This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/7F8113B6D4DC11F091B5A227C4F9AE02.roa File: 7F8113B6D4DC11F091B5A227C4F9AE02.roa (raw, json) Hash identifier: 6u6mSc1zaco1Tc/dQzBw0E4k6CuwW/dWAAEV4YYWdn8= Subject key identifier: DE:A7:F0:2B:16:14:12:EF:36:3D:5A:78:26:55:9B:67:4C:6C:6D:02 Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Certificate serial: 0523 Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/7F8113B6D4DC11F091B5A227C4F9AE02.roa Signing time: Tue 09 Dec 2025 08:54:00 +0000 ROA not before: Tue 09 Dec 2025 08:54:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38224 IP address blocks: 112.109.96.0/19 maxlen: 24 114.31.224.0/20 maxlen: 20 114.31.224.0/23 maxlen: 23 114.31.226.0/23 maxlen: 23 114.31.228.0/23 maxlen: 23 114.31.230.0/23 maxlen: 23 119.252.144.0/20 maxlen: 20 119.252.144.0/21 maxlen: 21 119.252.144.0/24 maxlen: 24 119.252.145.0/24 maxlen: 24 119.252.147.0/24 maxlen: 24 119.252.148.0/24 maxlen: 24 119.252.152.0/24 maxlen: 24 119.252.153.0/24 maxlen: 24 119.252.154.0/23 maxlen: 24 119.252.156.0/22 maxlen: 22 119.252.156.0/24 maxlen: 24 119.252.159.0/24 maxlen: 24 202.137.232.0/21 maxlen: 24 2405:e200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221 Validity Not Before: Dec 9 08:54:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6937e3a8-b416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:e2:59:de:37:67:e7:4b:08:46:86:c4:96: b1:af:46:79:9f:9f:90:8f:a1:c3:e1:f9:28:89:96: fd:15:52:25:b1:a4:61:83:39:72:6a:8e:e7:d1:29: 89:e7:99:aa:5d:e3:95:48:01:e6:a8:b6:f7:9c:83: 65:61:97:0b:88:6b:d2:57:a5:bc:01:12:23:07:a5: 53:ac:a6:c6:c4:82:bf:44:b5:35:ad:70:e1:39:11: a1:d2:6e:3f:47:b0:a2:d5:ef:6f:92:b7:39:d9:45: b4:20:f5:e7:12:d2:c6:63:61:46:ca:ca:96:1a:51: 9a:5d:cf:39:88:5f:3c:ba:5d:42:ef:69:ac:1f:5c: f3:5d:89:7a:ef:88:56:d0:d2:55:c8:c2:14:a3:16: 09:b8:e4:d2:d0:29:6f:bd:e0:1b:cf:35:2f:32:e7: 09:9c:78:f8:21:87:cd:a5:ab:8a:02:7a:cf:8e:4d: 7e:aa:e7:c2:5d:0c:f1:6d:cd:81:94:89:5f:5c:18: c5:b2:86:0c:3c:ae:a8:e5:3e:71:ff:5c:49:e3:56: 02:47:22:59:1c:1f:2a:bd:b4:60:8d:07:06:3b:72: ef:3c:b5:68:2e:4f:3a:96:74:e7:78:b8:d3:9e:61: 7e:70:1f:8c:f1:d7:27:b5:4d:08:67:32:ac:e8:8a: 7e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A7:F0:2B:16:14:12:EF:36:3D:5A:78:26:55:9B:67:4C:6C:6D:02 X509v3 Authority Key Identifier: keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/7F8113B6D4DC11F091B5A227C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.109.96.0/19 114.31.224.0/20 119.252.144.0/20 202.137.232.0/21 IPv6: 2405:e200::/32 Signature Algorithm: sha256WithRSAEncryption 61:68:ba:e5:58:8a:6c:6d:1d:04:3c:d7:c5:c0:18:f5:cb:41: 4b:96:0b:d8:59:86:a4:a1:b5:f1:fe:4a:8b:7d:11:bc:7a:9a: 4d:f9:9c:57:fb:18:ac:2c:78:3f:42:8f:64:20:b1:69:77:08: 0c:c3:14:00:3d:12:27:9b:aa:5f:09:79:8d:e4:d2:45:47:a3: a4:41:c2:46:b5:f7:0f:00:3e:8a:06:80:32:e8:44:6a:55:92: 05:c8:24:10:7d:4c:9c:70:45:3a:60:60:c3:86:af:04:73:e0: d0:68:d6:ba:b9:fe:9e:55:f0:52:6a:47:e3:ad:f4:03:f8:56: 5e:8b:cb:da:8c:c0:b2:de:74:91:d1:7b:87:01:bc:60:23:16: 4f:6b:73:83:cf:f3:7a:65:0d:03:18:4a:de:cb:c0:7a:b7:34: 87:d1:e1:e3:11:f4:7b:d5:bf:8b:12:f1:b6:83:32:da:9a:fe: 66:01:f1:46:d1:53:ad:0f:01:81:68:10:d4:f0:7b:89:6d:70: 1a:67:cd:5c:f8:0d:c8:80:8f:9b:3c:d3:42:15:98:64:dc:79: 44:f7:97:a4:f2:06:52:fa:6f:62:c6:99:f4:2b:d5:f9:83:b0: 30:b4:89:b0:98:49:7f:6f:4f:af:75:3b:c0:77:07:26:fb:a3: 85:aa:7b:f6 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB MjE0MzcyMjEwHhcNMjUxMjA5MDg1NDAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3ZTNhOC1iNDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1djiWd43Z+dLCEaGxJaxr0Z5n5+Qj6HD4fkoiZb9FVIlsaRhgzlyao7n0SmJ 55mqXeOVSAHmqLb3nINlYZcLiGvSV6W8ARIjB6VTrKbGxIK/RLU1rXDhORGh0m4/ R7Ci1e9vkrc52UW0IPXnEtLGY2FGysqWGlGaXc85iF88ul1C72msH1zzXYl674hW 0NJVyMIUoxYJuOTS0ClvveAbzzUvMucJnHj4IYfNpauKAnrPjk1+qufCXQzxbc2B lIlfXBjFsoYMPK6o5T5x/1xJ41YCRyJZHB8qvbRgjQcGO3LvPLVoLk86lnTneLjT nmF+cB+M8dcntU0IZzKs6Ip+RwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFN6n8CsW FBLvNj1aeCZVm2dMbG0CMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDAyNUEvRDVFRjFBOTAzMEFEMTFFQzk1QjE1RDE4QzRGOUFFMDIvN0Y4MTEzQjZE NERDMTFGMDkxQjVBMjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAVwbWADBARyH+ADBAR3/JADBAPKiegwDQQCAAIwBwMFACQF 4gAwDQYJKoZIhvcNAQELBQADggEBAGFouuVYimxtHQQ818XAGPXLQUuWC9hZhqSh tfH+Sot9Ebx6mk35nFf7GKwseD9Cj2QgsWl3CAzDFAA9Eiebql8JeY3k0kVHo6RB wka19w8APooGgDLoRGpVkgXIJBB9TJxwRTpgYMOGrwRz4NBo1rq5/p5V8FJqR+Ot 9AP4Vl6Ly9qMwLLedJHRe4cBvGAjFk9rc4PP83plDQMYSt7LwHq3NIfR4eMR9HvV v4sS8baDMtqa/mYB8UbRU60PAYFoENTwe4ltcBpnzVz4DciAj5s800IVmGTceUT3 l6TyBlL6b2LGmfQr1fmDsDC0ibCYSX9vT691O8B3Byb7o4Wqe/Y= -----END CERTIFICATE-----Generated at Tue Dec 23 02:01:56 2025 by rpki-client