This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/CB91C8D2514D11EEADBDDC4DC4F9AE02.roa File: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (raw, json) Hash identifier: dK408LgXcJAYhoz7KnOryIVY1g3UfZjmh14JzxX/i0Q= Subject key identifier: CC:2D:83:FC:73:2E:FF:D4:5A:A5:6D:3C:A3:62:40:20:25:E1:D5:0C Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 1737 Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/CB91C8D2514D11EEADBDDC4DC4F9AE02.roa Signing time: Mon 08 Dec 2025 16:25:32 +0000 ROA not before: Mon 08 Dec 2025 16:25:32 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55821 IP address blocks: 146.88.64.0/20 maxlen: 20 146.88.64.0/22 maxlen: 22 146.88.64.0/24 maxlen: 24 146.88.65.0/24 maxlen: 24 146.88.66.0/24 maxlen: 24 146.88.67.0/24 maxlen: 24 146.88.68.0/22 maxlen: 22 146.88.68.0/24 maxlen: 24 146.88.69.0/24 maxlen: 24 146.88.70.0/24 maxlen: 24 146.88.71.0/24 maxlen: 24 146.88.72.0/22 maxlen: 22 146.88.72.0/24 maxlen: 24 146.88.73.0/24 maxlen: 24 146.88.74.0/24 maxlen: 24 146.88.75.0/24 maxlen: 24 146.88.76.0/22 maxlen: 22 146.88.76.0/24 maxlen: 24 146.88.77.0/24 maxlen: 24 146.88.78.0/24 maxlen: 24 146.88.79.0/24 maxlen: 24 155.137.64.0/18 maxlen: 22 155.137.94.0/23 maxlen: 23 155.137.104.0/21 maxlen: 23 155.137.115.0/24 maxlen: 24 209.141.0.0/20 maxlen: 20 209.141.0.0/22 maxlen: 22 209.141.4.0/23 maxlen: 23 209.141.5.0/24 maxlen: 24 209.141.6.0/23 maxlen: 23 209.141.8.0/23 maxlen: 23 209.141.10.0/23 maxlen: 24 209.141.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5943 (0x1737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Dec 8 16:25:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6936fbfc-7e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:0c:88:ed:7c:d3:01:cf:a3:ba:24:b2:f0: b2:25:70:f8:d7:c9:f5:d3:0f:8f:52:0f:4c:ed:89: a7:df:57:f7:03:49:45:e1:de:68:e2:13:76:ef:b9: b1:be:e5:ce:1b:af:b4:45:13:7a:ee:18:e3:76:25: 24:9c:b1:1b:6d:1c:6a:51:73:51:d9:e6:11:29:a3: 14:77:a1:c5:95:ff:8a:82:fc:29:a2:4c:d0:00:2e: 2b:bc:96:ac:2e:8c:ea:d1:88:d5:cc:ea:3b:a5:62: 7d:83:0c:bd:9b:81:df:56:98:ad:ad:67:53:b3:57: 66:26:56:b6:44:4d:2e:72:40:fd:1c:86:2d:73:73: d9:48:5f:b5:3c:8a:e7:f2:1d:4d:11:d1:e4:41:99: 45:16:df:eb:6a:0a:3c:d3:22:a4:33:6b:77:08:9f: 03:24:73:5f:25:db:a7:a2:26:5e:16:68:17:c1:56: 13:35:6f:db:9c:9e:c1:bd:89:11:bf:fd:0c:fe:d0: c8:5e:fa:13:5c:6a:d9:a5:63:66:17:3a:e3:43:b3: d5:06:be:ae:2b:e3:66:94:28:8b:bc:8f:8e:72:f1: 9a:34:6e:27:11:52:c1:e9:12:7f:2c:5f:9e:4f:65: f1:ad:cd:71:2e:50:90:91:87:9b:65:b5:f3:0a:1b: c7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2D:83:FC:73:2E:FF:D4:5A:A5:6D:3C:A3:62:40:20:25:E1:D5:0C X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/CB91C8D2514D11EEADBDDC4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.88.64.0/20 155.137.64.0/18 209.141.0.