This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/B5960F8CB03111EEA45DE91DC4F9AE02.roa File: B5960F8CB03111EEA45DE91DC4F9AE02.roa (raw, json) Hash identifier: ho8mXIaMXg/kpiU3lPBhzCtAR5cs5yaLrSDXmN5oC7g= Subject key identifier: AE:93:7F:07:9E:69:90:78:61:1D:2B:40:AC:48:9B:7E:72:65:90:92 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 05CF Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/B5960F8CB03111EEA45DE91DC4F9AE02.roa Signing time: Mon 02 Feb 2026 23:19:38 +0000 ROA not before: Mon 02 Feb 2026 23:19:38 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 22822 IP address blocks: 111.119.0.0/22 maxlen: 22 111.119.2.0/23 maxlen: 24 111.119.4.0/22 maxlen: 22 111.119.5.0/24 maxlen: 24 111.119.6.0/24 maxlen: 24 111.119.7.0/24 maxlen: 24 111.119.16.0/23 maxlen: 23 111.119.16.0/24 maxlen: 24 111.119.17.0/24 maxlen: 24 111.119.20.0/23 maxlen: 23 111.119.20.0/24 maxlen: 24 111.119.21.0/24 maxlen: 24 111.119.22.0/23 maxlen: 23 111.119.22.0/24 maxlen: 24 111.119.23.0/24 maxlen: 24 111.119.24.0/21 maxlen: 24 117.121.248.0/21 maxlen: 24 203.9.176.0/21 maxlen: 24 203.77.184.0/22 maxlen: 22 203.77.184.0/24 maxlen: 24 203.77.185.0/24 maxlen: 24 203.77.186.0/24 maxlen: 24 203.77.187.0/24 maxlen: 24 203.77.188.0/22 maxlen: 22 203.77.188.0/23 maxlen: 24 203.77.190.0/24 maxlen: 24 203.77.191.0/24 maxlen: 24 2402:6800::/32 maxlen: 32 2402:6800:712::/48 maxlen: 48 2402:6800:720::/48 maxlen: 48 2402:6800:730::/48 maxlen: 48 2402:6800:780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Feb 2026 23:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Feb 2 23:19:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6981310a-d388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:6b:32:b1:72:f2:94:c1:1e:dd:58:36:4c: b5:d2:96:f7:14:19:9d:8c:f2:af:46:48:37:fd:38: ad:94:36:f6:d0:28:1d:52:ee:7d:b2:65:92:05:ab: f3:76:1a:40:3a:7b:30:e8:49:3d:c7:16:c5:74:27: d8:51:64:88:d9:ab:c6:6a:ca:5d:b6:a0:c6:e7:a4: b4:7a:f1:19:36:1c:69:f3:c3:3c:a5:99:44:af:ad: 50:ba:76:25:df:56:71:62:f3:46:df:37:41:95:de: 39:25:da:5f:88:98:cd:38:bb:ca:df:c6:3c:00:fa: f7:81:7b:16:63:62:1f:b7:88:a0:ae:fd:07:a6:f3: 27:b4:1a:70:06:70:f0:17:87:18:65:9e:7e:84:e4: e9:97:4e:6f:a4:24:1a:36:4a:86:fa:f9:32:b2:1d: 0a:34:11:d4:ee:ee:51:13:cd:b7:84:ec:90:99:e0: 58:d1:93:1e:17:f0:be:6c:35:10:5a:4a:fb:f6:e9: 18:8b:86:51:08:40:b5:27:b3:6f:04:d6:b0:41:d6: 75:04:17:db:06:fc:12:69:35:78:08:be:06:ec:a4: a6:5a:d1:a1:1d:03:3e:e7:96:d0:44:c5:50:70:b0: 