This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CC3B5938B55911EC9256FE19C4F9AE02.roa File: CC3B5938B55911EC9256FE19C4F9AE02.roa (raw, json) Hash identifier: YfESzO95JKDO7r7mGpLR5hQYholf9V/lBlUpUDalD40= Subject key identifier: 67:42:F5:32:4C:9D:93:27:96:15:61:27:84:C6:E9:27:6D:D5:90:C6 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 098C Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CC3B5938B55911EC9256FE19C4F9AE02.roa Signing time: Sat 20 Dec 2025 20:17:04 +0000 ROA not before: Sat 20 Dec 2025 20:17:04 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132064 IP address blocks: 101.234.142.0/23 maxlen: 24 2406:5800:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Dec 20 20:17:04 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69470440-c0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:d1:19:65:64:12:18:b7:52:7f:d0:18:02: db:08:39:9b:0a:2d:57:97:95:d0:fe:e9:bc:5e:dd: 26:7d:d8:fb:c8:94:73:4d:06:41:e9:b4:f9:d7:e8: 34:fe:2e:a3:30:d9:5b:29:ba:5a:5f:89:a2:8f:f3: f5:ab:b4:c9:2a:46:ed:1c:40:33:70:3c:95:48:3f: 5f:bf:52:71:f6:69:a2:a0:df:3b:1d:59:60:58:19: d9:b8:0f:53:96:35:0c:46:8f:ae:52:d1:a8:df:ae: c2:6b:ac:23:1c:0a:2e:38:de:e9:e7:85:3f:c4:58: a9:2d:95:fa:45:6e:bd:9f:6c:cc:ba:80:56:df:37: 68:88:5b:45:16:b9:10:45:20:9c:62:bf:29:4a:7b: e2:51:0c:30:c8:ad:c2:3f:e2:92:12:42:91:d7:d0: 5e:2f:84:9d:4d:3c:25:f3:cb:0a:3a:7d:11:a2:24: d6:38:1e:b6:f3:c6:69:a8:1d:3e:b3:0e:e7:c7:8d: 1f:91:27:28:5e:b0:16:c7:9a:1f:3c:b0:6a:dc:1b: b9:76:1e:84:19:6d:8d:bf:f0:6a:9a:af:28:74:7d: cb:fa:82:a1:12:c7:6d:d4:46:f0:2d:c0:18:e1:9d: 38:a5:97:d2:47:6d:1c:da:00:a0:d7:73:d4:fb:b4: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:42:F5:32:4C:9D:93:27:96:15:61:27:84:C6:E9:27:6D:D5:90:C6 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CC3B5938B55911EC9256FE19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.234.142.0/23 IPv6: 2406:5800:400::/38 Signature Algorithm: sha256WithRSAEncryption 3e:dd:7c:e3:9b:35:96:61:0d:72:c6:b0:15:17:4f:39:a6:f7: 4b:7c:3c:cf:19:a8:fa:b5:9c:38:9b:5e:49:89:d4:fb:b7:4c: 49:d3:8b:19:4c:b8:69:22:ba:fb:b8:58:ac:f4:ea:ff:a1:c6: 53:c7:00:64:0a:b2:68:da:53:d0:13:c1:94:5b:c7:32:8a:4d: e9:ec:48:d2:b1:eb:61:ef:58:0c:ab:5e:90:f1:99:8c:61:05: b5:f5:17:32:43:42:91:9f:86:3c:24:43:cd:cd:04:c2:2c:e8: b8:c5:a1:4e:f0:3d:12:96:3f:ba:ca:0d:1e:ef:cd:ca:ff:cf: 30:c3:39:76:b5:49:fc:97:b3:e3:2b:86:99:c0:41:e7:07:6f: 4f:90:97:d3:3c:19:bb:3e:59:95:88:ee:95:c9:4b:e2:3b:09: 73:58:94:ee:98:cb:06:94:06:91:1d:c0:f3:49:5d:84:6b:a6: c4:26:94:d3:07:93:c0:a5:56:9c:a8:4e:0d:8d:fa:a9:c6:ba: a8:6f:d2:f2:0b:bc:cb:03:b1:fa:60:a4:14:f6:01:0d:6f:26: 12:0a:76:dc:06:3e:00:bc:be:2b:1c:3d:2f:73:cb:f2:df:92: d6:de:4b:e0:b2:21:29:66:c4:d5:b8:1a:5a:b4:95:7c:e1:58: 76:13:b0:37 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjUxMjIwMjAxNzA0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ3MDQ0MC1jMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrLRGWVkEhi3Un/QGALbCDmbCi1Xl5XQ/um8Xt0mfdj7yJRzTQZB6bT51+g0 /i6jMNlbKbpaX4mij/P1q7TJKkbtHEAzcDyVSD9fv1Jx9mmioN87HVlgWBnZuA9T ljUMRo+uUtGo367Ca6wjHAouON7p54U/xFipLZX6RW69n2zMuoBW3zdoiFtFFrkQ RSCcYr8pSnviUQwwyK3CP+KSEkKR19BeL4SdTTwl88sKOn0RoiTWOB6288ZpqB0+ sw7nx40fkScoXrAWx5ofPLBq3Bu5dh6EGW2Nv/Bqmq8odH3L+oKhEsdt1EbwLcAY 4Z04pZfSR20c2gCg13PU+7SnVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGdC9TJM nZMnlhVhJ4TG6Sdt1ZDGMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU0NkUvMENENDFEQThCNzZBMTFFQTgxNEY1MDg0QzRGOUFFMDIvQ0MzQjU5MzhC NTU5MTFFQzkyNTZGRTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAFl6o4wDgQCAAIwCAMGAiQGWAAEMA0GCSqGSIb3DQEBCwUA A4IBAQA+3XzjmzWWYQ1yxrAVF085pvdLfDzPGaj6tZw4m15JidT7t0xJ04sZTLhp Irr7uFis9Or/ocZTxwBkCrJo2lPQE8GUW8cyik3p7EjSseth71gMq16Q8ZmMYQW1 9RcyQ0KRn4Y8JEPNzQTCLOi4xaFO8D0Slj+6yg0e783K/88wwzl2tUn8l7PjK4aZ wEHnB29PkJfTPBm7PlmViO6VyUviOwlzWJTumMsGlAaRHcDzSV2Ea6bEJpTTB5PA pVacqE4Njfqpxrqob9LyC7zLA7H6YKQU9gENbyYSCnbcBj4AvL4rHD0vc8vy35LW 3kvgsiEpZsTVuBpatJV84Vh2E7A3 -----END CERTIFICATE-----Generated at Sun Dec 21 14:41:09 2025 by rpki-client