This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/5488F6EA0F1A11E9B3F2A713C4F9AE02.roa File: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (raw, json) Hash identifier: I1Ooxb/QxZtnwvTSGkb227BhEGDqKjHAGb9PCGADRjg= Subject key identifier: 9F:8B:F6:92:F9:9E:E5:98:BB:0D:9C:5A:05:BC:3A:01:D7:05:14:D7 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 11A5 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/5488F6EA0F1A11E9B3F2A713C4F9AE02.roa Signing time: Tue 18 Nov 2025 17:06:19 +0000 ROA not before: Tue 18 Nov 2025 17:06:19 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133136 IP address blocks: 66.96.219.0/24 maxlen: 24 66.96.220.0/24 maxlen: 24 66.96.221.0/24 maxlen: 24 66.96.223.0/24 maxlen: 24 158.140.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4517 (0x11a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Nov 18 17:06:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691ca78b-d4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:f7:09:62:9e:fe:a9:c8:87:2b:c2:6c:a3: 89:a1:33:18:ec:ff:8b:4e:22:4f:ec:a7:5a:b9:56: 9b:13:8d:18:92:c8:fa:a0:85:cd:06:27:14:b2:83: c4:a5:97:04:19:2f:bf:79:af:7f:5e:83:c0:54:a0: 1b:cc:6a:ab:62:13:25:92:70:eb:2e:c1:2a:8b:e4: b9:1d:83:b9:cf:ff:bb:16:da:f5:59:b2:7f:15:bd: 6b:87:30:43:2b:fa:b7:40:a0:00:9b:22:86:61:93: fb:62:a9:b4:cb:71:6b:c2:cc:8a:60:00:e6:e7:20: 04:16:7c:92:1b:e3:1b:e5:8f:53:0a:9d:cb:c1:58: 0f:ea:1e:f4:c3:76:58:10:b3:cc:d1:eb:92:81:70: ed:98:c7:a4:a6:27:c1:04:22:4b:94:4a:18:b6:a6: a9:4c:1d:fa:0c:de:28:45:c0:6f:89:c9:03:c2:e6: 98:ba:2a:dd:d3:9b:4f:7d:17:19:c5:9b:b6:d7:ae: d0:19:f0:31:8e:57:d2:98:b1:a3:b5:b0:34:de:e3: a3:bd:56:49:f9:81:e7:8d:5f:5a:69:bc:b9:5e:2c: 50:b7:fd:c7:bf:0c:ea:6a:f5:e7:10:de:fb:80:90: 19:fa:31:97:c5:0e:67:55:80:6a:f6:05:6c:90:d7: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8B:F6:92:F9:9E:E5:98:BB:0D:9C:5A:05:BC:3A:01:D7:05:14:D7 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/5488F6EA0F1A11E9B3F2A713C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 66.96.219.0-66.96.221.255 66.96.223.0/24 158.140.151.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:26:4e:42:33:65:db:0c:46:a9:9c:f5:89:eb:17:18:18:b9: e3:fa:f6:61:59:77:62:1d:68:e8:72:03:5c:7d:44:22:7b:10: dd:92:da:8d:fb:c2:6b:6e:c5:15:82:a9:22:7e:5e:42:e6:d6: 89:e2:93:cc:b2:95:a1:96:33:ab:f9:6a:65:fa:c3:70:1a:72: 3d:19:32:2a:cb:f9:bb:c8:e1:e0:30:cb:4c:ec:37:fe:5b:4a: 76:fc:22:12:1b:6b:29:62:09:db:ce:3b:6f:6b:dc:59:1d:18: 52:15:57:cb:a5:47:46:d2:4c:25:1e:f3:cb:49:96:c9:17:ab: 91:48:5a:a0:60:be:23:93:77:f7:bc:70:fc:54:7d:3d:c7:41: be:94:d1:e5:24:95:dd:c4:28:d3:e3:c0:88:e7:76:13:62:4f: de:c0:01:a9:6c:3a:78:9f:ac:fd:04:b7:da:49:e2:cb:c2:d3: 2b:64:ba:f1:47:08:2f:f9:8c:b4:6c:8e:21:9c:4b:7d:f7:98: 76:d5:fe:54:d8:53:d9:99:3f:5b:e5:49:7c:bb:f0:e6:ad:18: 08:ff:9d:3d:d8:9f:5a:ce:76:a3:6f:18:5c:97:f7:7a:63:87: 47:e7:9f:0b:14:28:63:92:5c:15:1a:08:01:0a:a1:f1:a0:b2: 79:1f:d1:71 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICEaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjUxMTE4MTcwNjE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFjYTc4Yi1kNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT/3CWKe/qnIhyvCbKOJoTMY7P+LTiJP7KdauVabE40Yksj6oIXNBicUsoPE pZcEGS+/ea9/XoPAVKAbzGqrYhMlknDrLsEqi+S5HYO5z/+7Ftr1WbJ/Fb1rhzBD K/q3QKAAmyKGYZP7Yqm0y3FrwsyKYADm5yAEFnySG+Mb5Y9TCp3LwVgP6h70w3ZY ELPM0euSgXDtmMekpifBBCJLlEoYtqapTB36DN4oRcBvickDwuaYuird05tPfRcZ xZu2167QGfAxjlfSmLGjtbA03uOjvVZJ+YHnjV9aaby5XixQt/3HvwzqavXnEN77 gJAZ+jGXxQ5nVYBq9gVskNed3wIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFJ+L9pL5 nuWYuw2cWgW8OgHXBRTXMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY3QkIvQkRGQkYxODYwRTNFMTFFOTgzNkY0MDE0QzRGOUFFMDIvNTQ4OEY2RUEw RjFBMTFFOUIzRjJBNzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAEJg2wMEAUJg3AMEAEJg3wMEAJ6MlzANBgkqhkiG9w0B AQsFAAOCAQEADCZOQjNl2wxGqZz1iesXGBi54/r2YVl3Yh1o6HIDXH1EInsQ3ZLa jfvCa27FFYKpIn5eQubWieKTzLKVoZYzq/lqZfrDcBpyPRkyKsv5u8jh4DDLTOw3 /ltKdvwiEhtrKWIJ2847b2vcWR0YUhVXy6VHRtJMJR7zy0mWyRerkUhaoGC+I5N3 97xw/FR9PcdBvpTR5SSV3cQo0+PAiOd2E2JP3sABqWw6eJ+s/QS32kniy8LTK2S6 8UcIL/mMtGyOIZxLffeYdtX+VNhT2Zk/W+VJfLvw5q0YCP+dPdifWs52o28YXJf3 emOHR+efCxQoY5JcFRoIAQqh8aCyeR/RcQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:37:26 2025 by rpki-client