This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa File: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (raw, json) Hash identifier: 3uXMO0UCJNabKr8uzhOcc7C4VV56oSmRiKoTg6QuV1A= Subject key identifier: 54:B3:3C:11:C7:23:E1:8F:DE:13:B2:25:ED:E0:95:19:82:CF:66:01 Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Certificate serial: 1C47 Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa Signing time: Mon 24 Nov 2025 12:27:30 +0000 ROA not before: Mon 24 Nov 2025 12:27:30 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 20546 IP address blocks: 45.112.84.0/24 maxlen: 24 45.112.85.0/24 maxlen: 24 45.112.86.0/24 maxlen: 24 45.112.87.0/24 maxlen: 24 103.51.164.0/24 maxlen: 24 103.51.165.0/24 maxlen: 24 103.51.166.0/24 maxlen: 24 103.51.167.0/24 maxlen: 24 2402:1880::/32 maxlen: 32 2402:1880:1000::/48 maxlen: 48 2402:1880:1001::/48 maxlen: 48 2402:1881::/32 maxlen: 32 2402:1882::/32 maxlen: 32 2402:1883::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7239 (0x1c47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Validity Not Before: Nov 24 12:27:30 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69244f31-9cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:84:cd:bc:8c:d8:42:ff:e7:38:0c:bf:00: a3:92:bc:be:af:fd:a0:dc:f7:cb:c3:44:f9:fe:e4: df:85:61:1e:2b:2e:49:06:d1:97:46:97:4c:d9:33: ed:97:67:d4:5c:c3:79:d7:2f:f1:57:a0:e8:80:a6: e1:0c:0b:2f:38:05:7c:50:61:a0:d9:35:1a:44:e7: 6a:d7:bf:cc:de:58:07:89:49:4d:88:55:ed:1f:db: e9:8d:6a:3c:db:d0:e0:fc:a0:e6:d9:9a:f9:fe:29: 05:af:d7:6f:55:be:39:e7:5f:89:8e:63:9d:70:bf: 44:d1:ce:b6:a9:ff:2c:57:f5:65:a5:3d:2e:51:ab: 28:cd:55:64:92:db:ec:f9:d0:4a:c3:b4:f3:5b:43: c1:66:d0:c1:61:e9:02:eb:8d:ba:b4:84:31:3c:47: d3:8b:90:06:61:9f:58:f4:5a:c1:7d:5e:60:54:4d: de:64:f9:1d:c7:5d:89:c6:64:90:dc:22:d4:6d:dc: a5:3d:b6:ce:cd:85:db:18:4f:e2:b4:cb:f9:48:b4: 03:7d:c3:62:5c:74:29:78:54:59:db:ff:bd:b5:a7: 43:ef:33:2d:da:09:d9:fd:4a:28:d0:75:ac:14:d6: a7:ad:b9:05:aa:70:f5:98:98:b5:0b:32:d7:79:90: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B3:3C:11:C7:23:E1:8F:DE:13:B2:25:ED:E0:95:19:82:CF:66:01 X509v3 Authority Key Identifier: keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.112.84.0/22 103.51.164.0/22 IPv6: 2402:1880::/30 Signature Algorithm: sha256WithRSAEncryption 2e:70:f1:f5:44:76:88:76:77:83:81:54:13:fe:f6:c5:25:ce: 01:a7:dc:9d:06:4e:65:95:ea:bb:6d:e5:37:cb:24:82:66:e8: 16:a3:da:42:16:6d:4f:ca:c7:6b:8a:d3:ea:15:f7:5e:de:fd: 41:6c:50:32:cd:28:7b:be:21:ff:b5:92:42:d0:12:21:eb:9a: 91:26:45:02:88:b3:90:63:50:38:02:6a:96:3c:c0:dc:ab:b6: 62:b6:14:22:d9:14:78:a3:28:ab:0f:30:a8:38:61:79:bc:09: 52:fe:3f:8e:a1:4e:a3:08:f7:e1:93:e7:08:ac:13:14:1d:20: 06:d2:75:f6:a8:ed:72:26:26:e4:00:37:0e:69:0e:1e:a3:44: 82:ca:e0:98:e5:b1:dc:8e:73:5a:ca:1a:58:be:62:96:d5:c9: ae:70:eb:bf:3d:b9:8e:5f:cb:00:51:0d:03:15:ca:d7:47:96: 6e:31:66:21:48:ae:40:67:e7:ed:61:e8:64:74:ca:3b:ea:26: cf:e9:76:c6:16:28:dc:96:1b:40:16:ac:bc:4d:29:34:98:75: 93:0c:a2:4e:9a:21:da:ea:57:19:8a:9d:59:c4:97:10:6b:d3: 64:ce:4f:2f:75:15:f9:35:b0:37:f2:50:71:18:12:d7:5b:11: 44:d7:06:46 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICHEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFGMjAxMTAvBgNVBAUTKDBGOERCREE3RDBDOUExRUNBMTk0NUM2MUI3MjkyMEY1 QUEwRTk0NjcwHhcNMjUxMTI0MTIyNzMwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTI0NGYzMS05Y2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbiEzbyM2EL/5zgMvwCjkry+r/2g3PfLw0T5/uTfhWEeKy5JBtGXRpdM2TPt l2fUXMN51y/xV6DogKbhDAsvOAV8UGGg2TUaROdq17/M3lgHiUlNiFXtH9vpjWo8 29Dg/KDm2Zr5/ikFr9dvVb4551+JjmOdcL9E0c62qf8sV/VlpT0uUasozVVkktvs +dBKw7TzW0PBZtDBYekC6426tIQxPEfTi5AGYZ9Y9FrBfV5gVE3eZPkdx12JxmSQ 3CLUbdylPbbOzYXbGE/itMv5SLQDfcNiXHQpeFRZ2/+9tadD7zMt2gnZ/Uoo0HWs FNanrbkFqnD1mJi1CzLXeZCYjQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFSzPBHH I+GP3hOyJe3glRmCz2YBMB8GA1UdIwQYMBaAFA+NvafQyaHsoZRcYbcpIPWqDpRn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUYyMC82NUE5QTI0MkY1 QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9leWhsRnhodHlrZzlhb09s R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0MjlwOURKb2V5aGxGeGh0eWtnOWFvT2xHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFGMjAvNjVBOUEyNDJGNUM0MTFFNjhBQUEwMDg1QzRGOUFFMDIvRDU5RUE2RjRG NUM2MTFFNkE0RkZFRjBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItcFQDBAJnM6QwDQQCAAIwBwMFAiQCGIAwDQYJKoZIhvcN AQELBQADggEBAC5w8fVEdoh2d4OBVBP+9sUlzgGn3J0GTmWV6rtt5TfLJIJm6Baj 2kIWbU/Kx2uK0+oV917e/UFsUDLNKHu+If+1kkLQEiHrmpEmRQKIs5BjUDgCapY8 wNyrtmK2FCLZFHijKKsPMKg4YXm8CVL+P46hTqMI9+GT5wisExQdIAbSdfao7XIm JuQANw5pDh6jRILK4JjlsdyOc1rKGli+YpbVya5w6789uY5fywBRDQMVytdHlm4x ZiFIrkBn5+1h6GR0yjvqJs/pdsYWKNyWG0AWrLxNKTSYdZMMok6aIdrqVxmKnVnE lxBr02TOTy91Ffk1sDfyUHEYEtdbEUTXBkY= -----END CERTIFICATE-----Generated at Sat Dec 6 20:09:55 2025 by rpki-client