This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/58EF9BECC91911F080D34C6DC4F9AE02.roa File: 58EF9BECC91911F080D34C6DC4F9AE02.roa (raw, json) Hash identifier: j1lbvHYehq+WgCpoOKiItpNlLY8XBd6+Fc/mlE4o5Wc= Subject key identifier: 49:21:5D:7C:FF:1C:2D:AE:72:D4:8F:11:A9:21:91:D2:50:C7:1F:FB Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 3C Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/58EF9BECC91911F080D34C6DC4F9AE02.roa Signing time: Mon 24 Nov 2025 10:46:28 +0000 ROA not before: Mon 24 Nov 2025 10:46:28 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9835 IP address blocks: 202.139.202.0/24 maxlen: 24 202.139.203.0/24 maxlen: 24 2001:c38:90a1::/48 maxlen: 48 2001:c38:90a3::/48 maxlen: 48 2001:c38:90a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 10:46:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69243784-a1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:34:79:96:a6:f0:fa:bf:4b:51:fb:91:49: 29:cf:8d:33:f0:38:11:82:67:8f:f6:47:7e:f8:ca: e7:70:c4:5a:a1:54:db:2d:cf:cf:89:f5:ee:6b:4a: a1:8f:e2:43:d0:75:6e:6c:7f:2c:95:45:c1:a2:43: 61:cb:c9:c0:fc:aa:78:15:9e:ae:f9:d8:c4:cc:67: 86:33:a3:bd:2e:c4:7b:cc:c1:0f:4d:b8:69:2a:89: 1a:16:4f:01:74:89:17:3b:a4:9f:e3:ce:b0:df:ed: 0a:88:6d:10:ac:06:9a:db:3e:1a:60:ad:44:0b:15: c4:f6:7f:c8:83:94:8f:75:d9:9a:d0:c9:72:cf:9c: a4:2e:50:90:66:7c:d0:c1:a6:d0:0c:b8:59:ab:98: e9:90:31:97:59:9f:cc:9d:9a:0e:5d:4a:14:52:53: be:e5:3d:d9:42:d7:79:fa:f1:3b:f7:30:01:4b:20: df:8e:18:99:46:ed:4e:95:ed:9b:1b:35:34:a0:78: bc:fc:59:99:9f:d4:35:94:70:6f:55:17:f6:e5:e3: c7:96:a1:18:37:9f:75:4d:63:15:c5:bc:13:3c:b3: 2f:69:83:34:f7:da:bc:d6:1e:3d:3a:74:27:16:6d: 6a:a2:e8:15:ab:ce:c1:30:08:a9:52:4f:de:95:8a: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:21:5D:7C:FF:1C:2D:AE:72:D4:8F:11:A9:21:91:D2:50:C7:1F:FB X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/58EF9BECC91911F080D34C6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.139.202.0/23 IPv6: 2001:c38:90a1::/48 2001:c38:90a3::-2001:c38:90a4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ad:49:e5:7a:a6:b0:79:59:3b:b1:01:3d:d4:b0:b3:0a:b3:c7: 59:01:60:f4:de:ef:59:10:30:c9:0d:61:d2:3d:4d:5d:fe:ec: 08:9f:4f:78:1b:62:f4:f0:70:bc:8d:40:46:11:c2:4b:24:c8: d4:25:96:33:18:6f:c1:5c:87:bb:ad:70:5f:a5:3c:7f:90:40: 19:49:8c:d8:c9:27:f0:83:85:6a:36:f3:fd:a6:0e:7c:5a:80: 8f:a9:b3:ab:4d:9b:27:43:7f:47:b2:e4:77:16:ef:b9:b9:f7: 2b:2a:27:bf:ec:69:84:80:3c:13:ae:b4:e0:7b:28:63:b0:bb: f1:0c:ce:22:4c:b4:3a:42:84:cd:eb:ea:c0:e5:5e:51:c8:a4: a4:44:20:29:f9:b0:f9:a8:22:20:c5:e5:fc:46:1c:ed:22:2e: e2:da:ea:68:af:f7:a7:dc:4e:e1:34:76:f5:98:f2:a4:14:08: 06:ba:66:23:a5:a3:9c:f8:7e:8d:99:fa:ae:8a:6e:60:68:d9: 4a:45:22:23:ac:e7:1c:7b:f6:c8:21:9c:e6:3d:94:e2:6f:aa: e2:3e:46:79:58:07:d7:16:4f:1f:78:3e:b0:a3:13:bb:89:fa: cf:1f:46:7d:27:34:95:85:74:ba:08:32:20:d8:71:ae:3b:66: 01:da:a4:4a -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQxMDQ2MjhaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQzNzg0LWExZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhszR5lqbw+r9LUfuRSSnPjTPwOBGCZ4/2R374yudwxFqhVNstz8+J9e5rSqGP 4kPQdW5sfyyVRcGiQ2HLycD8qngVnq752MTMZ4Yzo70uxHvMwQ9NuGkqiRoWTwF0 iRc7pJ/jzrDf7QqIbRCsBprbPhpgrUQLFcT2f8iDlI912ZrQyXLPnKQuUJBmfNDB ptAMuFmrmOmQMZdZn8ydmg5dShRSU77lPdlC13n68Tv3MAFLIN+OGJlG7U6V7Zsb NTSgeLz8WZmf1DWUcG9VF/bl48eWoRg3n3VNYxXFvBM8sy9pgzT32rzWHj06dCcW bWqi6BWrzsEwCKlST96Vim7tAgMBAAGjggK6MIICtjAdBgNVHQ4EFgQUSSFdfP8c La5y1I8RqSGR0lDHH/swHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi81OEVGOUJFQ0M5 MTkxMUYwODBEMzRDNkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBEBggrBgEFBQcBBwEB/wQ1 MDMwDAQCAAEwBgMEAcqLyjAjBAIAAjAdAwcAIAEMOJChMBIDBwAgAQw4kKMDBwAg AQw4kKQwDQYJKoZIhvcNAQELBQADggEBAK1J5XqmsHlZO7EBPdSwswqzx1kBYPTe 71kQMMkNYdI9TV3+7AifT3gbYvTwcLyNQEYRwkskyNQlljMYb8Fch7utcF+lPH+Q QBlJjNjJJ/CDhWo28/2mDnxagI+ps6tNmydDf0ey5HcW77m59ysqJ7/saYSAPBOu tOB7KGOwu/EMziJMtDpChM3r6sDlXlHIpKREICn5sPmoIiDF5fxGHO0iLuLa6miv 96fcTuE0dvWY8qQUCAa6ZiOlo5z4fo2Z+q6KbmBo2UpFIiOs5xx79sghnOY9lOJv quI+RnlYB9cWTx94PrCjE7uJ+s8fRn0nNJWFdLoIMiDYca47ZgHapEo= -----END CERTIFICATE-----Generated at Sat Dec 6 04:35:05 2025 by rpki-client