This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE83F0E6F0E411EAA47C3968C4F9AE02.roa File: CE83F0E6F0E411EAA47C3968C4F9AE02.roa (raw, json) Hash identifier: x4jvJWhYxAH8Rb30vVEH6W/5A0BXB7kNOeLOjXcy3mo= Subject key identifier: 0F:98:C0:73:42:9D:86:2E:FA:32:AD:C0:2D:F0:20:85:C0:66:EE:28 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0E22 Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE83F0E6F0E411EAA47C3968C4F9AE02.roa Signing time: Mon 19 Jan 2026 12:38:21 +0000 ROA not before: Mon 19 Jan 2026 12:38:21 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 9930 IP address blocks: 61.6.0.0/17 maxlen: 17 61.6.128.0/18 maxlen: 18 103.5.236.0/22 maxlen: 22 103.10.160.0/23 maxlen: 23 202.184.0.0/15 maxlen: 19 202.185.12.0/24 maxlen: 24 202.185.181.0/24 maxlen: 24 202.185.188.0/24 maxlen: 24 202.186.0.0/15 maxlen: 15 202.190.0.0/16 maxlen: 16 203.121.0.0/19 maxlen: 19 203.121.32.0/19 maxlen: 24 203.121.64.0/18 maxlen: 24 210.19.0.0/17 maxlen: 17 210.19.13.0/24 maxlen: 24 210.19.14.0/24 maxlen: 24 210.19.19.0/24 maxlen: 24 210.19.37.0/24 maxlen: 24 210.19.41.0/24 maxlen: 24 210.19.86.0/24 maxlen: 24 210.19.128.0/17 maxlen: 17 210.19.128.0/24 maxlen: 24 210.19.179.0/24 maxlen: 24 210.19.218.0/24 maxlen: 24 210.19.243.0/24 maxlen: 24 210.19.244.0/24 maxlen: 24 211.24.0.0/17 maxlen: 17 211.24.36.0/24 maxlen: 24 211.24.128.0/17 maxlen: 24 211.25.0.0/16 maxlen: 16 211.25.32.0/24 maxlen: 24 211.25.33.0/24 maxlen: 24 211.25.46.0/24 maxlen: 24 211.25.55.0/24 maxlen: 24 211.25.61.0/24 maxlen: 24 211.25.62.0/23 maxlen: 23 211.25.64.0/24 maxlen: 24 211.25.76.0/24 maxlen: 24 211.25.80.0/24 maxlen: 24 211.25.81.0/24 maxlen: 24 211.25.82.0/24 maxlen: 24 211.25.95.0/24 maxlen: 24 211.25.111.0/24 maxlen: 24 211.25.133.0/24 maxlen: 24 211.25.161.0/24 maxlen: 24 211.25.163.0/24 maxlen: 24 211.25.178.0/24 maxlen: 24 211.25.209.0/24 maxlen: 24 211.25.215.0/24 maxlen: 24 211.25.225.0/24 maxlen: 24 211.25.232.0/23 maxlen: 23 211.25.232.0/24 maxlen: 24 211.25.235.0/24 maxlen: 24 211.25.237.0/24 maxlen: 24 211.25.239.0/24 maxlen: 24 211.25.240.0/22 maxlen: 22 211.25.244.0/22 maxlen: 22 218.100.18.0/24 maxlen: 24 223.28.0.0/17 maxlen: 17 2001:f40::/32 maxlen: 32 2001:f40:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3618 (0xe22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: Jan 19 12:38:21 2026 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=696e25bd-7472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:0c:1d:d9:e2:7b:65:a9:f1:23:71:b5:6e: d7:c2:ae:96:3b:2f:7a:4e:f8:21:65:0f:ce:b7:6a: 04:5e:67:6e:8e:f3:30:95:33:42:4a:2c:b4:39:d9: 74:66:49:2d:07:fa:0b:97:9e:8c:ad:d0:88:f8:0e: 0a:a7:ea:73:2d:08:d9:1b:9b:12:7e:38:9a:08:39: 08:1a:4d:00:41:69:10:d7:0b:e1:27:14:a8:56:56: b2:e6:e4:aa:32:9d:40:90:6e:79:22:7a:61:a4:e6: e0:5a:b5:14:06:f2:94:2d:64:6a:f2:cb:a7:97:fd: 3d:15:a7:8f:25:e8:a4:7c:da:e3:83:d7:b5:7f:36: 32:bb:37:16:41:0f:72:2f:8d:6b:8e:07:52:96:46: 78:82:e8:3d:cd:25:9a:a3:27:bd:65:f2:bf:4e:3c: 