This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/65DFCD4A884D11EE8423C486C4F9AE02.roa File: 65DFCD4A884D11EE8423C486C4F9AE02.roa (raw, json) Hash identifier: B5qPcRiAPVySXtIwaHqDbWpuZoMlGmhplKL4rpUX3FY= Subject key identifier: 95:DE:29:9E:E2:78:99:66:82:FE:37:E6:FB:25:43:4E:56:7C:F7:D6 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 05EA Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/65DFCD4A884D11EE8423C486C4F9AE02.roa Signing time: Sat 22 Nov 2025 22:14:54 +0000 ROA not before: Sat 22 Nov 2025 22:14:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 23888 IP address blocks: 43.250.84.0/22 maxlen: 22 43.250.84.0/24 maxlen: 24 43.250.85.0/24 maxlen: 24 43.250.86.0/24 maxlen: 24 43.250.87.0/24 maxlen: 24 103.253.156.0/22 maxlen: 22 103.253.156.0/24 maxlen: 24 103.253.157.0/24 maxlen: 24 103.253.158.0/24 maxlen: 24 103.253.159.0/24 maxlen: 24 113.197.48.0/22 maxlen: 22 113.197.48.0/24 maxlen: 24 113.197.49.0/24 maxlen: 24 113.197.50.0/23 maxlen: 23 113.197.52.0/23 maxlen: 23 113.197.54.0/24 maxlen: 24 113.197.55.0/24 maxlen: 24 175.107.0.0/20 maxlen: 20 175.107.0.0/22 maxlen: 23 175.107.4.0/22 maxlen: 22 175.107.5.0/24 maxlen: 24 175.107.7.0/24 maxlen: 24 175.107.8.0/24 maxlen: 24 175.107.9.0/24 maxlen: 24 175.107.10.0/24 maxlen: 24 175.107.11.0/24 maxlen: 24 175.107.12.0/24 maxlen: 24 175.107.13.0/24 maxlen: 24 175.107.14.0/24 maxlen: 24 175.107.15.0/24 maxlen: 24 175.107.16.0/20 maxlen: 20 175.107.16.0/24 maxlen: 24 175.107.17.0/24 maxlen: 24 175.107.18.0/24 maxlen: 24 175.107.19.0/24 maxlen: 24 175.107.20.0/24 maxlen: 24 175.107.21.0/24 maxlen: 24 175.107.22.0/23 maxlen: 23 175.107.24.0/21 maxlen: 21 175.107.24.0/24 maxlen: 24 175.107.25.0/24 maxlen: 24 175.107.26.0/23 maxlen: 24 175.107.28.0/22 maxlen: 24 175.107.32.0/20 maxlen: 20 175.107.32.0/24 maxlen: 24 175.107.33.0/24 maxlen: 24 175.107.35.0/24 maxlen: 24 175.107.36.0/22 maxlen: 22 175.107.40.0/22 maxlen: 22 175.107.44.0/22 maxlen: 22 175.107.48.0/20 maxlen: 20 175.107.48.0/24 maxlen: 24 175.107.49.0/24 maxlen: 24 175.107.50.0/24 maxlen: 24 175.107.51.0/24 maxlen: 24 175.107.52.0/24 maxlen: 24 175.107.53.0/24 maxlen: 24 175.107.54.0/24 maxlen: 24 175.107.55.0/24 maxlen: 24 175.107.56.0/24 maxlen: 24 175.107.57.0/24 maxlen: 24 175.107.58.0/24 maxlen: 24 175.107.59.0/24 maxlen: 24 175.107.60.0/24 maxlen: 24 175.107.61.0/24 maxlen: 24 175.107.62.0/24 maxlen: 24 175.107.63.0/24 maxlen: 24 202.83.160.0/20 maxlen: 20 202.83.160.0/22 maxlen: 22 202.83.160.0/24 maxlen: 24 202.83.161.0/24 maxlen: 24 202.83.162.0/24 maxlen: 24 202.83.163.0/24 maxlen: 24 202.83.164.0/24 maxlen: 24 202.83.165.0/24 maxlen: 24 202.83.166.0/24 maxlen: 