This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/8EA99A70B53311F09D886D26C4F9AE02.roa File: 8EA99A70B53311F09D886D26C4F9AE02.roa (raw, json) Hash identifier: EvmYF48T0Vnc/1ZgB1IqFG/4zkh2TOgaxoDK/mhEVBA= Subject key identifier: E6:25:86:B7:D0:C6:0C:26:AB:8E:71:7C:3E:CD:7A:03:64:6E:7B:C4 Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Certificate serial: 26 Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/8EA99A70B53311F09D886D26C4F9AE02.roa Signing time: Wed 19 Nov 2025 05:53:36 +0000 ROA not before: Wed 19 Nov 2025 05:53:36 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 136167 IP address blocks: 74.119.64.0/21 maxlen: 21 74.119.64.0/22 maxlen: 22 74.119.64.0/24 maxlen: 24 74.119.65.0/24 maxlen: 24 74.119.66.0/24 maxlen: 24 74.119.67.0/24 maxlen: 24 74.119.68.0/22 maxlen: 22 74.119.68.0/24 maxlen: 24 74.119.69.0/24 maxlen: 24 74.119.70.0/24 maxlen: 24 74.119.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Validity Not Before: Nov 19 05:53:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691d5b5f-d4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fd:17:97:5c:42:0c:50:9b:96:c7:54:22:9c: 2a:19:ce:8c:38:42:0f:16:85:84:cd:43:cf:52:2f: 2e:46:ba:eb:42:14:b6:ce:01:02:67:de:52:f6:05: 3c:d4:df:9b:14:1a:4b:3f:19:83:0b:6b:d8:f1:91: e1:68:c6:52:f0:40:18:52:64:71:2b:fb:77:b1:15: a7:78:fd:7b:9c:de:f3:fd:42:25:4d:d8:c9:86:68: 99:0b:9f:53:e9:81:93:c4:af:a7:a4:ae:39:7e:39: 66:c3:a0:b4:f5:9d:3b:03:ce:fd:2b:a2:0b:9c:04: 0c:77:7d:a3:d6:6b:14:be:fb:79:86:01:a0:ba:25: 97:43:b8:b5:07:56:d8:0a:ae:7c:2d:04:00:a5:b7: a3:09:a2:29:77:e7:bb:0d:e1:06:d9:cb:9c:8f:c9: 8a:bd:d5:73:16:9c:0a:92:88:07:8c:c9:98:94:c9: d6:e6:51:86:a5:5b:bd:b6:91:ed:51:d8:3e:05:43: 3c:d9:c1:3a:27:1f:ee:d1:76:2c:cb:e2:f2:47:4a: 6f:9e:0b:6b:a8:60:07:cd:42:54:75:e0:3a:02:48: 4f:7e:25:00:22:5c:44:c7:9a:7c:3e:f3:4a:c5:4f: 6a:21:18:9e:5c:50:d4:3d:51:a2:4e:31:f7:c4:d3: 87:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:25:86:B7:D0:C6:0C:26:AB:8E:71:7C:3E:CD:7A:03:64:6E:7B:C4 X509v3 Authority Key Identifier: keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/8EA99A70B53311F09D886D26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 74.119.64.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:d5:92:c3:5c:44:b7:cd:99:5a:83:3b:7f:77:19:4d:6d:4e: 83:ba:ec:df:b5:3b:de:4c:12:ef:f3:7c:06:38:6a:06:cf:24: 11:8b:95:f7:81:d5:77:9a:cd:47:ad:f9:2e:31:5b:1a:91:a4: d2:3f:64:2e:cc:05:e7:be:ab:db:52:ea:5e:73:35:f0:2b:e1: 94:1d:8a:6d:1a:11:6f:48:41:96:64:65:06:0c:fa:6b:11:12: 12:85:4a:a4:ac:41:db:40:e8:07:58:c7:86:bf:68:ae:56:0e: 39:52:8b:d8:80:b8:5f:f5:0c:e6:68:71:51:b7:a5:1e:fb:c0: 75:45:b2:4f:47:a5:97:d6:56:9c:1d:72:36:3c:35:bb:1d:30: 45:46:f5:fe:91:c8:da:6f:63:fd:77:16:dd:96:fc:73:4e:ab: 3e:6e:d7:ad:ec:3d:87:99:61:95:d1:29:27:3d:0b:3e:27:c8: e9:4f:15:06:92:f2:6c:9d:fc:16:a6:14:1f:b4:cd:c8:13:83: 22:59:8b:8e:18:bd:01:90:9f:ca:fb:be:54:6b:20:c7:cb:5c: cc:e9:b2:a1:18:e8:cf:1e:98:42:0c:e3:ce:d0:c1:f6:a7:7e: d8:8f:1c:8c:7a:fb:83:fd:cb:75:77:94:d7:fa:54:01:21:69: f0:bf:c6:4b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2NzQxNDVGNkM1 OEY4M0NENTAeFw0yNTExMTkwNTUzMzZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWQ1YjVmLWQ0YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl/ReXXEIMUJuWx1QinCoZzow4Qg8WhYTNQ89SLy5GuutCFLbOAQJn3lL2BTzU 35sUGks/GYMLa9jxkeFoxlLwQBhSZHEr+3exFad4/Xuc3vP9QiVN2MmGaJkLn1Pp gZPEr6ekrjl+OWbDoLT1nTsDzv0rogucBAx3faPWaxS++3mGAaC6JZdDuLUHVtgK rnwtBAClt6MJoil357sN4QbZy5yPyYq91XMWnAqSiAeMyZiUydbmUYalW722ke1R 2D4FQzzZwTonH+7RdizL4vJHSm+eC2uoYAfNQlR14DoCSE9+JQAiXETHmnw+80rF T2ohGJ5cUNQ9UaJOMffE04evAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5iWGt9DG DCarjnF8Ps16A2Rue8QwHwYDVR0jBBgwFoAURH1Zg78NuRGtj9y2dBRfbFj4PNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxLzMyRUUwQTZFOTlF OTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkgxWmc3OE51Ukd0ajl5MmRCUmZiRmo0UE5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIwMS8zMkVFMEE2RTk5RTkxMUYwOTc4RDQwNzJDNEY5QUUwMi84RUE5OUE3MEI1 MzMxMUYwOUQ4ODZEMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA0p3QDANBgkqhkiG9w0BAQsFAAOCAQEAXNWSw1xEt82ZWoM7 f3cZTW1Og7rs37U73kwS7/N8BjhqBs8kEYuV94HVd5rNR635LjFbGpGk0j9kLswF 576r21LqXnM18CvhlB2KbRoRb0hBlmRlBgz6axESEoVKpKxB20DoB1jHhr9orlYO OVKL2IC4X/UM5mhxUbelHvvAdUWyT0ell9ZWnB1yNjw1ux0wRUb1/pHI2m9j/XcW 3Zb8c06rPm7Xrew9h5lhldEpJz0LPifI6U8VBpLybJ38FqYUH7TNyBODIlmLjhi9 AZCfyvu+VGsgx8tczOmyoRjozx6YQgzjztDB9qd+2I8cjHr7g/3LdXeU1/pUASFp 8L/GSw== -----END CERTIFICATE-----Generated at Wed Dec 3 15:51:18 2025 by rpki-client