This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa File: 552292460F1A11E9B3F2A713C4F9AE02.roa (raw, json) Hash identifier: aQ6IFtryhMAcftZ8/U9VLVpz3iJ+2Www/ebnR7Mk7tw= Subject key identifier: C8:25:DC:CA:3B:D4:FA:1B:F0:1D:FB:B9:D9:35:7D:2F:E2:7D:02:97 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 11A6 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa Signing time: Tue 18 Nov 2025 17:06:20 +0000 ROA not before: Tue 18 Nov 2025 17:06:20 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 56300 IP address blocks: 66.96.192.0/24 maxlen: 24 66.96.193.0/24 maxlen: 24 66.96.194.0/24 maxlen: 24 66.96.195.0/24 maxlen: 24 66.96.196.0/24 maxlen: 24 66.96.197.0/24 maxlen: 24 66.96.198.0/24 maxlen: 24 66.96.199.0/24 maxlen: 24 66.96.200.0/24 maxlen: 24 66.96.201.0/24 maxlen: 24 66.96.202.0/24 maxlen: 24 66.96.203.0/24 maxlen: 24 66.96.204.0/24 maxlen: 24 66.96.205.0/24 maxlen: 24 66.96.206.0/24 maxlen: 24 66.96.207.0/24 maxlen: 24 66.96.208.0/24 maxlen: 24 66.96.209.0/24 maxlen: 24 66.96.210.0/24 maxlen: 24 66.96.211.0/24 maxlen: 24 66.96.212.0/24 maxlen: 24 66.96.213.0/24 maxlen: 24 66.96.214.0/24 maxlen: 24 66.96.215.0/24 maxlen: 24 66.96.216.0/24 maxlen: 24 66.96.217.0/24 maxlen: 24 66.96.218.0/24 maxlen: 24 158.140.128.0/24 maxlen: 24 158.140.129.0/24 maxlen: 24 158.140.130.0/24 maxlen: 24 158.140.131.0/24 maxlen: 24 158.140.132.0/24 maxlen: 24 158.140.133.0/24 maxlen: 24 158.140.134.0/24 maxlen: 24 158.140.135.0/24 maxlen: 24 158.140.136.0/24 maxlen: 24 158.140.137.0/24 maxlen: 24 158.140.138.0/24 maxlen: 24 158.140.139.0/24 maxlen: 24 158.140.140.0/24 maxlen: 24 158.140.141.0/24 maxlen: 24 158.140.142.0/24 maxlen: 24 158.140.143.0/24 maxlen: 24 158.140.144.0/24 maxlen: 24 158.140.145.0/24 maxlen: 24 158.140.146.0/24 maxlen: 24 158.140.147.0/24 maxlen: 24 158.140.148.0/24 maxlen: 24 158.140.149.0/24 maxlen: 24 158.140.150.0/24 maxlen: 24 158.140.156.0/24 maxlen: 24 158.140.157.0/24 maxlen: 24 158.140.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4518 (0x11a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Nov 18 17:06:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691ca78c-3efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:5f:d3:0f:4e:3a:21:43:b1:ca:c9:5f:a9: ba:80:47:0f:10:e6:40:dc:56:c4:d1:92:5c:93:e1: 63:e8:74:0c:26:9c:cc:7c:b4:f5:e7:01:4c:67:49: 42:96:55:7a:e7:75:11:94:f0:62:2b:a4:5e:78:3c: 6f:5b:b8:d5:34:ac:4a:c9:b0:6d:2b:6f:82:c9:28: 31:0b:90:85:6d:98:5f:18:8b:5a:4a:61:eb:c1:a0: 0f:a1:1f:fd:6e:fd:0f:e1:13:1e:05:f4:13:25:65: df:90:9e:55:d4:40:3a:6d:64:99:d0:f3:41:09:00: 99:d4:e7:90:51:e8:66:4a:5e:07:be:6d:4e:52:dc: 11:a0:c1:71:35:e5:03:e1:fc:3a:92:a0:6e:0b:30: 7c:70:4f:37:c3:5e:69:b2:5c:5e:94:31:12:1a:70: 