This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/796A04A6BA1A11F08C920A83C4F9AE02.roa File: 796A04A6BA1A11F08C920A83C4F9AE02.roa (raw, json) Hash identifier: XrkdqNUQGwomIdIUUZC2gUbbnUvFxDZ/p2osIbne7lw= Subject key identifier: 52:C3:3D:89:68:76:A0:0F:58:B1:8B:C8:F5:0A:7F:0D:07:05:84:C1 Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Certificate serial: 34E2 Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/796A04A6BA1A11F08C920A83C4F9AE02.roa Signing time: Wed 05 Nov 2025 07:38:52 +0000 ROA not before: Wed 05 Nov 2025 07:38:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134375 IP address blocks: 119.252.192.0/23 maxlen: 24 119.252.194.0/23 maxlen: 23 119.252.194.0/24 maxlen: 24 119.252.195.0/24 maxlen: 24 119.252.196.0/22 maxlen: 24 119.252.200.0/21 maxlen: 24 119.252.210.0/23 maxlen: 24 119.252.216.0/22 maxlen: 24 119.252.220.0/23 maxlen: 24 119.252.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13538 (0x34e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8 Validity Not Before: Nov 5 07:38:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=690aff0b-ab90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:90:a6:14:a7:9b:5e:1e:af:79:73:a1:d6: f9:09:0c:74:8a:4c:06:81:6e:5a:d9:ef:95:9e:d6: ec:0f:88:bf:8a:7b:8e:f7:3f:3a:45:f3:b3:a8:87: e7:d7:76:0b:d0:72:f0:db:e0:c3:1e:f5:d1:59:85: d5:39:72:9b:62:0b:84:41:d2:64:55:a0:25:4b:e2: a3:ed:46:bd:0a:93:44:96:ca:9a:af:ee:56:e2:37: d2:07:1e:95:05:08:b8:3b:64:b3:f7:1c:3c:dd:c2: e5:3c:4d:5d:2b:46:48:0d:a8:f2:73:8f:60:4f:2d: 4d:92:86:87:ed:7f:18:60:77:32:12:c0:79:c5:16: a9:f5:50:ec:76:8b:a5:9e:4e:7c:41:98:00:a8:1d: a1:26:ae:a1:5f:b9:bb:d9:5b:d2:9d:db:7a:c5:d1: 15:5a:65:0d:55:23:64:fa:a4:e5:c1:69:68:d5:3a: 33:61:fc:0d:f5:e3:e9:20:8f:15:94:b1:5a:5b:2f: 14:e9:ca:f4:0f:d2:d3:45:b3:ea:15:a7:52:c6:a1: 5c:14:21:1b:c5:06:f8:40:66:dc:5b:e3:ef:f8:76: 79:4f:a8:f0:17:37:6f:78:97:27:63:86:b0:d1:ec: dc:f6:e6:ea:be:52:2b:25:69:c0:c9:03:a0:2c:d3: 58:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C3:3D:89:68:76:A0:0F:58:B1:8B:C8:F5:0A:7F:0D:07:05:84:C1 X509v3 Authority Key Identifier: keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/796A04A6BA1A11F08C920A83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.252.192.0/20 119.252.210.0/23 119.252.216.0/21 Signature Algorithm: sha256WithRSAEncryption 00:08:46:9b:29:78:d8:25:9b:14:cc:ef:98:0b:20:b9:71:e6: 7a:04:99:b8:1b:eb:5b:51:3e:ef:ee:47:ff:23:b5:b2:94:41: ad:ee:81:9d:16:a5:96:6a:0f:f3:b6:4c:85:03:bb:eb:13:60: 12:0b:ff:07:a6:82:9a:25:27:8d:97:11:91:6c:47:30:2f:21: 10:4d:b9:c1:20:64:88:54:ac:fd:9b:3c:1d:b0:5e:ba:c8:6d: d0:80:35:b7:bc:67:f7:cd:98:4c:9d:c6:28:24:2f:3b:94:db: fd:df:03:7e:aa:6b:04:47:23:d5:ed:ea:e6:86:76:52:1f:8f: 14:f7:dd:91:b1:5c:9b:c1:c3:6c:a4:07:ce:d0:f7:18:97:3a: ec:6a:43:69:c9:68:3a:bb:93:14:1d:be:2e:13:f2:fc:1f:ec: 2b:f8:47:32:e1:f1:3e:01:d9:1f:9b:4e:c8:48:5e:a3:e9:bf: ff:0f:e0:d3:c8:1c:29:e8:5b:06:2b:7f:4a:9c:49:e2:5e:5b: 6f:56:9b:bc:af:fa:e8:e0:e5:9c:23:0c:e5:ca:f3:70:1e:67: 17:45:4e:5c:c1:c4:c2:b6:ab:9f:ce:2a:df:0d:d4:16:66:1c: a2:2c:8b:21:af:6e:d8:75:b4:0e:d6:05:58:ce:00:5d:3f:c7: 09:4a:75:7a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFQTkxMTAvBgNVBAUTKDI5NDFDNzE2MUVENEEyRTA5QkI5MUNBQkM0NDNDOEND QkMwMzJFRDgwHhcNMjUxMTA1MDczODUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhZmYwYi1hYjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSmQphSnm14er3lzodb5CQx0ikwGgW5a2e+VntbsD4i/inuO9z86RfOzqIfn 13YL0HLw2+DDHvXRWYXVOXKbYguEQdJkVaAlS+Kj7Ua9CpNElsqar+5W4jfSBx6V BQi4O2Sz9xw83cLlPE1dK0ZIDajyc49gTy1NkoaH7X8YYHcyEsB5xRap9VDsdoul nk58QZgAqB2hJq6hX7m72VvSndt6xdEVWmUNVSNk+qTlwWlo1TozYfwN9ePpII8V lLFaWy8U6cr0D9LTRbPqFadSxqFcFCEbxQb4QGbcW+Pv+HZ5T6jwFzdveJcnY4aw 0ezc9ubqvlIrJWnAyQOgLNNYeQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFLDPYlo dqAPWLGLyPUKfw0HBYTBMB8GA1UdIwQYMBaAFClBxxYe1KLgm7kcq8RDyMy8Ay7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUVBOS9DRUQwQTlFNjFE OTcxMUUyQkYzRTgxODEwOEIwMkNEMi9LVUhIRmg3VW91Q2J1UnlyeEVQSXpMd0RM dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tVSEhGaDdVb3VDYnVSeXJ4RVBJekx3REx0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVFQTkvQ0VEMEE5RTYxRDk3MTFFMkJGM0U4MTgxMDhCMDJDRDIvNzk2QTA0QTZC QTFBMTFGMDhDOTIwQTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAR3/MADBAF3/NIDBAN3/NgwDQYJKoZIhvcNAQELBQADggEB AAAIRpspeNglmxTM75gLILlx5noEmbgb61tRPu/uR/8jtbKUQa3ugZ0WpZZqD/O2 TIUDu+sTYBIL/wemgpolJ42XEZFsRzAvIRBNucEgZIhUrP2bPB2wXrrIbdCANbe8 Z/fNmEydxigkLzuU2/3fA36qawRHI9Xt6uaGdlIfjxT33ZGxXJvBw2ykB87Q9xiX OuxqQ2nJaDq7kxQdvi4T8vwf7Cv4RzLh8T4B2R+bTshIXqPpv/8P4NPIHCnoWwYr f0qcSeJeW29Wm7yv+ujg5ZwjDOXK83AeZxdFTlzBxMK2q5/OKt8N1BZmHKIsiyGv bth1tA7WBVjOAF0/xwlKdXo= -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:34 2025 by rpki-client