This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/5E0AA532B55911F082D2971FC4F9AE02.roa File: 5E0AA532B55911F082D2971FC4F9AE02.roa (raw, json) Hash identifier: pfVRnkrqeM6DrdQhe1mmG2XLA7a4TS/iBPWv6lTwlhM= Subject key identifier: 08:DB:39:BB:DB:B8:61:D2:5F:5E:C8:5E:48:7E:2F:41:85:AE:80:04 Certificate issuer: /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423 Certificate serial: 29 Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/5E0AA532B55911F082D2971FC4F9AE02.roa Signing time: Mon 15 Dec 2025 07:28:43 +0000 ROA not before: Mon 15 Dec 2025 07:28:43 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55720 IP address blocks: 202.176.4.0/24 maxlen: 24 202.176.5.0/24 maxlen: 24 202.176.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423 Validity Not Before: Dec 15 07:28:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693fb8ab-d198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:89:7e:1b:9d:f9:63:bd:a0:96:c7:7a:85: e1:e8:6d:d5:b3:5a:46:83:ad:99:44:4b:e5:5d:8b: 83:b0:2b:00:2f:6f:ff:45:04:04:b7:0e:2b:03:27: 34:dc:61:c9:0d:87:1b:f6:26:65:7e:28:88:a4:38: fa:de:6f:92:b8:b4:de:2f:4b:c9:14:04:70:d7:47: bc:a8:55:cf:f3:be:d2:b8:68:da:69:f3:31:5d:b9: b9:2a:6a:8c:46:67:e1:da:17:c0:2b:b9:26:84:fd: e0:8d:a6:9c:4f:4e:16:c2:92:ad:b2:ca:3d:03:81: ed:0f:e6:a8:71:96:4e:8b:4c:2d:26:72:2c:1f:62: 0b:bd:c9:e6:19:b3:9f:67:67:23:72:5c:09:d9:59: 47:5e:5a:f6:91:a5:36:cc:ac:7b:e6:66:b5:33:ec: 01:9a:bb:0f:eb:3d:79:f3:15:42:98:57:e6:67:80: 58:7e:d9:16:58:0c:9d:99:fa:ba:ec:27:34:89:a8: b4:98:3d:3e:61:87:ea:87:6d:df:2c:a8:dd:07:56: cc:f0:7a:32:4b:49:89:9b:53:a9:d1:28:c3:52:90: 98:2f:12:ed:56:af:66:a8:19:a4:b6:4f:b6:25:2f: 26:b9:cc:b2:c1:bd:7e:8a:22:03:97:bb:2d:ec:00: 22:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DB:39:BB:DB:B8:61:D2:5F:5E:C8:5E:48:7E:2F:41:85:AE:80:04 X509v3 Authority Key Identifier: keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/5E0AA532B55911F082D2971FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.176.4.0-202.176.6.255 Signature Algorithm: sha256WithRSAEncryption 75:59:60:ed:00:f3:51:f9:7d:5f:96:90:cf:ef:74:9c:6f:86: 3c:f2:76:23:40:4c:9a:24:96:f6:e4:3d:1d:5d:20:6f:cb:16: 35:90:ff:63:0e:ec:2b:a3:5b:c1:01:d7:94:4d:12:c0:43:51: e4:e8:64:8c:1c:fb:42:96:42:7a:8b:95:d8:81:31:9c:12:3e: 32:c1:73:08:1b:78:41:ea:b3:7e:21:42:9f:63:77:29:06:6e: c2:f3:c2:2a:36:e7:b2:37:89:9c:c3:4e:8f:55:44:5c:eb:dc: 5d:a6:16:86:01:e2:9c:5e:60:2e:ea:0e:1f:40:6c:03:28:94: d7:a3:2c:dd:99:4e:9d:0c:9d:85:63:9d:aa:8d:c7:bb:f9:14: 12:55:c5:7c:ed:eb:33:83:af:1b:dc:27:50:f3:f9:63:99:db: e2:a3:db:d2:f8:14:e7:ad:ca:c2:fa:9f:8a:90:b2:f8:04:1d: ff:0a:ab:6b:65:bc:ba:71:28:b5:e2:6c:bd:8a:9a:f8:08:bd: bc:b3:8a:ff:78:e8:04:4c:f6:79:1e:b6:f0:19:3e:ae:ec:f4: 63:92:89:9b:6d:b4:e6:75:59:e3:29:96:16:45:b5:49:a8:e5: 9c:33:98:2b:54:2c:7a:78:b7:31:3d:36:22:04:37:2f:8a:a3: 1a:14:6f:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RUZFRTExMC8GA1UEBRMoMzE0MkExQTg2MUQ5QTQ0QTkzMjdGMDY2MTlGRUM4QTZB OTYyQjQyMzAeFw0yNTEyMTUwNzI4NDNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5M2ZiOGFiLWQxOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkvIl+G535Y72glsd6heHobdWzWkaDrZlES+Vdi4OwKwAvb/9FBAS3DisDJzTc YckNhxv2JmV+KIikOPreb5K4tN4vS8kUBHDXR7yoVc/zvtK4aNpp8zFdubkqaoxG Z+HaF8AruSaE/eCNppxPThbCkq2yyj0Dge0P5qhxlk6LTC0mciwfYgu9yeYZs59n ZyNyXAnZWUdeWvaRpTbMrHvmZrUz7AGauw/rPXnzFUKYV+ZngFh+2RZYDJ2Z+rrs JzSJqLSYPT5hh+qHbd8sqN0HVszwejJLSYmbU6nRKMNSkJgvEu1Wr2aoGaS2T7Yl Lya5zLLBvX6KIgOXuy3sACLTAgMBAAGjggKdMIICmTAdBgNVHQ4EFgQUCNs5u9u4 YdJfXsheSH4vQYWugAQwHwYDVR0jBBgwFoAUMUKhqGHZpEqTJ/BmGf7IpqlitCMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFRkVFLzBGOUU5MUY4QjNE MTExRjA4NkMyMkQ1QUM0RjlBRTAyL01VS2hxR0hacEVxVEpfQm1HZjdJcHFsaXRD TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVVLaHFHSFpwRXFUSl9CbUdmN0lwcWxpdENNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZFRS8wRjlFOTFGOEIzRDExMUYwODZDMjJENUFDNEY5QUUwMi81RTBBQTUzMkI1 NTkxMUYwODJEMjk3MUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQCyrAEAwQAyrAGMA0GCSqGSIb3DQEBCwUAA4IBAQB1WWDt APNR+X1flpDP73Scb4Y88nYjQEyaJJb25D0dXSBvyxY1kP9jDuwro1vBAdeUTRLA Q1Hk6GSMHPtClkJ6i5XYgTGcEj4ywXMIG3hB6rN+IUKfY3cpBm7C88IqNueyN4mc w06PVURc69xdphaGAeKcXmAu6g4fQGwDKJTXoyzdmU6dDJ2FY52qjce7+RQSVcV8 7eszg68b3CdQ8/ljmdvio9vS+BTnrcrC+p+KkLL4BB3/CqtrZby6cSi14my9ipr4 CL28s4r/eOgETPZ5HrbwGT6u7PRjkombbbTmdVnjKZYWRbVJqOWcM5grVCx6eLcx PTYiBDcviqMaFG+B -----END CERTIFICATE-----Generated at Wed Dec 24 17:39:57 2025 by rpki-client