This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2A309FACEC2511F093ADEAD03D6F56BC.roa File: 2A309FACEC2511F093ADEAD03D6F56BC.roa (raw, json) Hash identifier: p3V1TkPkOKZZRgKf9ScjW2MsPaj6aSrEqMXWPTT5ufg= Subject key identifier: C3:F1:42:3C:D5:D6:E5:A9:1C:74:C5:6A:4B:BA:23:FA:DA:4E:AC:0F Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 196D Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2A309FACEC2511F093ADEAD03D6F56BC.roa Signing time: Thu 08 Jan 2026 00:01:21 +0000 ROA not before: Thu 08 Jan 2026 00:01:21 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 4826 IP address blocks: 14.137.106.0/24 maxlen: 24 27.106.200.0/22 maxlen: 22 43.241.188.0/22 maxlen: 22 43.252.252.0/22 maxlen: 22 49.255.0.0/16 maxlen: 16 49.255.233.0/24 maxlen: 24 49.255.255.0/24 maxlen: 24 103.37.120.0/24 maxlen: 24 103.233.148.0/22 maxlen: 22 103.255.16.0/22 maxlen: 22 110.5.116.0/22 maxlen: 22 114.31.192.0/20 maxlen: 20 116.212.192.0/18 maxlen: 18 116.212.204.0/24 maxlen: 24 116.212.230.0/23 maxlen: 24 116.212.253.0/24 maxlen: 24 119.161.64.0/20 maxlen: 20 119.161.80.0/20 maxlen: 20 121.54.128.0/19 maxlen: 19 121.54.128.0/20 maxlen: 20 121.54.136.0/24 maxlen: 24 121.54.145.0/24 maxlen: 24 121.79.0.0/17 maxlen: 17 123.103.192.0/19 maxlen: 19 124.254.64.0/18 maxlen: 18 124.254.64.0/24 maxlen: 24 124.254.95.0/24 maxlen: 24 124.254.96.0/24 maxlen: 24 175.45.64.0/18 maxlen: 18 175.45.73.0/24 maxlen: 24 175.45.78.0/24 maxlen: 24 175.45.82.0/24 maxlen: 24 175.45.83.0/24 maxlen: 24 175.45.85.0/24 maxlen: 24 175.45.92.0/24 maxlen: 24 175.45.94.0/23 maxlen: 23 175.45.99.0/24 maxlen: 24 175.45.100.0/24 maxlen: 24 175.45.101.0/24 maxlen: 24 175.45.105.0/24 maxlen: 24 175.45.111.0/24 maxlen: 24 180.148.64.0/19 maxlen: 19 180.148.76.0/24 maxlen: 24 180.148.77.0/24 maxlen: 24 180.148.83.0/24 maxlen: 24 180.148.84.0/24 maxlen: 24 180.148.95.0/24 maxlen: 24 202.62.138.0/24 maxlen: 24 202.62.139.0/24 maxlen: 24 202.62.141.0/24 maxlen: 24 202.62.142.0/24 maxlen: 24 202.62.147.0/24 maxlen: 24 202.62.152.0/24 maxlen: 24 202.62.153.0/24 maxlen: 24 202.62.154.0/24 maxlen: 24 202.62.155.0/24 maxlen: 24 202.80.176.0/20 maxlen: 20 202.89.160.0/19 maxlen: 19 202.136.32.0/20 maxlen: 20 202.137.96.0/20 maxlen: 20 202.137.192.0/21 maxlen: 21 202.174.224.0/19 maxlen: 19 202.189.64.0/20 maxlen: 20 202.189.72.0/24 maxlen: 24 202.189.73.0/24 maxlen: 24 203.12.251.0/24 maxlen: 24 203.16.170.0/24 maxlen: 24 203.18.212.0/23 maxlen: 23 203.23.116.0/24 maxlen: 24 203.28.186.0/24 maxlen: 24 203.29.177.0/24 maxlen: 24 203.55.11.0/24 maxlen: 24 203.55.250.0/24 maxlen: 24 203.89.64.0/19 maxlen: 19 203.89.80.0/24 maxlen: 24 203.89.92.0/24 