77:b8:d5:f0:44:47:c0:f8:c5:38:36:36:62:e7:d3: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:93:7F:07:9E:69:90:78:61:1D:2B:40:AC:48:9B:7E:72:65:90:92 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/B5960F8CB03111EEA45DE91DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.119.0.0/21 111.119.16.0/23 111.119.20.0-111.119.31.255 117.121.248.0/21 203.9.176.0/21 203.77.184.0/21 IPv6: 2402:6800::/32 Signature Algorithm: sha256WithRSAEncryption 49:4f:a6:6c:a7:3a:cd:39:50:2e:98:9b:51:4c:50:96:db:a5: 16:92:ff:f0:f4:16:25:2c:16:ff:43:2d:bd:f5:bc:df:9b:84: ba:7c:46:79:3e:5e:9c:eb:2d:c3:7d:af:62:99:3d:e2:69:38: df:74:48:e6:0c:03:39:5d:99:16:ca:91:09:a6:41:98:d7:81: 6c:c2:83:62:81:a5:41:e1:39:e7:43:0e:61:97:e8:91:74:3f: 42:ce:6b:5b:a6:37:3e:d3:97:09:78:8a:c7:f8:e4:56:28:68: 07:a3:ad:20:cf:c6:9d:dc:8e:13:7b:af:81:ae:de:3e:00:de: 7a:b6:e7:b7:28:71:de:21:d0:46:f5:e4:42:53:97:df:5b:b8: 61:2b:08:02:7c:ac:53:6b:d3:ca:75:6a:fc:fc:d1:af:d6:70: 47:d7:46:88:1e:84:d8:f5:7b:62:27:06:d2:d8:78:d6:fd:d4: 56:c9:50:c5:2e:62:1a:4e:c4:08:f8:7e:ab:a0:ac:9e:ec:97: b6:d8:07:28:b0:25:8f:e5:98:3a:9f:de:b1:b8:aa:1b:42:fc: 13:a5:39:f9:3c:4c:26:da:81:37:9b:1b:37:49:4b:9b:03:7c: b6:0a:2f:a4:6c:5c:50:4a:e3:b3:f9:67:80:4a:ba:bd:d9:be: da:b8:ee:c8 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjYwMjAyMjMxOTM4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTgxMzEwYS1kMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiVrMrFy8pTBHt1YNky10pb3FBmdjPKvRkg3/TitlDb20CgdUu59smWSBavz dhpAOnsw6Ek9xxbFdCfYUWSI2avGaspdtqDG56S0evEZNhxp88M8pZlEr61QunYl 31ZxYvNG3zdBld45JdpfiJjNOLvK38Y8APr3gXsWY2Ift4igrv0HpvMntBpwBnDw F4cYZZ5+hOTpl05vpCQaNkqG+vkysh0KNBHU7u5RE823hOyQmeBY0ZMeF/C+bDUQ Wkr79ukYi4ZRCEC1J7NvBNawQdZ1BBfbBvwSaTV4CL4G7KSmWtGhHQM+55bQRMVQ cLB3uNXwREfA+MU4NjZi59NoGQIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFK6Tfwee aZB4YR0rQKxIm35yZZCSMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyNjgvQzc4RUJDRUEyMTkzMTFFQzkwMEM1NjUzQzRGOUFFMDIvQjU5NjBGOENC MDMxMTFFRUE0NURFOTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E RTBDMDIEAgABMCwDBANvdwADBAFvdxAwDAMEAm93FAMEBW93AAMEA3V5+AMEA8sJ sAMEA8tNuDANBAIAAjAHAwUAJAJoADANBgkqhkiG9w0BAQsFAAOCAQEASU+mbKc6 zTlQLpibUUxQltulFpL/8PQWJSwW/0MtvfW835uEunxGeT5enOstw32vYpk94mk4 33RI5gwDOV2ZFsqRCaZBmNeBbMKDYoGlQeE550MOYZfokXQ/Qs5rW6Y3PtOXCXiK x/jkVihoB6OtIM/GndyOE3uvga7ePgDeerbntyhx3iHQRvXkQlOX31u4YSsIAnys U2vTynVq/PzRr9ZwR9dGiB6E2PV7YicG0th41v3UVslQxS5iGk7ECPh+q6CsnuyX ttgHKLAlj+WYOp/esbiqG0L8E6U5+TxMJtqBN5sbN0lLmwN8tgovpGxcUErjs/ln gEq6vdm+2rjuyA== -----END CERTIFICATE-----Generated at Sat Feb 7 05:46:01 2026 by rpki-client