This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa
File: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (raw, json)
Hash identifier: ahURvf3WgTOlPvJ2Yvz5ikj2GmylBcCLMIT4Gjnelzo=
Subject key identifier: 87:A8:D0:FE:B6:90:58:66:07:BF:04:F6:2E:3D:7F:9C:C3:5B:A4:2A
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 07AE
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa
Signing time: Thu 13 Nov 2025 14:31:45 +0000
ROA not before: Thu 13 Nov 2025 14:31:45 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 19551
IP address blocks: 166.81.2.0/24 maxlen: 24
166.81.5.0/24 maxlen: 24
166.81.6.0/24 maxlen: 24
166.81.32.0/24 maxlen: 24
166.81.33.0/24 maxlen: 24
166.81.34.0/24 maxlen: 24
166.81.38.0/24 maxlen: 24
166.81.39.0/24 maxlen: 24
166.81.40.0/24 maxlen: 24
166.81.51.0/24 maxlen: 24
166.81.52.0/24 maxlen: 24
166.81.53.0/24 maxlen: 24
166.81.54.0/24 maxlen: 24
166.81.56.0/24 maxlen: 24
166.81.57.0/24 maxlen: 24
166.81.61.0/24 maxlen: 24
166.81.62.0/24 maxlen: 24
166.81.63.0/24 maxlen: 24
166.81.81.0/24 maxlen: 24
166.81.83.0/24 maxlen: 24
166.81.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Nov 13 14:31:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6915ebd1-c750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:00:5f:15:a9:de:c9:d2:f5:ae:f3:fd:c2:
fa:73:27:06:9d:a9:df:f6:b7:c6:df:ba:7a:59:b9:
90:a9:6b:03:1c:58:e2:7e:b1:91:c0:28:96:1c:88:
aa:7f:18:79:b8:be:ca:7b:4e:2e:04:f6:9a:8b:e5:
54:cc:57:3a:c9:0e:fe:12:44:42:e5:c5:d2:e6:89:
fb:63:0f:a9:2a:d4:79:2a:7c:a2:2c:8f:20:0b:5a:
69:8a:b1:4b:8e:24:c4:ce:15:02:7d:54:2b:1b:a3:
23:05:64:96:9b:cb:76:4b:1d:ff:5b:ee:28:05:de:
81:8e:8d:bd:15:99:25:23:7d:08:34:bc:93:f0:30:
7f:f0:8c:5b:d5:c6:ac:ba:d5:f5:6d:0a:14:a4:37:
34:81:c5:58:71:f7:01:55:2f:ae:da:61:f1:90:ca:
28:bc:7d:a2:0f:d4:52:ba:e8:55:97:e8:72:e4:1c:
6e:d1:06:7b:e9:a5:42:d0:8f:93:f0:fb:b8:1d:f5:
59:a0:b5:65:ff:6f:02:a5:e0:3b:21:5b:71:18:92:
c4:5e:20:f9:fc:35:fa:e2:00:75:44:87:f6:88:62:
ac:f1:16:fb:02:20:33:c5:18:59:88:40:9f:d6:07:
5c:6b:ea:8d:39:07:89:b7:22:b0:04:d2:0f:4f:dc:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A8:D0:FE:B6:90:58:66:07:BF:04:F6:2E:3D:7F:9C:C3:5B:A4:2A
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.81.2.0/24
166.81.5.0-166.81.6.255
166.81.32.0-166.81.34.255
166.81.38.0-166.81.40.255
