This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/F2A462E66B6C11F0B453B656C4F9AE02.roa File: F2A462E66B6C11F0B453B656C4F9AE02.roa (raw, json) Hash identifier: u/IJXHcIn7lbo6iqFsAljOO6/E+7Rk3qnGcidVuOSfM= Subject key identifier: CC:0B:38:25:68:A6:58:CF:E0:1C:71:7A:0D:9F:9E:D5:29:80:8E:5E Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 098B Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/F2A462E66B6C11F0B453B656C4F9AE02.roa Signing time: Sat 20 Dec 2025 20:17:03 +0000 ROA not before: Sat 20 Dec 2025 20:17:03 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 10207 IP address blocks: 101.234.128.0/23 maxlen: 24 101.234.130.0/23 maxlen: 24 101.234.135.0/24 maxlen: 24 101.234.138.0/23 maxlen: 24 101.234.155.0/24 maxlen: 24 101.234.159.0/24 maxlen: 24 101.234.160.0/24 maxlen: 24 101.234.170.0/24 maxlen: 24 101.234.171.0/24 maxlen: 24 114.111.152.0/23 maxlen: 24 114.111.154.0/23 maxlen: 24 122.100.5.0/24 maxlen: 24 122.100.12.0/23 maxlen: 24 2406:5800:1000::/40 maxlen: 48 2406:5800:1100::/40 maxlen: 48 2406:5800:1200::/40 maxlen: 48 2406:5800:1300::/40 maxlen: 48 2406:5800:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2443 (0x98b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Dec 20 20:17:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6947043f-a1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:88:70:c4:45:e2:69:16:99:07:f4:29:4b: cb:64:92:41:25:ca:f7:a6:54:dd:f8:4d:4e:58:8d: f2:19:a6:e6:fd:dd:7f:88:5e:c2:e0:b4:c0:7e:1e: 87:9c:ab:4c:b3:94:05:0f:df:40:a6:3c:9e:c5:07: 48:ad:1c:f7:21:52:1b:eb:3c:a7:01:c1:e9:93:4d: c6:95:c7:6f:db:fa:a5:07:bb:73:10:c2:21:a7:bb: 3d:48:0f:16:bb:90:48:35:21:67:b6:87:0a:2e:b7: 20:eb:11:7d:b8:18:20:77:e6:b1:8b:35:dc:83:51: 6d:d3:08:0a:a7:86:d4:06:ad:9e:6d:34:2b:d7:73: 26:c3:6c:00:4b:21:94:26:97:64:ed:dc:7b:81:14: ff:7d:ce:b1:99:1c:57:ec:8d:1b:9c:9e:49:09:ed: 29:6c:46:69:8d:b3:1e:5c:84:7c:6e:16:8c:c5:3b: bb:56:e7:81:e8:3d:e8:50:cc:4f:58:0c:0a:2e:96: bc:e4:4f:6c:7b:41:75:ae:5c:e4:67:ca:95:f0:14: 4d:d7:18:04:64:e5:e6:b4:68:4a:84:69:44:a2:28: 74:38:33:ce:d9:c2:88:90:f6:a2:5d:ec:49:ac:0a: 29:f8:ee:39:d2:8f:9d:a1:83:a3:6a:78:da:84:f2: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:38:25:68:A6:58:CF:E0:1C:71:7A:0D:9F:9E:D5:29:80:8E:5E X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/F2A462E66B6C11F0B453B656C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.234.128.0/22 101.234.135.0/24 101.234.138.0/23 