This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/9D3EBEF4921111EE9AD1150CC4F9AE02.roa File: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (raw, json) Hash identifier: kgS+E6ztendoWXeY8KRb5qf3OoHXPdPvuEfw1zYbI48= Subject key identifier: 22:2C:08:2C:CD:1D:DB:34:27:A9:5A:FE:2B:A9:9C:BC:96:86:A3:3F Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 019D Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/9D3EBEF4921111EE9AD1150CC4F9AE02.roa Signing time: Tue 23 Dec 2025 03:23:41 +0000 ROA not before: Tue 23 Dec 2025 03:23:41 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 135407 IP address blocks: 210.87.64.0/24 maxlen: 24 210.87.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: Dec 23 03:23:41 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694a0b3c-5cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:af:a9:b9:7d:e5:54:ac:1e:8f:b2:73:17: 56:98:9d:09:54:9c:ba:ce:70:ca:a5:44:e2:17:c7: ec:6c:57:45:42:2a:23:7e:8e:4d:94:c5:10:e3:c7: 4d:bf:bc:6b:90:1b:51:9d:b3:0c:57:60:64:a1:d5: 9d:11:0c:ce:af:b3:13:a8:b9:8f:86:bf:55:9a:ce: 60:e6:65:16:47:fe:44:e6:ed:1a:ef:61:69:a2:3c: 6a:97:86:75:59:b1:b9:52:d8:d7:9c:60:c7:4c:76: 2c:59:8a:7c:eb:5a:d6:a2:5f:ae:af:1d:1d:a0:25: f9:25:1d:24:1c:06:2b:fc:ba:2d:89:e1:b8:52:fd: a7:0e:d5:36:aa:b7:dd:f6:80:82:89:dd:48:ea:f1: b8:39:1b:67:58:88:eb:59:0e:fc:f3:3f:17:93:74: 0f:1d:dd:a3:c2:fe:1b:04:c6:64:2d:20:82:73:e7: ec:a5:24:c3:91:78:d0:0a:17:e2:5b:63:25:32:16: c7:24:25:aa:17:9e:28:a4:64:8c:f5:eb:82:96:c7: 34:e3:ba:a8:75:04:b2:ae:3e:eb:87:b1:f8:b8:1e: 06:5c:ee:f3:33:4f:59:b1:4a:53:1e:d1:82:39:0f: 1d:1d:91:fe:7c:34:ee:16:b2:a9:f3:91:4c:48:66: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2C:08:2C:CD:1D:DB:34:27:A9:5A:FE:2B:A9:9C:BC:96:86:A3:3F X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/9D3EBEF4921111EE9AD1150CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.87.64.0/23 Signature Algorithm: sha256WithRSAEncryption 53:7f:1c:ea:44:0a:59:d4:45:df:a4:be:f7:35:44:12:b4:57: b2:8f:4b:76:f9:22:83:7c:30:64:fa:0f:72:e1:1b:5a:ce:30: f7:78:b7:cd:33:1a:9f:e0:99:86:80:ac:c6:ec:35:63:f5:10: 9e:98:df:4d:66:88:22:3e:ed:ac:72:06:d8:da:c4:ec:c7:c6: 93:53:26:22:9e:09:d3:b8:ca:61:36:0c:ff:08:29:fc:28:42: 47:11:0a:00:89:fa:2c:4d:1f:5e:e6:02:ed:05:ab:86:1c:cd: 01:d1:d8:40:03:21:e7:07:4d:91:f1:e9:dc:0e:13:88:48:bd: 78:6d:79:ee:bf:f5:8e:ee:79:a1:78:d6:7a:e7:89:a9:52:9e: 2f:95:4e:c1:c7:c1:fe:f3:d2:f2:d0:88:c3:96:f5:3d:5b:86: fb:f8:3e:80:65:a5:f1:34:b5:77:1d:af:76:a1:c3:d3:97:e3: 1f:32:ee:04:12:30:50:36:e8:f4:b4:ef:84:58:64:26:c4:4a: c4:a1:79:28:ae:4b:42:b5:0b:1d:84:76:bf:6f:6c:e1:89:08: 6c:84:b6:c6:81:74:a0:95:f5:14:11:8c:28:ca:05:31:15:b7: da:5c:c0:f9:a7:2f:34:a0:a8:c8:ec:d5:32:7d:ed:3b:47:e1: 00:d1:1b:2e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD QzI4MjM2NEUwHhcNMjUxMjIzMDMyMzQxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRhMGIzYy01Y2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvavqbl95VSsHo+ycxdWmJ0JVJy6znDKpUTiF8fsbFdFQiojfo5NlMUQ48dN v7xrkBtRnbMMV2BkodWdEQzOr7MTqLmPhr9Vms5g5mUWR/5E5u0a72Fpojxql4Z1 WbG5UtjXnGDHTHYsWYp861rWol+urx0doCX5JR0kHAYr/LotieG4Uv2nDtU2qrfd 9oCCid1I6vG4ORtnWIjrWQ788z8Xk3QPHd2jwv4bBMZkLSCCc+fspSTDkXjQChfi W2MlMhbHJCWqF54opGSM9euClsc047qodQSyrj7rh7H4uB4GXO7zM09ZsUpTHtGC OQ8dHZH+fDTuFrKp85FMSGZmqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCIsCCzN Hds0J6la/iupnLyWhqM/MB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjI1REIvMTE5MzlEMTA5MDY5MTFFRUIyM0Q3NDI1QzRGOUFFMDIvOUQzRUJFRjQ5 MjExMTFFRTlBRDExNTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHSV0AwDQYJKoZIhvcNAQELBQADggEBAFN/HOpEClnURd+k vvc1RBK0V7KPS3b5IoN8MGT6D3LhG1rOMPd4t80zGp/gmYaArMbsNWP1EJ6Y301m iCI+7axyBtjaxOzHxpNTJiKeCdO4ymE2DP8IKfwoQkcRCgCJ+ixNH17mAu0Fq4Yc zQHR2EADIecHTZHx6dwOE4hIvXhtee6/9Y7ueaF41nrnialSni+VTsHHwf7z0vLQ iMOW9T1bhvv4PoBlpfE0tXcdr3ahw9OX4x8y7gQSMFA26PS074RYZCbESsSheSiu S0K1Cx2Edr9vbOGJCGyEtsaBdKCV9RQRjCjKBTEVt9pcwPmnLzSgqMjs1TJ97TtH 4QDRGy4= -----END CERTIFICATE-----Generated at Tue Dec 23 12:04:18 2025 by rpki-client