This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4731AAD2D9A211F092913C6268D3641D.roa File: 4731AAD2D9A211F092913C6268D3641D.roa (raw, json) Hash identifier: 9I/aQr6sgxc6dIwQzYUlc8auTinO+9HPObIlo6LbZHs= Subject key identifier: D7:9A:30:B4:3D:B9:63:41:88:1E:A4:B1:AD:3F:11:15:57:2C:85:61 Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Certificate serial: 34FD Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4731AAD2D9A211F092913C6268D3641D.roa Signing time: Mon 15 Dec 2025 10:39:53 +0000 ROA not before: Mon 15 Dec 2025 10:39:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 152194 IP address blocks: 45.64.52.0/24 maxlen: 24 45.64.53.0/24 maxlen: 24 45.64.54.0/23 maxlen: 24 103.1.40.0/24 maxlen: 24 103.1.42.0/24 maxlen: 24 103.1.43.0/24 maxlen: 24 112.213.96.0/19 maxlen: 19 112.213.96.0/24 maxlen: 24 112.213.97.0/24 maxlen: 24 112.213.98.0/24 maxlen: 24 112.213.99.0/24 maxlen: 24 112.213.100.0/24 maxlen: 24 112.213.101.0/24 maxlen: 24 112.213.102.0/24 maxlen: 24 112.213.103.0/24 maxlen: 24 112.213.105.0/24 maxlen: 24 112.213.106.0/24 maxlen: 24 112.213.107.0/24 maxlen: 24 112.213.108.0/24 maxlen: 24 112.213.109.0/24 maxlen: 24 112.213.110.0/24 maxlen: 24 112.213.111.0/24 maxlen: 24 112.213.112.0/24 maxlen: 24 112.213.113.0/24 maxlen: 24 112.213.114.0/24 maxlen: 24 112.213.115.0/24 maxlen: 24 112.213.116.0/23 maxlen: 24 112.213.118.0/24 maxlen: 24 112.213.119.0/24 maxlen: 24 112.213.120.0/24 maxlen: 24 112.213.121.0/24 maxlen: 24 112.213.122.0/24 maxlen: 24 112.213.123.0/24 maxlen: 24 112.213.124.0/24 maxlen: 24 112.213.125.0/24 maxlen: 24 112.213.126.0/24 maxlen: 24 112.213.127.0/24 maxlen: 24 117.18.0.0/20 maxlen: 20 117.18.0.0/24 maxlen: 24 117.18.1.0/24 maxlen: 24 117.18.2.0/24 maxlen: 24 117.18.3.0/24 maxlen: 24 117.18.4.0/24 maxlen: 24 117.18.5.0/24 maxlen: 24 117.18.6.0/24 maxlen: 24 117.18.7.0/24 maxlen: 24 117.18.9.0/24 maxlen: 24 117.18.12.0/24 maxlen: 24 117.18.13.0/24 maxlen: 24 117.18.14.0/24 maxlen: 24 117.18.15.0/24 maxlen: 24 121.54.168.0/21 maxlen: 21 121.54.168.0/24 maxlen: 24 121.54.171.0/24 maxlen: 24 121.54.173.0/24 maxlen: 24 121.54.174.0/24 maxlen: 24 121.54.175.0/24 maxlen: 24 121.127.224.0/19 maxlen: 19 121.127.224.0/24 maxlen: 24 121.127.226.0/24 maxlen: 24 121.127.227.0/24 maxlen: 24 121.127.228.0/24 maxlen: 24 121.127.229.0/24 maxlen: 24 121.127.230.0/24 maxlen: 24 121.127.231.0/24 maxlen: 24 121.127.232.0/24 maxlen: 24 121.127.233.0/24 maxlen: 24 121.127.234.0/24 maxlen: 24 121.127.241.0/24 