24 202.83.167.0/24 maxlen: 24 202.83.168.0/24 maxlen: 24 202.83.169.0/24 maxlen: 24 202.83.170.0/24 maxlen: 24 202.83.171.0/24 maxlen: 24 202.83.172.0/24 maxlen: 24 202.83.173.0/24 maxlen: 24 202.83.174.0/24 maxlen: 24 202.83.175.0/24 maxlen: 24 2407:9e00::/48 maxlen: 48 2407:9e00:1::/48 maxlen: 48 2407:9e00:2::/48 maxlen: 48 2407:9e00:3::/48 maxlen: 48 2407:9e00:4::/48 maxlen: 48 2407:9e00:5::/48 maxlen: 48 2407:9e00:6::/48 maxlen: 48 2407:9e00:7::/48 maxlen: 48 2407:9e00:10::/48 maxlen: 48 2407:9e00:11::/48 maxlen: 48 2407:9e00:12::/48 maxlen: 48 2407:9e00:13::/48 maxlen: 48 2407:9e00:14::/48 maxlen: 48 2407:9e00:15::/48 maxlen: 48 2407:9e00:20::/48 maxlen: 48 2407:9e00:21::/48 maxlen: 48 2407:9e00:22::/48 maxlen: 48 2407:9e00:23::/48 maxlen: 48 2407:9e00:24::/48 maxlen: 48 2407:9e00:25::/48 maxlen: 48 2407:9e00:30::/48 maxlen: 48 2407:9e00:31::/48 maxlen: 48 2407:9e00:32::/48 maxlen: 48 2407:9e00:33::/48 maxlen: 48 2407:9e00:35::/48 maxlen: 48 2407:9e00:40::/48 maxlen: 48 2407:9e00:41::/48 maxlen: 48 2407:9e00:42::/48 maxlen: 48 2407:9e00:43::/48 maxlen: 48 2407:9e00:44::/48 maxlen: 48 2407:9e00:50::/48 maxlen: 48 2407:9e00:51::/48 maxlen: 48 2407:9e00:52::/48 maxlen: 48 2407:9e00:53::/48 maxlen: 48 2407:9e00:60::/48 maxlen: 48 2407:9e00:61::/48 maxlen: 48 2407:9e00:62::/48 maxlen: 48 2407:9e00:70::/48 maxlen: 48 2407:9e00:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: Nov 22 22:14:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=692235de-05b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:e9:ca:9a:aa:45:a0:6f:55:4f:7c:66:17: 62:47:52:fb:00:e0:50:8b:25:23:f3:63:71:2b:b6: 9f:26:ef:e4:1b:3b:da:12:f9:ff:f5:30:8e:09:b4: a1:ae:ee:7b:79:e4:c0:f6:2a:f3:12:18:9c:bd:42: 6d:e8:77:c5:a3:8b:71:2d:76:a5:be:ca:f1:89:b7: ba:de:35:45:9e:18:8e:dc:c3:b0:d1:0d:3c:33:4d: b8:39:bd:31:a1:51:d3:7b:00:b4:70:4b:6c:12:3b: 3f:df:76:4f:07:d6:9f:5c:9b:7e:1c:af:7a:04:45: aa:9d:05:82:c7:09:82:f2:63:1d:ce:ac:23:f6:a0: 4b:2d:cf:f7:b0:c1:54:15:ca:83:62:3e:6c:f9:97: 50:b8:be:68:65:8b:69:f9:8e:58:5f:38:af:1a:ff: 29:35:11:e8:e8:57:e7:f1:b4:8e:b5:a0:91:a9:93: bf:dc:0d:a3:48:d3:8d:e6:78:ca:ac:41:9e:97:c0: a6:80:61:ec:14:61:82:e8:04:82:7f:f3:df:24:e5: a6:e8:46:8f:7a:28:48:e5:bc:ba:66:ec:6b:bd:14: a6:7b:89:c3:99:5d:ad:e3:0a:a6:bd:c0:b5:04:04: bd:e0:18:fc:a7:9f:d9:d1:d9:9e:23:46:0b:7b:60: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DE:29:9E:E2:78:99:66:82:FE:37:E6:FB:25:43:4E:56:7C:F7:D6 X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/65DFCD4A884D11EE8423C486C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.84.0/22 103.253.156.0/22 113.197.48.0/21 175.107.0.0/18 202.83.160.0/20 IPv6: 2407:9e00::/45 