46:5e:76:ef:fd:bf:7b:c9:e7:d6:aa:54:f6:b6:31: 31:2e:15:12:6a:c6:5b:66:65:9d:9a:1a:ae:b7:95: 4f:a0:89:1d:c5:b7:bd:2a:8e:4e:d3:84:03:80:f0: 0f:b3:47:4a:32:72:be:51:6e:25:27:b8:1d:81:d1: c8:a9:69:63:ef:fd:2e:3d:87:fc:2f:94:c4:b1:0c: 52:c4:f8:cb:c2:e4:66:da:15:71:26:8a:b2:2b:94: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:25:DC:CA:3B:D4:FA:1B:F0:1D:FB:B9:D9:35:7D:2F:E2:7D:02:97 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 66.96.192.0-66.96.218.255 158.140.128.0-158.140.150.255 158.140.156.0/23 158.140.159.0/24 Signature Algorithm: sha256WithRSAEncryption 49:25:9c:b9:76:e4:e6:a7:78:94:82:0b:ed:3b:66:b1:15:44: e8:19:29:0b:14:eb:65:29:ae:05:d7:84:6f:a3:2d:52:0a:4e: 7a:1d:84:22:76:f8:ef:54:c6:1a:39:44:a9:25:f2:50:2d:4f: 73:58:7e:96:53:a9:ce:42:22:44:69:77:a3:af:30:1f:a4:82: 94:c6:18:11:6f:c0:57:35:dc:26:51:73:c4:37:aa:a7:28:59: 53:ed:af:36:06:74:19:0d:6a:9a:fa:45:a4:cb:90:79:9b:4f: 7a:f7:b3:d3:f2:1d:f2:88:56:85:8a:06:8c:51:d3:b2:95:83: a6:c3:a1:7d:01:23:0f:79:9a:b9:ac:63:2d:c5:ac:4c:db:9c: ce:02:c7:d7:9a:9b:b7:76:44:a4:45:84:3b:7d:1f:60:ff:78: f4:db:03:a3:a0:85:44:36:1e:2e:51:64:b2:4d:59:9d:62:67: f7:1f:4e:54:f2:ae:4b:35:c6:2d:3c:e6:7d:cd:6d:e9:a8:cb: 0f:52:83:c3:a5:2a:c8:c5:a5:d7:59:f0:f0:78:06:ae:c9:83: 10:10:93:f1:62:7b:30:16:b4:ee:29:86:d3:f8:44:81:5a:f4: 0b:9a:42:90:ed:0e:c0:df:f9:01:7d:bb:49:ea:b0:17:40:4c: 40:92:75:3b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICEaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjUxMTE4MTcwNjIwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFjYTc4Yy0zZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5Rf0w9OOiFDscrJX6m6gEcPEOZA3FbE0ZJck+Fj6HQMJpzMfLT15wFMZ0lC llV653URlPBiK6ReeDxvW7jVNKxKybBtK2+CySgxC5CFbZhfGItaSmHrwaAPoR/9 bv0P4RMeBfQTJWXfkJ5V1EA6bWSZ0PNBCQCZ1OeQUehmSl4Hvm1OUtwRoMFxNeUD 4fw6kqBuCzB8cE83w15pslxelDESGnBGXnbv/b97yefWqlT2tjExLhUSasZbZmWd mhqut5VPoIkdxbe9Ko5O04QDgPAPs0dKMnK+UW4lJ7gdgdHIqWlj7/0uPYf8L5TE sQxSxPjLwuRm2hVxJoqyK5QIWwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFMgl3Mo7 1Pob8B37udk1fS/ifQKXMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY3QkIvQkRGQkYxODYwRTNFMTFFOTgzNkY0MDE0QzRGOUFFMDIvNTUyMjkyNDYw RjFBMTFFOUIzRjJBNzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgwDAMEBkJgwAMEAEJg2jAMAwQHnoyAAwQAnoyWAwQBnoycAwQA noyfMA0GCSqGSIb3DQEBCwUAA4IBAQBJJZy5duTmp3iUggvtO2axFUToGSkLFOtl Ka4F14Rvoy1SCk56HYQidvjvVMYaOUSpJfJQLU9zWH6WU6nOQiJEaXejrzAfpIKU xhgRb8BXNdwmUXPEN6qnKFlT7a82BnQZDWqa+kWky5B5m09697PT8h3yiFaFigaM UdOylYOmw6F9ASMPeZq5rGMtxaxM25zOAsfXmpu3dkSkRYQ7fR9g/3j02wOjoIVE Nh4uUWSyTVmdYmf3H05U8q5LNcYtPOZ9zW3pqMsPUoPDpSrIxaXXWfDweAauyYMQ EJPxYnswFrTuKYbT+ESBWvQLmkKQ7Q7A3/kBfbtJ6rAXQExAknU7 -----END CERTIFICATE-----Generated at Sun Dec 7 02:37:27 2025 by rpki-client