This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/D4EB3054E66811ECA007390EC4F9AE02.roa File: D4EB3054E66811ECA007390EC4F9AE02.roa (raw, json) Hash identifier: zd2Mp+JliwOB/WE8I35a0tiSuKliGO1s4BV4PHkpP1k= Subject key identifier: 70:E5:D7:C5:FF:4D:98:AD:26:7E:60:E2:5B:65:3E:03:D1:BB:85:EB Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 2514 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/D4EB3054E66811ECA007390EC4F9AE02.roa Signing time: Wed 10 Dec 2025 02:09:09 +0000 ROA not before: Wed 10 Dec 2025 02:09:09 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131207 IP address blocks: 96.9.64.0/23 maxlen: 23 96.9.64.0/24 maxlen: 24 96.9.65.0/24 maxlen: 24 96.9.66.0/23 maxlen: 23 96.9.66.0/24 maxlen: 24 96.9.67.0/24 maxlen: 24 96.9.68.0/23 maxlen: 23 96.9.68.0/24 maxlen: 24 96.9.69.0/24 maxlen: 24 96.9.70.0/23 maxlen: 23 96.9.70.0/24 maxlen: 24 96.9.71.0/24 maxlen: 24 96.9.72.0/23 maxlen: 23 96.9.72.0/24 maxlen: 24 96.9.73.0/24 maxlen: 24 96.9.74.0/23 maxlen: 23 96.9.74.0/24 maxlen: 24 96.9.75.0/24 maxlen: 24 96.9.76.0/23 maxlen: 23 96.9.76.0/24 maxlen: 24 96.9.77.0/24 maxlen: 24 96.9.78.0/23 maxlen: 23 96.9.78.0/24 maxlen: 24 96.9.79.0/24 maxlen: 24 96.9.80.0/23 maxlen: 23 96.9.80.0/24 maxlen: 24 96.9.81.0/24 maxlen: 24 96.9.82.0/23 maxlen: 23 96.9.82.0/24 maxlen: 24 96.9.83.0/24 maxlen: 24 96.9.84.0/23 maxlen: 23 96.9.84.0/24 maxlen: 24 96.9.85.0/24 maxlen: 24 96.9.86.0/23 maxlen: 23 96.9.86.0/24 maxlen: 24 96.9.87.0/24 maxlen: 24 96.9.88.0/23 maxlen: 23 96.9.88.0/24 maxlen: 24 96.9.89.0/24 maxlen: 24 96.9.90.0/23 maxlen: 23 96.9.90.0/24 maxlen: 24 96.9.91.0/24 maxlen: 24 96.9.92.0/23 maxlen: 23 96.9.92.0/24 maxlen: 24 96.9.93.0/24 maxlen: 24 96.9.94.0/23 maxlen: 23 96.9.94.0/24 maxlen: 24 96.9.95.0/24 maxlen: 24 136.228.128.0/23 maxlen: 23 136.228.128.0/24 maxlen: 24 136.228.129.0/24 maxlen: 24 136.228.130.0/23 maxlen: 23 136.228.130.0/24 maxlen: 24 136.228.131.0/24 maxlen: 24 136.228.132.0/23 maxlen: 24 136.228.134.0/23 maxlen: 24 136.228.136.0/22 maxlen: 22 136.228.136.0/24 maxlen: 24 136.228.137.0/24 maxlen: 24 136.228.138.0/24 maxlen: 24 136.228.139.0/24 maxlen: 24 136.228.140.0/23 maxlen: 23 136.228.140.0/24 maxlen: 24 136.228.141.0/24 maxlen: 24 136.228.142.0/23 maxlen: 23 136.228.142.0/24 maxlen: 24 136.228.143.0/24 maxlen: 24 136.228.144.0/23 maxlen: 23 136.228.145.0/24 maxlen: 24 136.228.146.0/23 maxlen: 23 136.228.146.0/24 maxlen: 24 136.228.147.0/24 maxlen: 24 136.228.148.0/23 maxlen: 23 136.228.148.0/24 maxlen: 24 136.228.149.0/24 maxlen: 24 136.228.150.0/23 maxlen: 23 136.228.150.0/24 maxlen: 24 136.228.151.0/24 maxlen: 24 136.228.152.0/23 maxlen: 23 136.228.154.0/23 maxlen: 23 136.228.156.0/23 maxlen: 23 136.228.156.0/24 maxlen: 24 136.228.157.0/24 maxlen: 24 136.228.158.0/23 maxlen: 23 136.228.158.0/24 maxlen: 24 136.228.