2407:9e00:10::-2407:9e00:15:ffff:ffff:ffff:ffff:ffff 2407:9e00:20::-2407:9e00:25:ffff:ffff:ffff:ffff:ffff 2407:9e00:30::/46 2407:9e00:35::/48 2407:9e00:40::-2407:9e00:44:ffff:ffff:ffff:ffff:ffff 2407:9e00:50::/46 2407:9e00:60::-2407:9e00:62:ffff:ffff:ffff:ffff:ffff 2407:9e00:70::/47 Signature Algorithm: sha256WithRSAEncryption 68:6b:c9:e8:dc:5b:5d:5d:46:d8:dd:9f:eb:0e:73:c3:fa:2b: b6:3d:6c:06:60:04:7c:95:36:8a:3b:a3:e4:8d:32:40:1f:17: ca:99:c6:cd:32:70:ad:44:d0:23:d3:9a:44:b2:ed:23:63:0a: b3:ec:0b:cf:8c:0c:83:32:87:b2:99:6b:ea:2c:a1:cc:85:25: 33:9e:c9:33:59:48:d2:f0:f8:06:6d:c4:bc:04:8b:3c:b6:6c: be:28:8f:fe:ea:8c:4d:ed:21:08:af:dc:ff:c9:63:54:65:78: b7:9e:8a:c8:5a:74:ff:26:b2:5f:88:3a:c4:d9:65:50:51:44: 42:a7:0b:5d:35:0d:5b:ac:d2:d1:58:d5:83:50:36:6c:26:4c: 97:c5:5c:bc:5b:81:3e:b0:c0:04:ac:84:45:0b:04:aa:51:34: c1:9d:a8:9f:e3:e5:51:84:1d:d2:3b:76:9e:fa:21:18:2e:2d: ab:b1:8a:18:8b:c5:9f:6f:8a:ad:6d:d9:21:1e:eb:9f:5c:cf: 6f:34:54:9f:9f:c8:b7:60:00:44:10:45:77:81:e4:b4:b9:a0: 4f:fc:f8:fc:86:dc:d8:f6:e1:a7:a0:9d:5f:58:8e:2a:06:e4: 72:7c:8c:3a:4d:66:e9:17:0e:19:d6:64:84:59:46:95:10:f6: 5c:c2:40:6b -----BEGIN CERTIFICATE----- MIIGEjCCBPqgAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjUxMTIyMjIxNDU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTIyMzVkZS0wNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVHpypqqRaBvVU98ZhdiR1L7AOBQiyUj82NxK7afJu/kGzvaEvn/9TCOCbSh ru57eeTA9irzEhicvUJt6HfFo4txLXalvsrxibe63jVFnhiO3MOw0Q08M024Ob0x oVHTewC0cEtsEjs/33ZPB9afXJt+HK96BEWqnQWCxwmC8mMdzqwj9qBLLc/3sMFU FcqDYj5s+ZdQuL5oZYtp+Y5YXzivGv8pNRHo6Ffn8bSOtaCRqZO/3A2jSNON5njK rEGel8CmgGHsFGGC6ASCf/PfJOWm6EaPeihI5by6ZuxrvRSme4nDmV2t4wqmvcC1 BAS94Bj8p5/Z0dmeI0YLe2Al9QIDAQABo4IDNjCCAzIwHQYDVR0OBBYEFJXeKZ7i eJlmgv435vslQ05WfPfWMB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE3QjEvNjZFNEU0RjZGQjQwMTFFQkJBQjBEQTNCQzRGOUFFMDIvNjVERkNENEE4 ODREMTFFRTg0MjNDNDg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgb8GCCsGAQUFBwEHAQH/ BIGvMIGsMCQEAgABMB4DBAIr+lQDBAJn/ZwDBANxxTADBAavawADBATKU6AwgYME AgACMH0DBwMkB54AAAAwEgMHBCQHngAAEAMHASQHngAAFDASAwcFJAeeAAAgAwcB JAeeAAAkAwcCJAeeAAAwAwcAJAeeAAA1MBIDBwYkB54AAEADBwAkB54AAEQDBwIk B54AAFAwEgMHBSQHngAAYAMHACQHngAAYgMHASQHngAAcDANBgkqhkiG9w0BAQsF AAOCAQEAaGvJ6NxbXV1G2N2f6w5zw/ortj1sBmAEfJU2ijuj5I0yQB8XypnGzTJw rUTQI9OaRLLtI2MKs+wLz4wMgzKHsplr6iyhzIUlM57JM1lI0vD4Bm3EvASLPLZs viiP/uqMTe0hCK/c/8ljVGV4t56KyFp0/yayX4g6xNllUFFEQqcLXTUNW6zS0VjV g1A2bCZMl8VcvFuBPrDABKyERQsEqlE0wZ2on+PlUYQd0jt2nvohGC4tq7GKGIvF n2+KrW3ZIR7rn1zPbzRUn5/It2AARBBFd4HktLmgT/z4/Ibc2Pbhp6CdX1iOKgbk cnyMOk1m6RcOGdZkhFlGlRD2XMJAaw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:51 2025 by rpki-client