This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa File: 63EBB7C6DDD311E8B6169878C4F9AE02.roa (raw, json) Hash identifier: 1W3Eop/WJA9XmkFPb3WEIJ0R0+Z6g2p0pd8jQCSNSxU= Subject key identifier: 97:26:F1:33:B9:41:86:4B:7F:7F:03:38:5C:DE:1B:6D:E7:CE:87:EF Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2B28 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa Signing time: Fri 02 Jan 2026 16:13:50 +0000 ROA not before: Fri 02 Jan 2026 16:13:50 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 55476 IP address blocks: 202.80.233.0/24 maxlen: 24 2405:9800:c909::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11048 (0x2b28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Jan 2 16:13:50 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6957eebd-9657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:f7:53:be:59:f9:5c:ad:dc:cb:5a:47:b6: 5b:9c:b2:a8:11:d2:09:fd:15:56:56:3c:6e:ae:f8: d8:8f:2d:b9:d9:dc:46:8f:ee:ed:aa:bd:93:f5:82: 69:89:87:36:8d:64:21:1c:94:07:87:77:e4:db:d9: da:26:24:10:ee:80:60:64:aa:37:42:72:b4:73:4a: 3b:1b:8d:5c:c1:90:6d:10:af:8a:fe:e3:5c:3f:f1: 8a:2f:93:85:87:11:ce:89:ff:6f:f8:fd:7c:20:61: ec:40:1a:36:80:18:03:f3:ad:51:a9:d5:1f:f1:08: 11:dd:91:e1:b8:a5:1b:bb:96:6d:94:8f:35:da:39: fb:10:d6:b1:21:3a:34:df:12:03:80:e7:4d:8a:af: 50:ca:b3:d4:ef:10:a5:44:3d:f6:97:af:3e:78:54: 52:df:ab:42:67:8d:9a:51:e8:a5:e5:1c:ad:3f:37: 6f:28:b9:b9:73:bc:2f:d0:0e:6b:7f:fb:e5:4c:30: 1e:10:8f:82:2d:33:ac:cd:26:89:4e:15:9e:6d:be: 83:bb:06:5e:ae:b9:78:00:b8:b7:d0:d7:00:44:c7: 58:99:58:0b:20:95:7c:c2:82:8c:32:f1:62:c9:48: 8c:7a:10:31:f4:a2:1e:89:4e:7f:23:2d:89:a2:56: 4b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:26:F1:33:B9:41:86:4B:7F:7F:03:38:5C:DE:1B:6D:E7:CE:87:EF X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/63EBB7C6DDD311E8B6169878C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.80.233.0/24 IPv6: 2405:9800:c909::/48 Signature Algorithm: sha256WithRSAEncryption 7a:73:a3:b4:7d:58:3e:40:98:70:97:b2:9c:75:64:d2:38:12: c3:a8:f8:9f:f5:0c:4c:a0:74:1a:9b:f9:8c:3d:dd:b8:95:7d: ec:2b:d8:80:d8:3d:04:50:11:cf:0b:bd:e8:23:db:b0:5c:e2: d3:a1:4b:2f:b0:72:93:9b:56:b9:28:72:5f:af:c9:9b:e1:97: a3:fc:d7:b7:46:a3:53:4e:cb:e3:d9:db:ad:07:51:b1:be:bc: 75:6b:f9:f0:ea:1f:9b:52:7e:e4:04:47:8c:76:1a:98:9f:c2: 4e:86:32:67:f4:35:84:d2:0c:e3:12:9d:b6:09:27:c6:64:84: 23:17:78:02:10:4a:97:47:54:c4:0c:4c:ec:97:0c:59:d3:cf: 1e:8b:dd:f6:fa:6c:5d:84:ca:a8:f5:bb:3b:b7:46:fc:fa:f7: ad:31:08:8b:f1:1e:a8:9d:1b:c4:55:97:ef:16:4b:8a:fa:2f: 91:24:8b:ff:8f:c4:a4:a4:ff:c8:7c:33:87:5b:e8:8e:1d:80: c6:af:47:d2:61:4e:3f:16:0f:ee:9d:5e:14:86:7b:38:e2:35: c2:07:3d:99:2e:31:07:5c:4a:7d:da:77:20:6f:6f:1a:df:5e: 03:f8:92:61:df:20:95:b1:5e:19:f0:3a:5b:66:45:06:d3:94: 71:dd:98:28 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICKygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzUwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU3ZWViZC05NjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5H3U75Z+Vyt3MtaR7ZbnLKoEdIJ/RVWVjxurvjYjy252dxGj+7tqr2T9YJp iYc2jWQhHJQHh3fk29naJiQQ7oBgZKo3QnK0c0o7G41cwZBtEK+K/uNcP/GKL5OF hxHOif9v+P18IGHsQBo2gBgD861RqdUf8QgR3ZHhuKUbu5ZtlI812jn7ENaxITo0 3xIDgOdNiq9QyrPU7xClRD32l68+eFRS36tCZ42aUeil5RytPzdvKLm5c7wv0A5r f/vlTDAeEI+CLTOszSaJThWebb6DuwZerrl4ALi30NcARMdYmVgLIJV8woKMMvFi yUiMehAx9KIeiU5/Iy2JolZL9QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJcm8TO5 QYZLf38DOFzeG23nzofvMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNjNFQkI3QzZE REQzMTFFOEI2MTY5ODc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKUOkwDwQCAAIwCQMHACQFmADJCTANBgkqhkiG9w0BAQsF AAOCAQEAenOjtH1YPkCYcJeynHVk0jgSw6j4n/UMTKB0Gpv5jD3duJV97CvYgNg9 BFARzwu96CPbsFzi06FLL7Byk5tWuShyX6/Jm+GXo/zXt0ajU07L49nbrQdRsb68 dWv58Oofm1J+5ARHjHYamJ/CToYyZ/Q1hNIM4xKdtgknxmSEIxd4AhBKl0dUxAxM 7JcMWdPPHovd9vpsXYTKqPW7O7dG/Pr3rTEIi/EeqJ0bxFWX7xZLivovkSSL/4/E pKT/yHwzh1vojh2Axq9H0mFOPxYP7p1eFIZ7OOI1wgc9mS4xB1xKfdp3IG9vGt9e A/iSYd8glbFeGfA6W2ZFBtOUcd2YKA== -----END CERTIFICATE-----Generated at Wed Jan 21 03:10:40 2026 by rpki-client