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:01:bc:78:66:86:27:b3:40:49:b8:1f:65:9a:f3:95:ac:14: 8a:9a:de:a0:93:9f:98:03:ff:5d:11:e9:ba:0a:02:3e:e5:85: a5:24:aa:22:a6:1a:8f:74:17:d7:53:41:33:c0:c0:47:c0:29: d0:5a:2a:e0:6d:bc:69:f2:da:49:26:9d:a3:8f:bf:56:9d:b9: c0:18:5e:17:37:3e:45:57:69:b7:00:5e:0f:76:7c:4d:43:f0: b0:1b:5c:11:e6:65:ad:80:dc:14:36:1d:13:04:30:6a:5d:e9: 30:2d:4d:fb:21:58:c5:6a:af:a4:df:7d:c6:05:b5:e4:b5:6c: d5:b1:ee:27:38:1f:68:98:fc:85:78:8f:d3:3a:dc:fb:5e:12: 73:30:e3:82:58:41:bc:a9:d5:97:8c:8b:ae:a9:31:c2:62:65: 94:40:ee:f0:7a:b5:b1:48:b3:40:e3:87:53:c1:70:7c:12:e3: 6a:c6:d6:59:81:b0:ce:c4:d6:2d:35:5d:51:7e:55:2a:8f:6b: be:a7:87:6e:78:7b:8e:68:44:13:a7:45:dc:2c:27:21:01:6c: 0f:a3:e2:40:f6:3b:1e:cd:42:e2:c1:55:78:42:44:cd:c2:27: 86:9d:e6:7d:f2:88:21:61:84:ac:6d:b9:c8:6d:be:21:31:16: fb:07:de:60 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICFzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjUxMjA4MTYyNTMyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM2ZmJmYy03ZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvYMiO180wHPo7oksvCyJXD418n10w+PUg9M7Ymn31f3A0lF4d5o4hN277mx vuXOG6+0RRN67hjjdiUknLEbbRxqUXNR2eYRKaMUd6HFlf+KgvwpokzQAC4rvJas Lozq0YjVzOo7pWJ9gwy9m4HfVpitrWdTs1dmJla2RE0uckD9HIYtc3PZSF+1PIrn 8h1NEdHkQZlFFt/rago80yKkM2t3CJ8DJHNfJdunoiZeFmgXwVYTNW/bnJ7BvYkR v/0M/tDIXvoTXGrZpWNmFzrjQ7PVBr6uK+NmlCiLvI+OcvGaNG4nEVLB6RJ/LF+e T2Xxrc1xLlCQkYebZbXzChvHqQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMwtg/xz Lv/UWqVtPKNiQCAl4dUMMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGNTkvNDRBNkZGNjQwMENCMTFFOEJFQjFFRjEwQzRGOUFFMDIvQ0I5MUM4RDI1 MTREMTFFRUFEQkREQzREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBASSWEADBAabiUADBATRjQAwDQYJKoZIhvcNAQELBQADggEB AGoBvHhmhiezQEm4H2Wa85WsFIqa3qCTn5gD/10R6boKAj7lhaUkqiKmGo90F9dT QTPAwEfAKdBaKuBtvGny2kkmnaOPv1aducAYXhc3PkVXabcAXg92fE1D8LAbXBHm Za2A3BQ2HRMEMGpd6TAtTfshWMVqr6TffcYFteS1bNWx7ic4H2iY/IV4j9M63Pte EnMw44JYQbyp1ZeMi66pMcJiZZRA7vB6tbFIs0Djh1PBcHwS42rG1lmBsM7E1i01 XVF+VSqPa76nh254e45oRBOnRdwsJyEBbA+j4kD2Ox7NQuLBVXhCRM3CJ4ad5n3y iCFhhKxtuchtviExFvsH3mA= -----END CERTIFICATE-----Generated at Thu Jan 22 03:45:32 2026 by rpki-client