101.234.155.0/24 101.234.159.0-101.234.160.255 101.234.170.0/23 114.111.152.0/22 122.100.5.0/24 122.100.12.0/23 IPv6: 2406:5800:1000::/38 2406:5800:ff00::/48 Signature Algorithm: sha256WithRSAEncryption 4d:04:37:f9:a8:2f:4c:d9:9c:6a:4a:5e:a2:14:ba:1a:ca:5f: 20:c6:ed:2e:e3:13:36:cb:5b:7d:f0:c0:ab:65:52:0b:8c:f4: df:08:5d:5f:93:af:97:7c:e6:15:db:db:c7:e0:c3:d4:a2:f5: f9:26:86:9d:b5:6d:ea:8b:a3:12:c1:a1:d0:ef:af:71:62:2a: 39:73:8d:17:3f:83:c6:84:7d:bb:ee:39:65:6a:c5:46:36:5a: 1f:e8:e8:ea:1f:83:68:6a:f0:5c:60:b2:eb:31:65:97:1c:37: 21:33:7b:b1:b5:88:41:a7:24:3b:a8:2d:64:b4:b3:4d:2b:96: 41:1a:30:b9:a1:23:50:8f:52:96:1b:de:a9:74:e5:bf:8b:c9: 09:6f:74:16:08:15:91:12:6d:01:bb:13:d2:9b:c9:f7:33:34: 7a:e2:58:4b:49:62:ca:02:39:48:27:49:f9:be:3f:5b:25:0b: 6d:9b:13:62:35:ae:91:ae:35:4b:70:a5:c4:0d:41:76:39:44: 06:ba:bc:22:b0:f2:71:f1:e3:be:42:13:5b:fb:db:c5:fc:56: 25:d1:c8:a2:85:2a:9d:47:d3:87:02:1a:8a:b8:bc:7f:c5:00: 55:d2:68:2a:94:18:d9:23:02:6b:b8:b1:9b:b2:f7:37:99:d1: 46:f1:10:da -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgICCYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjUxMjIwMjAxNzAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ3MDQzZi1hMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtReIcMRF4mkWmQf0KUvLZJJBJcr3plTd+E1OWI3yGabm/d1/iF7C4LTAfh6H nKtMs5QFD99ApjyexQdIrRz3IVIb6zynAcHpk03Glcdv2/qlB7tzEMIhp7s9SA8W u5BINSFntocKLrcg6xF9uBggd+axizXcg1Ft0wgKp4bUBq2ebTQr13Mmw2wASyGU Jpdk7dx7gRT/fc6xmRxX7I0bnJ5JCe0pbEZpjbMeXIR8bhaMxTu7VueB6D3oUMxP WAwKLpa85E9se0F1rlzkZ8qV8BRN1xgEZOXmtGhKhGlEoih0ODPO2cKIkPaiXexJ rAop+O450o+doYOjanjahPJF8QIDAQABo4IC5jCCAuIwHQYDVR0OBBYEFMwLOCVo pljP4Bxxeg2fntUpgI5eMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU0NkUvMENENDFEQThCNzZBMTFFQTgxNEY1MDg0QzRGOUFFMDIvRjJBNDYyRTY2 QjZDMTFGMEI0NTNCNjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcAYIKwYBBQUHAQcBAf8E YTBfMEQEAgABMD4DBAJl6oADBABl6ocDBAFl6ooDBABl6pswDAMEAGXqnwMEAGXq oAMEAWXqqgMEAnJvmAMEAHpkBQMEAXpkDDAXBAIAAjARAwYCJAZYABADBwAkBlgA /wAwDQYJKoZIhvcNAQELBQADggEBAE0EN/moL0zZnGpKXqIUuhrKXyDG7S7jEzbL W33wwKtlUguM9N8IXV+Tr5d85hXb28fgw9Si9fkmhp21beqLoxLBodDvr3FiKjlz jRc/g8aEfbvuOWVqxUY2Wh/o6Oofg2hq8FxgsusxZZccNyEze7G1iEGnJDuoLWS0 s00rlkEaMLmhI1CPUpYb3ql05b+LyQlvdBYIFZESbQG7E9KbyfczNHriWEtJYsoC OUgnSfm+P1slC22bE2I1rpGuNUtwpcQNQXY5RAa6vCKw8nHx475CE1v728X8ViXR yKKFKp1H04cCGoq4vH/FAFXSaCqUGNkjAmu4sZuy9zeZ0UbxENo= -----END CERTIFICATE-----Generated at Sun Dec 21 14:42:33 2025 by rpki-client