This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa File: 9C193BAC08C511EDBC862E48C4F9AE02.roa (raw, json) Hash identifier: duKdaSAy3lZyijWEMsDKsNMUdFH6paWRdLfwaKH4jqk= Subject key identifier: CB:E9:1A:FD:17:9C:78:5B:02:6D:1F:71:20:55:57:7A:F2:3A:21:EA Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 3660 Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa Signing time: Tue 02 Dec 2025 14:41:46 +0000 ROA not before: Tue 02 Dec 2025 14:41:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137226 IP address blocks: 111.125.108.0/22 maxlen: 22 111.125.108.0/24 maxlen: 24 111.125.109.0/24 maxlen: 24 111.125.110.0/24 maxlen: 24 111.125.111.0/24 maxlen: 24 111.125.120.0/22 maxlen: 22 111.125.120.0/24 maxlen: 24 111.125.121.0/24 maxlen: 24 111.125.122.0/24 maxlen: 24 111.125.123.0/24 maxlen: 24 120.29.67.0/24 maxlen: 24 120.29.70.0/23 maxlen: 24 120.29.81.0/24 maxlen: 24 120.29.83.0/24 maxlen: 24 120.29.93.0/24 maxlen: 24 120.29.104.0/22 maxlen: 22 120.29.104.0/24 maxlen: 24 120.29.105.0/24 maxlen: 24 120.29.106.0/24 maxlen: 24 120.29.107.0/24 maxlen: 24 120.29.112.0/24 maxlen: 24 120.29.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13920 (0x3660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Dec 2 14:41:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692efaa9-f81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:a3:6d:f8:50:73:46:cf:06:1c:ee:34:5c: 24:fa:03:e6:0b:c8:a3:76:51:c5:76:9c:54:f5:31: 64:bc:5e:54:3c:b0:41:06:42:1e:ac:d9:7f:70:93: 1f:68:ae:5e:96:ed:bd:cd:dc:9b:21:ef:c6:01:89: d6:2e:5a:83:9e:66:03:21:f4:6a:25:0f:16:ee:e9: 94:07:2b:bd:59:55:8d:dd:e7:91:c6:06:f1:dd:6a: ed:0d:78:46:1b:bb:77:9a:41:46:45:d1:09:d7:74: 1c:c5:12:d2:0b:6d:1f:5b:a0:ef:28:e9:71:6d:b1: 82:67:b1:71:31:63:cd:62:dc:92:0b:3e:f9:ed:89: 89:e2:c4:90:5c:de:35:8c:67:01:7d:27:30:ac:28: 6f:d5:4b:c4:c1:d0:ef:ad:ee:3b:29:f7:93:08:a5: 87:6c:af:26:11:50:c4:0e:6e:7c:89:44:d0:31:8e: d2:85:a1:a4:ef:6e:0a:ed:39:c3:ba:f0:d0:bb:51: b5:f4:ef:54:69:8a:2c:2a:0c:3d:87:c5:13:1d:7b: 25:73:d9:d2:38:c7:ca:4d:ea:26:ab:fe:cb:23:d5: 98:e2:dd:54:3d:68:a1:78:20:11:a5:b2:54:68:ef: 64:a6:86:d7:f5:69:75:f8:b8:71:44:82:31:b1:47: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E9:1A:FD:17:9C:78:5B:02:6D:1F:71:20:55:57:7A:F2:3A:21:EA X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.125.108.0/22 111.125.120.0/22 120.29.67.0/24 120.29.70.0/23 120.29.81.0/24 120.29.83.0/24 120.29.93.0/24 120.29.104.0/22 120.29.112.0/24 120.29.117.0/24 Signature Algorithm: sha256WithRSAEncryption 90:e0:9d:1f:29:ab:92:8a:46:cd:ec:d0:e3:f6:b0:55:1b:be: df:9a:cf:cf:1c:92:99:f0:e9:a3:18:c2:89:f0:7e:85:51:28: f2:60:f1:0f:1d:c2:8d:65:9a:4f:44:51:2d:74:26:21:f8:eb: e0:f0:15:e6:24:56:7c:b7:b3:54:39:2b:4b:66:b2:36:30:94: 5e:94:1c:cc:57:1d:13:4f:6f:40:fd:06:e6:18:60:ca:f5:fc: aa:3b:67:da:c0:03:a6:22:64:da:54:49:f9:6b:5f:9a:8b:45: f3:7d:e5:21:19:e2:44:77:74:f9:04:76:3f:19:d0:c6:f7:c0: 52:67:02:3e:b1:17:b8:37:83:b8:d4:9a:02:70:c3:81:ca:4c: 36:ce:c8:2c:34:9d:3f:4a:e1:1f:b7:90:43:20:e2:1d:9e:a5: ab:6b:04:34:5c:27:b5:bd:c5:17:81:82:e1:5c:c4:e3:f5:43: 2e:1e:ef:b7:4a:64:54:df:24:6a:6e:ef:a2:57:c7:4a:4c:a8: 8a:9b:14:21:ea:04:95:e8:19:28:a5:0b:d2:7f:1f:48:1f:13: cd:58:15:80:48:77:cf:c4:14:fa:b9:7b:3a:98:1c:a6:3e:37: 26:d1:17:e8:7e:ea:11:bf:66:f9:36:3b:02:3e:1e:f8:39:a3: eb:e0:b2:4f -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICNmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjUxMjAyMTQ0MTQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJlZmFhOS1mODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutGjbfhQc0bPBhzuNFwk+gPmC8ijdlHFdpxU9TFkvF5UPLBBBkIerNl/cJMf aK5elu29zdybIe/GAYnWLlqDnmYDIfRqJQ8W7umUByu9WVWN3eeRxgbx3WrtDXhG G7t3mkFGRdEJ13QcxRLSC20fW6DvKOlxbbGCZ7FxMWPNYtySCz757YmJ4sSQXN41 jGcBfScwrChv1UvEwdDvre47KfeTCKWHbK8mEVDEDm58iUTQMY7ShaGk724K7TnD uvDQu1G19O9UaYosKgw9h8UTHXslc9nSOMfKTeomq/7LI9WY4t1UPWiheCARpbJU aO9kpobX9Wl1+LhxRIIxsUesJQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFMvpGv0X nHhbAm0fcSBVV3ryOiHqMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvOUMxOTNCQUMw OEM1MTFFREJDODYyRTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E RjBEMEIEAgABMDwDBAJvfWwDBAJvfXgDBAB4HUMDBAF4HUYDBAB4HVEDBAB4HVMD BAB4HV0DBAJ4HWgDBAB4HXADBAB4HXUwDQYJKoZIhvcNAQELBQADggEBAJDgnR8p q5KKRs3s0OP2sFUbvt+az88ckpnw6aMYwonwfoVRKPJg8Q8dwo1lmk9EUS10JiH4 6+DwFeYkVny3s1Q5K0tmsjYwlF6UHMxXHRNPb0D9BuYYYMr1/Ko7Z9rAA6YiZNpU SflrX5qLRfN95SEZ4kR3dPkEdj8Z0Mb3wFJnAj6xF7g3g7jUmgJww4HKTDbOyCw0 nT9K4R+3kEMg4h2epatrBDRcJ7W9xReBguFcxOP1Qy4e77dKZFTfJGpu76JXx0pM qIqbFCHqBJXoGSilC9J/H0gfE81YFYBId8/EFPq5ezqYHKY+NybRF+h+6hG/Zvk2 OwI+Hvg5o+vgsk8= -----END CERTIFICATE-----Generated at Sun Dec 7 23:44:05 2025 by rpki-client