maxlen: 24 203.92.28.0/22 maxlen: 22 203.129.128.0/19 maxlen: 19 203.153.224.0/19 maxlen: 19 203.153.226.0/24 maxlen: 24 203.161.64.0/18 maxlen: 18 203.188.128.0/19 maxlen: 19 210.50.198.0/24 maxlen: 24 211.26.193.0/24 maxlen: 24 218.100.80.0/22 maxlen: 22 223.27.96.0/21 maxlen: 21 2402:7800::/32 maxlen: 32 2402:7800:ff00::/40 maxlen: 40 2402:7800:ff00::/48 maxlen: 48 2402:7800:ff01::/48 maxlen: 48 2402:7800:ff20::/48 maxlen: 48 2402:7800:ff40::/44 maxlen: 44 2402:7800:ffe0::/48 maxlen: 48 2403:d600::/32 maxlen: 32 2403:fc00:300::/40 maxlen: 40 2404:b000::/32 maxlen: 32 2404:bc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6509 (0x196d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Jan 8 00:01:21 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=695ef3d1-9bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:86:13:e4:32:c1:f5:b2:9c:7e:a7:98:00: 16:2e:36:0b:63:c0:d2:ec:90:4b:20:a1:9b:bc:6a: 89:2c:14:07:3e:24:c1:c1:f1:5f:40:82:d5:ac:86: 9c:c2:3f:88:fb:e4:01:03:88:60:6c:44:45:5c:28: d0:34:c2:04:97:ce:23:2a:cc:03:d6:9d:19:df:bd: 61:62:1e:91:6e:56:18:2d:3e:3f:73:d1:1c:11:f7: 9e:0d:fe:ff:bc:b8:db:98:9c:9b:7a:f0:41:01:1b: 52:8d:49:d4:04:82:9f:72:14:f3:27:54:20:16:5b: 4f:38:4c:43:35:4e:08:ea:42:d5:96:1e:32:98:5b: 3c:09:8f:70:b4:4d:53:13:64:a4:3c:b0:4b:29:13: 7a:bc:be:5f:7e:d1:8d:80:74:62:35:d2:8a:d8:af: d9:0c:e8:31:13:ad:2f:77:66:8c:30:18:96:01:ad: 42:fe:a7:7b:8e:31:5f:ef:1a:70:92:54:61:3f:e2: d4:55:f9:fe:fc:c9:6a:03:b9:4f:0c:4c:fd:bf:fa: 78:91:28:ee:a5:8c:b7:70:df:81:ba:98:f9:e0:ce: fe:ec:e4:d9:26:53:d5:8f:db:11:20:c6:bb:ff:a8: 76:ff:3b:8a:ea:7f:5c:5c:b3:c2:c0:af:7f:ac:c1: f8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F1:42:3C:D5:D6:E5:A9:1C:74:C5:6A:4B:BA:23:FA:DA:4E:AC:0F X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2A309FACEC2511F093ADEAD03D6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.137.106.0/24 27.106.200.0/22 43.241.188.0/22 43.252.252.0/22 49.255.0.0/16 103.37.120.0/24 103.233.148.0/22 103.255.16.0/22 110.5.116.0/22 114.31.192.0/20 116.212.192.0/18 119.161.64.0/19 121.54.128.0/19 121.79.0.0/17 123.103.192.0/19 124.254.64.0/18 175.45.64.0/18 180.148.64.0/19 202.62.138.0/23 202.62.141.0-202.62.142.255 202.62.147.0/24 202.62.152.0/22 202.80.176.0/20 202.89.160.0/19 202.136.32.0/20 202.137.96.0/20 202.137.192.0/21 202.174.224.0/19 202.189.64.0/20 203.12.251.0/24 203.16.170.0/24 203.18.212.0/23 203.23.116.0/24 203.28.186.0/24 203.29.177.0/24 203.55.11.0/24 203.55.250.0/24 203.89.64.0/19 203.92.28.0/22 203.129.128.0/19 203.153.224.0/19 203.161.64.0/18 203.188.128.0/19 210.50.198.0/24 211.26.193.0/24 218.100.80.0/22 223.27.96.0/21 IPv6: 2402:7800::/32 