166.81.51.0-166.81.54.255
166.81.56.0/23
166.81.61.0-166.81.63.255
166.81.81.0/24
166.81.83.0-166.81.84.255
Signature Algorithm: sha256WithRSAEncryption
44:f9:c8:9c:ac:a4:58:33:96:a0:21:5b:7f:21:ba:b7:b1:15:
77:d8:e7:1b:a7:b3:2f:e1:45:69:03:93:59:9f:e7:7e:db:4f:
88:88:5f:1e:80:a0:68:71:a7:0b:80:85:38:3b:fa:82:07:4e:
eb:dc:57:3d:7d:20:3c:8f:53:62:13:0d:bc:a4:f2:34:b0:42:
2d:e3:03:75:57:36:14:7d:8e:f1:44:98:02:ff:4c:ea:97:66:
bb:56:c7:53:20:24:7e:96:a6:a8:03:64:57:3c:4c:e9:bd:29:
43:d2:99:d4:bb:d4:5b:11:cc:c4:36:4d:59:dc:24:b7:9a:d5:
ec:34:89:7a:b9:da:c2:18:27:05:9f:b2:9d:2e:a1:51:e4:59:
b4:22:23:97:cf:33:1a:c9:47:db:c2:84:ab:f0:a4:91:a2:7a:
90:9e:5e:47:29:6d:ad:e0:65:7d:36:a5:a5:bb:9d:f6:01:2e:
eb:01:b4:3c:72:8a:81:6e:7c:80:18:3c:0c:47:22:9a:77:d2:
52:18:b2:e7:b4:6f:c9:83:f8:54:7f:68:31:52:2c:04:fb:6f:
a0:2f:0f:91:15:2b:64:90:bc:6d:b8:b9:a9:3c:bf:d4:76:82:
45:93:8c:d7:de:74:31:0c:70:e4:7f:25:0f:5a:41:73:7c:4f:
97:13:e0:ab
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjUxMTEzMTQzMTQ1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTE1ZWJkMS1jNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqJwAXxWp3snS9a7z/cL6cycGnanf9rfG37p6WbmQqWsDHFjifrGRwCiWHIiq
fxh5uL7Ke04uBPaai+VUzFc6yQ7+EkRC5cXS5on7Yw+pKtR5KnyiLI8gC1ppirFL
jiTEzhUCfVQrG6MjBWSWm8t2Sx3/W+4oBd6Bjo29FZklI30INLyT8DB/8Ixb1cas
utX1bQoUpDc0gcVYcfcBVS+u2mHxkMoovH2iD9RSuuhVl+hy5Bxu0QZ76aVC0I+T
8Pu4HfVZoLVl/28CpeA7IVtxGJLEXiD5/DX64gB1RIf2iGKs8Rb7AiAzxRhZiECf
1gdca+qNOQeJtyKwBNIPT9yZHwIDAQABo4IC9TCCAvEwHQYDVR0OBBYEFIeo0P62
kFhmB78E9i49f5zDW6QqMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvMkFFQ0E1ODQ5
NEVFMTFFRTg0RjlENzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwfwYIKwYBBQUHAQcBAf8E
cDBuMGwEAgABMGYDBACmUQIwDAMEAKZRBQMEAKZRBjAMAwQFplEgAwQAplEiMAwD
BAGmUSYDBACmUSgwDAMEAKZRMwMEAKZRNgMEAaZRODAMAwQAplE9AwQGplEAAwQA
plFRMAwDBACmUVMDBACmUVQwDQYJKoZIhvcNAQELBQADggEBAET5yJyspFgzlqAh
W38hurexFXfY5xunsy/hRWkDk1mf537bT4iIXx6AoGhxpwuAhTg7+oIHTuvcVz19
IDyPU2ITDbyk8jSwQi3jA3VXNhR9jvFEmAL/TOqXZrtWx1MgJH6WpqgDZFc8TOm9
KUPSmdS71FsRzMQ2TVncJLea1ew0iXq52sIYJwWfsp0uoVHkWbQiI5fPMxrJR9vC
hKvwpJGiepCeXkcpba3gZX02paW7nfYBLusBtDxyioFufIAYPAxHIpp30lIYsue0
b8mD+FR/aDFSLAT7b6AvD5EVK2SQvG24uak8v9R2gkWTjNfedDEMcOR/JQ9aQXN8
T5cT4Ks=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:21:35 2025 by rpki-client