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9492 (0x2514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Dec 10 02:09:09 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6938d644-c8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:44:54:3e:f0:98:47:b4:2b:cf:f9:c8:9a: 63:fe:7a:d2:02:4e:ff:21:fa:c5:dc:4e:07:e6:97: ea:33:b2:43:cb:cd:1f:4f:5d:e7:c8:fb:fb:e2:1b: f8:e3:2d:e2:82:54:27:cf:4b:bb:a4:f9:1d:ef:cc: 75:52:bc:3e:a1:a7:af:91:31:0e:38:05:a8:7b:ee: 21:44:f6:28:30:ec:f0:92:e3:0f:d9:39:3b:ed:03: f7:f1:e4:21:a3:68:2b:4e:e7:49:f1:c0:39:2f:e2: 9e:34:2b:91:02:19:87:93:aa:a0:ba:e7:2f:31:5c: 1c:f4:0d:c3:94:06:12:8d:6e:32:86:09:e2:61:b2: f8:16:ec:dc:50:cd:13:bf:96:6f:88:27:96:81:bd: b3:5f:15:9c:19:33:fb:a7:88:fb:c0:22:34:f6:c3: 65:20:9d:f9:b5:23:04:5d:b0:05:c5:16:cb:60:9a: 71:d3:7d:5b:ee:64:17:94:5f:0d:61:10:63:83:35: 51:57:59:da:12:4a:14:5e:32:ce:0b:fe:dd:7e:2c: bb:d3:32:33:d8:24:91:04:ad:5f:80:71:a7:53:61: ba:94:ac:cc:23:9d:95:3c:e0:92:07:2d:c0:d9:50: 99:70:e1:50:60:b6:bd:57:e0:70:88:05:f6:61:58: e3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E5:D7:C5:FF:4D:98:AD:26:7E:60:E2:5B:65:3E:03:D1:BB:85:EB X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/D4EB3054E66811ECA007390EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 96.9.64.0/19 136.228.128.0/19 Signature Algorithm: sha256WithRSAEncryption c7:c6:ad:ba:fe:38:66:45:60:11:47:5f:8e:02:91:2f:cd:33: 00:9c:1b:0b:ee:de:cd:96:5d:e5:5b:49:77:54:47:50:dc:d0: 03:3e:07:b9:ad:28:43:eb:31:5d:38:36:8d:fa:63:cd:c8:47: 6d:2e:cd:c9:f2:2d:7e:f8:6b:e8:7e:6b:84:2b:0d:e7:6e:b7: 46:a4:97:57:e8:8a:5a:96:9e:8b:be:33:7a:e9:0b:b6:fb:d9: b8:8a:d6:b0:68:d9:77:50:c9:d0:b9:8c:2c:6e:93:ae:fc:8c: 74:e3:56:3f:dc:da:09:4f:03:54:67:ff:95:d9:8e:58:d9:37: 38:3f:63:69:ab:d5:55:34:c1:39:9d:8f:70:d1:10:82:b6:66: 4e:b5:b2:f8:4a:aa:54:d8:54:2b:de:55:1a:1f:b4:99:aa:c1: 86:54:74:c6:e4:9a:75:35:09:b8:19:ba:83:29:84:a4:dc:a1: 5b:92:23:f1:35:66:64:57:80:c2:3d:37:06:63:ac:a6:85:0a: 9d:74:f6:0f:2b:24:f8:b8:cd:93:70:f9:17:90:27:05:db:6d: 90:72:ec:e9:55:86:65:db:ee:89:a7:9c:9f:26:2e:30:cd:da: e4:2d:42:e3:53:d3:d5:6d:bf:d9:e5:1f:d8:18:38:39:bb:b3: c0:75:87:b5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjUxMjEwMDIwOTA5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM4ZDY0NC1jOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwlEVD7wmEe0K8/5yJpj/nrSAk7/IfrF3E4H5pfqM7JDy80fT13nyPv74hv4 4y3iglQnz0u7pPkd78x1Urw+oaevkTEOOAWoe+4hRPYoMOzwkuMP2Tk77QP38eQh o2grTudJ8cA5L+KeNCuRAhmHk6qguucvMVwc9A3DlAYSjW4yhgniYbL4FuzcUM0T v5ZviCeWgb2zXxWcGTP7p4j7wCI09sNlIJ35tSMEXbAFxRbLYJpx031b7mQXlF8N YRBjgzVRV1naEkoUXjLOC/7dfiy70zIz2CSRBK1fgHGnU2G6lKzMI52VPOCSBy3A 2VCZcOFQYLa9V+BwiAX2YVjj4wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHDl18X/ TZitJn5g4ltlPgPRu4XrMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE5NTgvRkRFRkQ3MzY0QkQ2MTFFNUE3Q0EzMDMzQzRGOUFFMDIvRDRFQjMwNTRF NjY4MTFFQ0EwMDczOTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAVgCUADBAWI5IAwDQYJKoZIhvcNAQELBQADggEBAMfGrbr+ OGZFYBFHX44CkS/NMwCcGwvu3s2WXeVbSXdUR1Dc0AM+B7mtKEPrMV04No36Y83I R20uzcnyLX74a+h+a4QrDedut0akl1foilqWnou+M3rpC7b72biK1rBo2XdQydC5 jCxuk678jHTjVj/c2glPA1Rn/5XZjljZNzg/Y2mr1VU0wTmdj3DREIK2Zk61svhK qlTYVCveVRoftJmqwYZUdMbkmnU1CbgZuoMphKTcoVuSI/E1ZmRXgMI9NwZjrKaF Cp109g8rJPi4zZNw+ReQJwXbbZBy7OlVhmXb7omnnJ8mLjDN2uQtQuNT09Vtv9nl H9gYODm7s8B1h7U= -----END CERTIFICATE-----Generated at Sat Dec 20 14:05:48 2025 by rpki-client