maxlen: 24 121.127.244.0/24 maxlen: 24 121.127.245.0/24 maxlen: 24 121.127.246.0/24 maxlen: 24 121.127.248.0/24 maxlen: 24 121.127.249.0/24 maxlen: 24 121.127.250.0/24 maxlen: 24 121.127.252.0/24 maxlen: 24 121.127.253.0/24 maxlen: 24 121.127.254.0/24 maxlen: 24 121.127.255.0/24 maxlen: 24 202.146.216.0/21 maxlen: 21 202.146.216.0/24 maxlen: 24 202.146.217.0/24 maxlen: 24 202.146.218.0/24 maxlen: 24 202.146.219.0/24 maxlen: 24 202.146.220.0/24 maxlen: 24 202.146.221.0/24 maxlen: 24 202.146.222.0/24 maxlen: 24 202.146.223.0/24 maxlen: 24 210.56.48.0/21 maxlen: 24 210.56.56.0/21 maxlen: 24 223.26.48.0/24 maxlen: 24 223.26.52.0/24 maxlen: 24 223.26.57.0/24 maxlen: 24 223.26.59.0/24 maxlen: 24 223.26.61.0/24 maxlen: 24 223.26.62.0/24 maxlen: 24 223.26.63.0/24 maxlen: 24 2403:ea00::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 14:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC Validity Not Before: Dec 15 10:39:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=693fe579-4d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2f:2b:c7:08:b8:11:09:18:33:67:ad:d2:44: 73:93:60:19:53:56:06:0c:03:0c:bb:42:34:78:ac: bc:60:6a:e9:e3:b5:1c:6e:82:1b:88:d9:80:6a:02: de:f5:55:85:00:65:01:80:0f:7d:d6:02:75:ce:74: c0:d5:d3:bf:77:43:2d:e1:32:75:be:cb:cd:67:45: 7e:89:9f:22:01:1d:3a:f2:09:fe:c0:00:c3:6f:dd: c8:d0:ea:36:9e:46:73:3c:8a:c9:c6:dd:eb:b3:f8: 51:ad:ca:ac:2c:c2:d5:18:57:50:95:8b:b0:5a:7a: 6d:26:86:37:3d:c4:87:48:fd:10:9a:d6:4d:49:2d: ef:ae:d0:9a:51:cf:94:9c:73:2e:4b:b0:a0:9a:d8: 03:9d:89:a0:6c:16:3c:b1:19:48:e0:cc:6d:2c:62: 96:37:7f:56:10:ff:87:59:1f:22:3c:ff:79:a4:0e: f9:1f:05:f5:4d:5a:b2:e0:c4:d0:02:01:70:63:73: b3:a6:81:67:24:bb:f0:61:31:7e:6d:76:66:6e:8e: 48:d4:0a:a1:cc:75:64:49:9f:46:4c:e3:e1:db:0e: 65:1a:e4:61:36:2f:02:d2:32:38:ae:38:71:4f:cb: 5b:a5:10:97:74:cd:cb:97:8d:b9:f9:aa:a5:ac:cf: 3a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9A:30:B4:3D:B9:63:41:88:1E:A4:B1:AD:3F:11:15:57:2C:85:61 X509v3 Authority Key Identifier: keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/4731AAD2D9A211F092913C6268D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.52.0/22 103.1.40.0/24 103.1.42.0/23 112.213.96.0/19 117.18.0.0/20 121.54.168.0/21 121.127.224.0/19 202.146.216.0/21 210.56.48.0/20 223.26.48.0/24 223.26.52.0/24 223.26.57.0/24 223.26.59.0/24 223.26.61.0-223.26.63.255 IPv6: 2403:ea00::/36 Signature Algorithm: sha256WithRSAEncryption 1f:08:3b:c5:4b:a6:e6:2f:cd:5e:41:63:cd:b1:92:1d:4d:9a: 58:f6:d3:a9:50:81:28:63:d4:98:17:5f:73:d6:ca:9d:57:a9: e1:b2:0d:38:b4:5e:98:24:fd:78:6b:cd:66:cb:a7:b8:b5:01: 1b:4a:62:6f:d6:f8:b0:1b:58:6c:61:eb:2e:05:4c:01:d3:d7: 4c:be:83:b1:f3:d4:ea:88:51:04:d7:de:27:b8:62:fd:e7:f5: 89:dd:1e:4b:a8:2d:d4:9e:ff:24:63:09:31:e7:0e:12:1c:5f: 0a:24:33:1c:77:4c:0a:72:98:82:1a:b1:10:68:f8:a0:8c:ba: a2:18:59:1c:64:7e:8f:a9:20:10:96:d5:49:d7:88:a4:37:36: 1b:2d:12:bd:46:6b:7e:c6:0e:60:84:0d:71:bb:b7:42:bc:51: 09:90:c2:75:84:35:a5:71:aa:41:bf:f5:90:2f:1d:fa:b8:0e: 12:bc:f2:bb:61:92:47:89:2c:75:89:6b:1f:f0:74:e3:18:b2: 7e:de:e4:b8:b3:7b:f9:ce:73:8e:ca:74:80:39:e0:60:19:9d: 33:a6:ac:89:30:35:4f:79:66:ab:a1:b9:05:31:ae:4b:74:4a: f0:82:c0:72:33:01:13:77:c2:d6:fa:38:59:5b:29:b8:1d:65: 83:25:b6:1b -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk3RTgxMTAvBgNVBAUTKEM5QzI4Rjk5MEI2Mjc0MTJDOTdDMkRDRUM3QzkwNkU2 MUFEMzI1QUMwHhcNMjUxMjE1MTAzOTUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNmZTU3OS00ZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2i8rxwi4EQkYM2et0kRzk2AZU1YGDAMMu0I0eKy8YGrp47UcboIbiNmAagLe 9VWFAGUBgA991gJ1znTA1dO/d0Mt4TJ1vsvNZ0V+iZ8iAR068gn+wADDb93I0Oo2 nkZzPIrJxt3rs/hRrcqsLMLVGFdQlYuwWnptJoY3PcSHSP0QmtZNSS3vrtCaUc+U nHMuS7CgmtgDnYmgbBY8sRlI4MxtLGKWN39WEP+HWR8iPP95pA75HwX1TVqy4MTQ AgFwY3OzpoFnJLvwYTF+bXZmbo5I1AqhzHVkSZ9GTOPh2w5lGuRhNi8C0jI4rjhx T8tbpRCXdM3Ll425+aqlrM86lwIDAQABo4IC/DCCAvgwHQYDVR0OBBYEFNeaMLQ9 uWNBiB6ksa0/ERVXLIVhMB8GA1UdIwQYMBaAFMnCj5kLYnQSyXwtzsfJBuYa0yWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdFOC83QTBGRTdGQTFE OTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRCTEpmQzNPeDhrRzVoclRK YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ljS1BtUXRpZEJMSmZDM094OGtHNWhyVEphdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTk3RTgvN0EwRkU3RkExRDkyMTFFMkI1QkM3NEY1MDhCMDJDRDIvNDczMUFBRDJE OUEyMTFGMDkyOTEzQzYyNjhEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYUGCCsGAQUFBwEHAQH/ BHYwdDBiBAIAATBcAwQCLUA0AwQAZwEoAwQBZwEqAwQFcNVgAwQEdRIAAwQDeTao AwQFeX/gAwQDypLYAwQE0jgwAwQA3xowAwQA3xo0AwQA3xo5AwQA3xo7MAwDBADf Gj0DBAbfGgAwDgQCAAIwCAMGBCQD6gAAMA0GCSqGSIb3DQEBCwUAA4IBAQAfCDvF S6bmL81eQWPNsZIdTZpY9tOpUIEoY9SYF19z1sqdV6nhsg04tF6YJP14a81my6e4 tQEbSmJv1viwG1hsYesuBUwB09dMvoOx89TqiFEE194nuGL95/WJ3R5LqC3Unv8k Ywkx5w4SHF8KJDMcd0wKcpiCGrEQaPigjLqiGFkcZH6PqSAQltVJ14ikNzYbLRK9 Rmt+xg5ghA1xu7dCvFEJkMJ1hDWlcapBv/WQLx36uA4SvPK7YZJHiSx1iWsf8HTj GLJ+3uS4s3v5znOOynSAOeBgGZ0zpqyJMDVPeWarobkFMa5LdErwgsByMwETd8LW +jhZWym4HWWDJbYb -----END CERTIFICATE-----Generated at Thu Dec 18 02:08:47 2025 by rpki-client