16:2a:06:52:e4:74:56:1a:db:4d:6b:a4:b2:70:24: 3c:31:dc:f3:4c:98:8b:52:ba:0b:ca:18:b4:7f:ef: 89:d7:42:9a:0d:7e:28:d7:41:26:93:a4:a7:eb:54: f8:44:43:c5:82:bc:03:38:b0:66:e9:5b:a9:0f:c8: 0b:12:8e:6b:bd:49:4a:26:2d:d0:7a:aa:86:03:9a: 6b:63:2f:a9:d1:fd:c8:31:59:87:8a:68:7f:f7:63: 5d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:98:C0:73:42:9D:86:2E:FA:32:AD:C0:2D:F0:20:85:C0:66:EE:28 X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE83F0E6F0E411EAA47C3968C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.6.0.0-61.6.191.255 103.5.236.0/22 103.10.160.0/23 202.184.0.0/14 202.190.0.0/16 203.121.0.0/17 210.19.0.0/16 211.24.0.0/15 218.100.18.0/24 223.28.0.0/17 IPv6: 2001:f40::/32 Signature Algorithm: sha256WithRSAEncryption 47:60:92:9b:4a:87:d6:ac:27:a8:9d:6f:86:1f:7d:51:64:24: 75:18:da:8e:20:89:10:75:cc:f5:1c:26:7b:3e:e9:fc:90:04: 66:5c:9e:88:20:97:37:b5:01:96:80:ec:e5:a4:a5:c8:f4:62: 57:5d:85:4c:b8:0b:bc:27:44:9a:77:4f:f3:ac:8f:89:91:46: c9:75:8c:43:91:a6:76:88:28:01:c6:8c:04:88:d2:bb:c9:1a: 01:c3:b1:cc:ec:77:a6:f0:7b:4c:dc:71:72:87:ed:7a:96:e5: c2:a4:d8:c2:b0:55:18:49:bc:9f:79:e9:52:4c:7a:40:37:65: 3b:c9:67:62:00:88:b3:ed:31:13:0b:b9:3e:3d:80:f4:1c:cb: 5e:fe:52:31:bf:30:5e:69:bc:ed:18:4b:15:c6:c4:a4:ba:33: 0d:55:99:3c:2e:7a:f6:a9:9f:53:73:6b:8a:c4:c1:ae:c8:59: 82:21:3c:b6:27:71:e0:ad:af:60:b8:19:95:05:47:5e:7c:2d: bd:62:26:29:ea:1b:75:54:e8:ab:25:1a:48:7d:c3:f0:e1:f5: 21:ab:71:4e:92:29:15:dc:3d:b1:58:04:59:09:3b:34:a8:ae: 39:9e:f5:90:fd:3f:fd:b5:38:45:bd:f3:1f:fc:d3:98:75:e6: 22:ee:70:b1 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgICDiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjYwMTE5MTIzODIxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTZlMjViZC03NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfoMHdnie2Wp8SNxtW7Xwq6WOy96TvghZQ/Ot2oEXmdujvMwlTNCSiy0Odl0 ZkktB/oLl56MrdCI+A4Kp+pzLQjZG5sSfjiaCDkIGk0AQWkQ1wvhJxSoVlay5uSq Mp1AkG55InphpObgWrUUBvKULWRq8sunl/09FaePJeikfNrjg9e1fzYyuzcWQQ9y L41rjgdSlkZ4gug9zSWaoye9ZfK/TjwWKgZS5HRWGttNa6SycCQ8MdzzTJiLUroL yhi0f++J10KaDX4o10Emk6Sn61T4REPFgrwDOLBm6VupD8gLEo5rvUlKJi3QeqqG A5prYy+p0f3IMVmHimh/92Nd7wIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFA+YwHNC nYYu+jKtwC3wIIXAZu4oMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdCQzQvMkQxQTU5NUFENTBEMTFFOUJBRDZDMjI2QzRGOUFFMDIvQ0U4M0YwRTZG MEU0MTFFQUE0N0MzOTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZwYIKwYBBQUHAQcBAf8E WDBWMEUEAgABMD8wCwMDAT0GAwQGPQaAAwQCZwXsAwQBZwqgAwMCyrgDAwDKvgME B8t5AAMDANITAwMB0xgDBADaZBIDBAffHAAwDQQCAAIwBwMFACABD0AwDQYJKoZI hvcNAQELBQADggEBAEdgkptKh9asJ6idb4YffVFkJHUY2o4giRB1zPUcJns+6fyQ BGZcnogglze1AZaA7OWkpcj0YlddhUy4C7wnRJp3T/Osj4mRRsl1jEORpnaIKAHG jASI0rvJGgHDsczsd6bwe0zccXKH7XqW5cKk2MKwVRhJvJ956VJMekA3ZTvJZ2IA iLPtMRMLuT49gPQcy17+UjG/MF5pvO0YSxXGxKS6Mw1VmTwuevapn1Nza4rEwa7I WYIhPLYnceCtr2C4GZUFR158Lb1iJinqG3VU6KslGkh9w/Dh9SGrcU6SKRXcPbFY BFkJOzSorjme9ZD9P/21OEW98x/805h15iLucLE= -----END CERTIFICATE-----Generated at Sun Jan 25 06:16:31 2026 by rpki-client