This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa File: 844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa (raw, json) Hash identifier: Yw6ZuiJeC8Mavl39v/EwJocsSi81feSpdUyN6IpOvvo= Subject key identifier: 06:F1:E2:23:A8:06:32:D0:93:B8:6A:5F:E6:7F:15:E9:27:98:A1:5F Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 3389 Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa Signing time: Wed 24 Dec 2025 16:12:48 +0000 ROA not before: Wed 24 Dec 2025 16:12:48 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 24482 IP address blocks: 49.213.16.0/20 maxlen: 21 49.213.20.0/24 maxlen: 24 49.213.28.0/22 maxlen: 22 103.14.244.0/22 maxlen: 24 116.251.208.0/20 maxlen: 22 116.251.208.0/24 maxlen: 24 116.251.209.0/24 maxlen: 24 116.251.210.0/24 maxlen: 24 116.251.211.0/24 maxlen: 24 116.251.212.0/24 maxlen: 24 116.251.213.0/24 maxlen: 24 116.251.214.0/24 maxlen: 24 116.251.215.0/24 maxlen: 24 116.251.216.0/24 maxlen: 24 116.251.217.0/24 maxlen: 24 116.251.218.0/24 maxlen: 24 116.251.219.0/24 maxlen: 24 116.251.220.0/24 maxlen: 24 116.251.221.0/24 maxlen: 24 116.251.222.0/24 maxlen: 24 116.251.223.0/24 maxlen: 24 124.6.32.0/20 maxlen: 20 124.6.32.0/20 maxlen: 24 124.6.32.0/22 maxlen: 22 124.6.32.0/24 maxlen: 24 124.6.33.0/24 maxlen: 24 124.6.34.0/24 maxlen: 24 124.6.35.0/24 maxlen: 24 124.6.36.0/22 maxlen: 22 124.6.36.0/24 maxlen: 24 124.6.37.0/24 maxlen: 24 124.6.38.0/24 maxlen: 24 124.6.39.0/24 maxlen: 24 124.6.40.0/22 maxlen: 22 124.6.40.0/24 maxlen: 24 124.6.41.0/24 maxlen: 24 124.6.42.0/24 maxlen: 24 124.6.43.0/24 maxlen: 24 124.6.44.0/22 maxlen: 22 124.6.44.0/24 maxlen: 24 124.6.45.0/24 maxlen: 24 124.6.46.0/24 maxlen: 24 124.6.47.0/24 maxlen: 24 124.6.48.0/21 maxlen: 24 163.47.176.0/22 maxlen: 24 203.175.160.0/20 maxlen: 24 2405:4200::/32 maxlen: 32 2405:4200::/32 maxlen: 48 2405:4200:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13193 (0x3389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Validity Not Before: Dec 24 16:12:48 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694c1100-8513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:fa:d3:d7:d5:eb:80:a4:dd:e1:76:05:bc: 91:91:3d:e8:f0:5f:e2:29:8e:c6:bb:9e:96:8c:ef: b6:71:02:6d:c0:e0:7c:9d:f2:dc:70:24:f8:66:16: cf:51:c0:4b:fd:9b:bf:0d:30:4f:d5:62:f6:f1:30: 96:1e:54:48:13:e3:c0:01:6f:00:47:da:30:93:f6: d9:e7:24:1d:bd:8e:a7:69:48:9f:14:d3:bd:2c:05: 48:d6:d0:c8:24:82:be:df:c3:e0:63:c5:f7:56:96: 62:ff:ff:61:d5:a3:f5:ca:e4:79:db:50:a7:4e:78: 3f:1d:de:5e:8c:7f:3d:82:c4:da:3e:5a:5e:c1:4c: 6d:3b:1d:1d:31:8d:9f:b2:67:4f:2c:43:dc:59:50: a3:41:fe:be:54:0c:63:f1:2d:1d:1a:64:c4:ab:68: 17:c0:c0:90:69:08:a9:31:de:41:84:c8:2b:ac:d4: 7e:3c:e7:7f:63:22:93:cf:56:28:6a:52:c4:14:23: ae:87:9d:78:ef:da:96:43:5f:03:b7:d8:f9:98:d0: e7:fb:f4:65:d5:2c:e2:bf:f8:82:ff:16:57:83:c5: 82:d8:6b:a2:12:0c:9f:ea:2b:70:34:88:64:f7:71: 28:b7:6d:48:9b:fd:ae:58:d0:0a:b5:ed:25:17:41: ce:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F1:E2:23:A8:06:32:D0:93:B8:6A:5F:E6:7F:15:E9:27:98:A1:5F X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/844CFD1C5BAA11EFBAF22B7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.213.16.0/20 103.14.244.0/22 116.251.208.0/20 124.6.32.0-124.6.55.255 163.47.176.0/22 203.175.160.0/20 IPv6: 2405:4200::/32 Signature Algorithm: sha256WithRSAEncryption 2b:4b:0c:2e:f1:65:e0:a0:b4:39:97:96:3d:35:e0:1d:ad:b9: 3d:96:1a:95:f9:b1:ef:35:00:fd:dd:3b:27:d6:6c:be:f4:3f: 75:46:40:77:79:4b:c0:2d:c2:42:a3:30:0c:ee:ed:63:4a:10: 89:18:40:dc:98:d3:a1:97:c7:1f:57:51:6e:c7:6a:84:02:bb: 2e:71:45:de:d4:ee:8a:5a:6e:29:9e:d7:3b:05:28:e7:0c:a3: c6:ed:5d:d7:42:32:17:74:cb:b6:16:3d:c9:6e:33:4c:f2:b0: ac:29:c5:f1:93:5a:c3:16:8c:94:db:24:4d:36:65:fa:6e:d2: d0:7f:d3:53:61:2b:76:8c:e3:cf:54:ef:1c:b8:f9:e8:d2:87: a1:26:cd:24:1e:bb:18:ea:8b:96:e6:1d:9b:8e:fd:d6:12:62: e3:ec:a3:f6:63:c3:66:6a:0e:9e:21:cf:55:65:5f:b0:4d:47: c2:11:c5:c6:8c:26:4c:76:5c:9a:8b:be:69:ad:03:d4:24:b4: a1:da:48:b9:f0:5f:34:51:bb:6f:9f:bf:8d:04:f0:0f:44:ce: 0e:7e:04:53:7f:66:16:0e:f7:56:b5:42:ca:54:86:86:b2:a0: a9:0e:3a:a7:d0:5f:ff:35:1f:72:dd:89:08:54:43:0c:b4:b6: b5:7b:a8:ab -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgICM4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjUxMjI0MTYxMjQ4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRjMTEwMC04NTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiR3609fV64Ck3eF2BbyRkT3o8F/iKY7Gu56WjO+2cQJtwOB8nfLccCT4ZhbP UcBL/Zu/DTBP1WL28TCWHlRIE+PAAW8AR9owk/bZ5yQdvY6naUifFNO9LAVI1tDI JIK+38PgY8X3VpZi//9h1aP1yuR521CnTng/Hd5ejH89gsTaPlpewUxtOx0dMY2f smdPLEPcWVCjQf6+VAxj8S0dGmTEq2gXwMCQaQipMd5BhMgrrNR+POd/YyKTz1Yo alLEFCOuh51479qWQ18Dt9j5mNDn+/Rl1Sziv/iC/xZXg8WC2GuiEgyf6itwNIhk 93Eot21Im/2uWNAKte0lF0HOhwIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFAbx4iOo BjLQk7hqX+Z/FeknmKFfMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY4NjMvQkZFNTRBNjg4MTVCMTFFMjlCNThBNzNCMzI5MkI1RTgvODQ0Q0ZEMUM1 QkFBMTFFRkJBRjIyQjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E RTBDMDIEAgABMCwDBAQx1RADBAJnDvQDBAR0+9AwDAMEBXwGIAMEA3wGMAMEAqMv sAMEBMuvoDANBAIAAjAHAwUAJAVCADANBgkqhkiG9w0BAQsFAAOCAQEAK0sMLvFl 4KC0OZeWPTXgHa25PZYalfmx7zUA/d07J9ZsvvQ/dUZAd3lLwC3CQqMwDO7tY0oQ iRhA3JjToZfHH1dRbsdqhAK7LnFF3tTuilpuKZ7XOwUo5wyjxu1d10IyF3TLthY9 yW4zTPKwrCnF8ZNawxaMlNskTTZl+m7S0H/TU2Erdozjz1TvHLj56NKHoSbNJB67 GOqLluYdm4791hJi4+yj9mPDZmoOniHPVWVfsE1HwhHFxowmTHZcmou+aa0D1CS0 odpIufBfNFG7b5+/jQTwD0TODn4EU39mFg73VrVCylSGhrKgqQ46p9Bf/zUfct2J CFRDDLS2tXuoqw== -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:20 2025 by rpki-client