2403:d600::/32 2403:fc00:300::/40 2404:b000::/32 2404:bc00::/32 Signature Algorithm: sha256WithRSAEncryption 86:ab:fa:70:fa:6a:8c:4f:14:0b:df:25:ba:83:7b:79:e3:c7: 50:2f:2b:36:a9:d2:54:45:13:7b:87:71:7c:6b:b9:cd:66:ea: 25:52:0e:b6:d1:3c:5d:56:30:f1:0b:84:34:48:ef:c5:dc:22: 70:2c:1c:03:5a:b7:4a:63:86:c4:45:73:4f:b8:b3:84:7b:f4: 38:f3:7d:48:a1:1f:f3:53:e6:a6:b6:fd:0a:6a:2c:10:1b:c6: 3c:fa:c5:40:41:39:64:46:a3:53:77:a4:f6:7a:4a:5b:f2:94: 37:12:17:16:9d:42:1c:6d:e2:46:dd:2c:e6:84:ea:b8:97:12: 4e:51:e2:aa:ac:68:82:a6:ad:14:35:fd:4f:e3:3c:4f:22:ac: 99:c4:f1:05:80:df:28:0b:5f:b3:c5:a8:cf:a7:08:aa:7c:15: 7f:c1:2e:7c:2f:03:be:be:40:74:0e:77:97:fb:c6:1b:83:be: 2b:71:38:1f:57:2b:48:60:37:80:2c:cc:45:be:0e:1f:71:27: 66:dc:3d:58:5f:1d:59:fb:3c:47:c8:9d:0a:81:01:d1:28:8a: 07:00:20:17:6b:79:2b:24:7f:77:5e:d1:ee:7e:c0:6c:00:d6: 52:94:cb:60:d7:0e:fb:d1:fb:44:dd:c9:89:6d:1d:72:50:59: 20:de:9c:2b -----BEGIN CERTIFICATE----- MIIGwjCCBaqgAwIBAgICGW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjYwMTA4MDAwMTIxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTVlZjNkMS05YmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkCGE+QywfWynH6nmAAWLjYLY8DS7JBLIKGbvGqJLBQHPiTBwfFfQILVrIac wj+I++QBA4hgbERFXCjQNMIEl84jKswD1p0Z371hYh6RblYYLT4/c9EcEfeeDf7/ vLjbmJybevBBARtSjUnUBIKfchTzJ1QgFltPOExDNU4I6kLVlh4ymFs8CY9wtE1T E2SkPLBLKRN6vL5fftGNgHRiNdKK2K/ZDOgxE60vd2aMMBiWAa1C/qd7jjFf7xpw klRhP+LUVfn+/MlqA7lPDEz9v/p4kSjupYy3cN+Bupj54M7+7OTZJlPVj9sRIMa7 /6h2/zuK6n9cXLPCwK9/rMH4KQIDAQABo4ID5jCCA+IwHQYDVR0OBBYEFMPxQjzV 1uWpHHTFaku6I/raTqwPMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvMkEzMDlGQUNF QzI1MTFGMDkzQURFQUQwM0Q2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFuBggrBgEFBQcBBwEB /wSCAV0wggFZMIIBKQQCAAEwggEhAwQADolqAwQCG2rIAwQCK/G8AwQCK/z8AwMA Mf8DBABnJXgDBAJn6ZQDBAJn/xADBAJuBXQDBARyH8ADBAZ01MADBAV3oUADBAV5 NoADBAd5TwADBAV7Z8ADBAZ8/kADBAavLUADBAW0lEADBAHKPoowDAMEAMo+jQME AMo+jgMEAMo+kwMEAso+mAMEBMpQsAMEBcpZoAMEBMqIIAMEBMqJYAMEA8qJwAME Bcqu4AMEBMq9QAMEAMsM+wMEAMsQqgMEAcsS1AMEAMsXdAMEAMscugMEAMsdsQME AMs3CwMEAMs3+gMEBctZQAMEAstcHAMEBcuBgAMEBcuZ4AMEBsuhQAMEBcu8gAME ANIyxgMEANMawQMEAtpkUAMEA98bYDAqBAIAAjAkAwUAJAJ4AAMFACQD1gADBgAk A/wAAwMFACQEsAADBQAkBLwAMA0GCSqGSIb3DQEBCwUAA4IBAQCGq/pw+mqMTxQL 3yW6g3t548dQLys2qdJURRN7h3F8a7nNZuolUg620TxdVjDxC4Q0SO/F3CJwLBwD WrdKY4bERXNPuLOEe/Q4831IoR/zU+amtv0KaiwQG8Y8+sVAQTlkRqNTd6T2ekpb 8pQ3EhcWnUIcbeJG3SzmhOq4lxJOUeKqrGiCpq0UNf1P4zxPIqyZxPEFgN8oC1+z xajPpwiqfBV/wS58LwO+vkB0DneX+8Ybg74rcTgfVytIYDeALMxFvg4fcSdm3D1Y Xx1Z+zxHyJ0KgQHRKIoHACAXa3krJH93XtHufsBsANZSlMtg1w770ftE3cmJbR1y UFkg3pwr -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:45 2026 by rpki-client