This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/756C3370F38611EFBF7CEF35C4F9AE02.roa File: 756C3370F38611EFBF7CEF35C4F9AE02.roa (raw, json) Hash identifier: 9YIvpIUEJ5GymXkyjbzDo/Gn/s3vIq/6pfm6VH9JAlo= Subject key identifier: 66:5F:FD:BD:D7:C7:A6:D4:EF:41:9E:20:4D:A8:63:B4:D2:E3:36:F1 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 228D Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/756C3370F38611EFBF7CEF35C4F9AE02.roa Signing time: Thu 06 Nov 2025 04:14:28 +0000 ROA not before: Thu 06 Nov 2025 04:14:28 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134712 IP address blocks: 103.158.4.0/23 maxlen: 24 220.158.204.0/22 maxlen: 22 220.158.204.0/24 maxlen: 24 220.158.205.0/24 maxlen: 24 220.158.206.0/24 maxlen: 24 220.158.207.0/24 maxlen: 24 2405:d340::/32 maxlen: 32 2405:d340::/48 maxlen: 48 2405:d340:1::/48 maxlen: 48 2405:d340:2::/48 maxlen: 48 2405:d340:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8845 (0x228d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Nov 6 04:14:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690c20a4-c7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:90:7c:cf:bd:8a:02:9f:21:8f:09:df:cb: e8:74:9f:a7:3c:be:b3:3f:96:d2:43:f2:6c:79:00: 2a:b2:95:90:32:f3:3c:42:4a:6f:ba:ec:ec:3d:9b: 03:db:8c:e2:59:dc:2f:a8:3c:66:9b:39:a8:5c:8c: b4:f6:65:84:1a:03:7f:10:0c:ad:c9:e5:0e:d0:fc: ba:b9:b3:fe:9c:ba:46:ae:5e:48:9b:c0:46:fd:e0: 27:16:af:20:da:60:df:b7:48:f0:f8:e5:59:9c:e2: 27:d4:0e:34:3a:9c:3a:6a:d5:b1:2f:a1:e9:3a:32: 92:e1:75:0a:28:0e:c7:13:88:fd:ea:e0:9e:57:88: c0:a7:0c:ae:97:14:d7:df:17:ae:2d:d4:bb:67:90: 80:6f:4f:c5:18:c0:6d:0d:41:b6:e5:d1:51:2c:12: 78:99:61:b3:7d:4e:80:9e:c3:ab:12:ec:4f:a2:62: 59:85:3f:3f:32:76:34:e7:d3:ff:f3:1c:59:7d:bf: 8c:da:cd:df:b1:a7:79:52:ca:ba:da:73:3e:85:3c: 1a:b9:59:52:4a:0d:f5:48:43:3d:03:26:f6:61:1e: 41:f9:1f:68:d1:b1:35:ec:14:d5:21:5c:72:06:9c: 89:e0:50:63:ab:a6:31:64:a9:58:f2:98:f5:7c:74: b8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5F:FD:BD:D7:C7:A6:D4:EF:41:9E:20:4D:A8:63:B4:D2:E3:36:F1 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/756C3370F38611EFBF7CEF35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.4.0/23 220.158.204.0/22 IPv6: 2405:d340::/32 Signature Algorithm: sha256WithRSAEncryption 7d:4a:96:a9:b7:4c:b4:04:54:9d:f3:3c:7c:a3:9c:d4:7e:1f: ba:27:45:1f:b1:39:e4:0b:17:a7:63:e4:01:6a:61:db:e0:a9: f2:aa:8e:ab:f9:61:c8:60:da:09:12:d2:a0:21:6e:c9:eb:2c: be:80:af:56:ca:ce:1f:c4:1b:05:52:ba:78:33:68:56:c8:d3: af:b2:1d:33:54:f8:01:09:5a:d5:73:d4:30:ee:8b:ba:74:99: 82:59:b1:7d:3d:83:07:91:a9:aa:e5:f8:6b:cc:d6:f2:97:f3: 90:7c:ca:9d:5a:c7:6d:64:ee:dc:f9:b5:d8:ef:ea:40:e3:37: 3b:c9:9f:aa:1b:ff:17:d8:6c:bc:65:de:e4:78:27:5a:16:14: 53:80:b9:bc:19:3b:33:2d:b2:9c:f1:64:14:5c:d2:be:93:ce: 02:33:62:4b:38:d5:ae:4d:1e:11:80:3d:28:7a:24:da:a3:c2: ad:6e:e8:a7:d2:59:cb:fd:34:36:06:bb:9b:f8:a5:66:75:f9: b0:5e:08:7b:5a:17:ca:0f:7b:01:02:62:0a:3e:da:25:67:55: 59:c2:aa:3b:a1:6a:06:4a:0b:cb:cb:82:6a:1e:b4:27:c5:b2: 4c:28:2d:e2:66:06:a8:5a:05:ce:72:07:d0:a6:57:94:0e:a8: b7:ec:71:24 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICIo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUxMTA2MDQxNDI4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBjMjBhNC1jN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFGQfM+9igKfIY8J38vodJ+nPL6zP5bSQ/JseQAqspWQMvM8QkpvuuzsPZsD 24ziWdwvqDxmmzmoXIy09mWEGgN/EAytyeUO0Py6ubP+nLpGrl5Im8BG/eAnFq8g 2mDft0jw+OVZnOIn1A40Opw6atWxL6HpOjKS4XUKKA7HE4j96uCeV4jApwyulxTX 3xeuLdS7Z5CAb0/FGMBtDUG25dFRLBJ4mWGzfU6AnsOrEuxPomJZhT8/MnY059P/ 8xxZfb+M2s3fsad5Usq62nM+hTwauVlSSg31SEM9Ayb2YR5B+R9o0bE17BTVIVxy BpyJ4FBjq6YxZKlY8pj1fHS4/wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGZf/b3X x6bU70GeIE2oY7TS4zbxMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvNzU2QzMzNzBG Mzg2MTFFRkJGN0NFRjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnngQDBALcnswwDQQCAAIwBwMFACQF00AwDQYJKoZIhvcN AQELBQADggEBAH1Klqm3TLQEVJ3zPHyjnNR+H7onRR+xOeQLF6dj5AFqYdvgqfKq jqv5Ychg2gkS0qAhbsnrLL6Ar1bKzh/EGwVSungzaFbI06+yHTNU+AEJWtVz1DDu i7p0mYJZsX09gweRqarl+GvM1vKX85B8yp1ax21k7tz5tdjv6kDjNzvJn6ob/xfY bLxl3uR4J1oWFFOAubwZOzMtspzxZBRc0r6TzgIzYks41a5NHhGAPSh6JNqjwq1u 6KfSWcv9NDYGu5v4pWZ1+bBeCHtaF8oPewECYgo+2iVnVVnCqjuhagZKC8vLgmoe tCfFskwoLeJmBqhaBc5yB9CmV5QOqLfscSQ= -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:35 2025 by rpki-client