAQELBQADggEBADepnieektxQBuYofO2+7NT63g0Z Ceai8XmXkOC27nP771EFOsrOLfwgL+39LmQtEPZVYws6SYhZ/eqHp8LV4VZP820H kLYUkr43/ztJ5ZHs9g4ldm3sJUL/Uw/mi3AqqWz8zqIQbg0xBRGtGGf8NvKC9F2N UvNwTWpyZQmDQ7tAzDTt3/ulmlHmkqDAfD0mykAXLQ30nbxyNdHuFW3QrIcXDt/M GW7lTufHzQsVs7uDsYFrbC6hzWWux49EEdDYLlf0TQHVBsdKA3ghP7rBoToLi3mQ nwjkBULvKDFaVlEh/6stYxWuw5FvxkACRrAVDXH1JcPX9LW1ZfI+MEra8Bo= -----END CERTIFICATE-----Generated at Sun Dec 7 02:43:19 2025 by rpki-client