This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/EA1E8B8A51C711EE9A3CC954C4F9AE02.roa File: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (raw, json) Hash identifier: zLJmvWY7239Phf4yPfDTSksmKOjgZNQc6mllvDN5PGA= Subject key identifier: 03:72:BA:25:B4:4F:B2:68:81:16:3E:29:7D:F0:E7:C7:77:0E:0C:37 Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Certificate serial: 01AF Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/EA1E8B8A51C711EE9A3CC954C4F9AE02.roa Signing time: Thu 06 Nov 2025 23:38:35 +0000 ROA not before: Thu 06 Nov 2025 23:38:35 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 19905 IP address blocks: 58.28.0.0/16 maxlen: 16 118.90.0.0/16 maxlen: 16 182.154.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Validity Not Before: Nov 6 23:38:35 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=690d317b-a222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c4:13:35:c5:bd:c7:a7:15:09:f2:f5:36:81: 37:7f:cd:8c:dc:c2:0e:7a:7f:d7:3f:72:14:3f:11: 98:c9:59:d9:70:30:b4:18:1e:76:76:92:9d:9b:80: 68:49:e5:a8:bf:aa:63:a8:c0:a5:ab:27:22:1a:41: f1:26:f4:74:f0:a3:d1:b8:3b:c2:d6:82:04:5b:1e: e7:95:8f:4f:1d:92:c8:d9:3f:91:dc:ca:6f:36:96: 12:7e:76:db:9c:c5:17:87:96:40:e1:74:2d:90:de: 19:1e:6c:83:db:55:10:0e:c1:81:92:88:1e:69:df: a6:7a:90:4a:f6:79:dd:02:35:5e:fc:d5:4c:40:16: 9f:82:a3:77:4d:0c:20:e2:16:5d:a2:47:5d:d5:55: f8:fa:cf:53:33:e4:d8:82:d7:f7:90:0b:83:d9:fb: 39:89:e3:b2:83:35:a6:03:e5:38:30:55:f9:bb:9f: 03:4d:9b:10:c4:19:c4:ca:b8:fb:f7:18:f8:1c:e4: 4d:79:1a:b3:31:6a:13:c8:f9:32:df:20:e4:ea:fa: 85:c7:ac:8d:f7:83:33:05:7d:4d:28:87:e9:fa:33: e5:41:47:45:93:ff:01:45:8f:3b:16:b4:ba:d2:d0: 40:f6:99:96:f3:4f:ce:d5:f6:bb:43:72:e9:01:09: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:72:BA:25:B4:4F:B2:68:81:16:3E:29:7D:F0:E7:C7:77:0E:0C:37 X509v3 Authority Key Identifier: keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/EA1E8B8A51C711EE9A3CC954C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.28.0.0/16 118.90.0.0/16 182.154.0.0/16 Signature Algorithm: sha256WithRSAEncryption 37:18:b0:02:08:ae:cd:02:19:64:47:82:db:f4:b2:fc:ea:a0: b3:fd:12:12:51:a1:f3:ed:8e:72:03:4c:a7:1b:f2:4b:4d:70: 3d:ec:66:10:c9:00:3d:07:aa:86:2e:fc:66:a7:eb:cb:8d:d3: 55:f5:c3:63:b6:86:9e:aa:8e:0f:b3:3d:36:12:07:c2:de:ad: 77:30:3d:68:20:0a:22:2f:db:e4:8d:7a:f1:24:1f:2f:83:40: 34:5b:00:ea:27:48:1e:79:f7:49:e6:fb:26:17:dd:2b:26:87: 6c:c6:ff:9b:cc:1d:3b:a3:e0:f9:fa:ff:a1:1a:11:bb:92:85: 40:15:3e:c7:ee:3f:01:01:49:10:8b:b4:e6:3a:33:8d:46:b5: 86:e4:a4:cb:1c:17:9d:ce:3b:01:39:9f:7a:4f:89:64:e4:67: 09:b0:ca:0d:f5:89:5a:1c:02:05:17:70:f2:5a:72:25:da:6c: 57:bb:6e:98:b4:b0:af:d1:49:01:c3:0c:ab:69:23:9a:f4:8e: d8:df:78:a3:bb:10:83:af:e3:a7:b0:99:9d:49:29:ae:6c:47: 52:1c:61:00:89:61:b3:0d:5d:af:a6:83:5c:a6:f0:54:56:36: 47:42:6e:6a:14:09:50:07:e1:2d:17:6a:18:c2:f0:bf:57:88: bb:c4:e9:d6 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE1QzYxMTAvBgNVBAUTKDNENDdFNjY4N0JCNERGNDBDNTFCMDNBNDU1OUMxMENB MjJGNjc3MkYwHhcNMjUxMTA2MjMzODM1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBkMzE3Yi1hMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cQTNcW9x6cVCfL1NoE3f82M3MIOen/XP3IUPxGYyVnZcDC0GB52dpKdm4Bo SeWov6pjqMClqyciGkHxJvR08KPRuDvC1oIEWx7nlY9PHZLI2T+R3MpvNpYSfnbb nMUXh5ZA4XQtkN4ZHmyD21UQDsGBkogead+mepBK9nndAjVe/NVMQBafgqN3TQwg 4hZdokdd1VX4+s9TM+TYgtf3kAuD2fs5ieOygzWmA+U4MFX5u58DTZsQxBnEyrj7 9xj4HORNeRqzMWoTyPky3yDk6vqFx6yN94MzBX1NKIfp+jPlQUdFk/8BRY87FrS6 0tBA9pmW80/O1fa7Q3LpAQn0HQIDAQABo4ICnjCCApowHQYDVR0OBBYEFANyuiW0 T7JogRY+KX3w58d3Dgw3MB8GA1UdIwQYMBaAFD1H5mh7tN9AxRsDpFWcEMoi9ncv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTVDNi9ENTU1MTlCNDRD MzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMwREZHd09rVlp3UXlpTDJk eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVZm1hSHUwMzBERkd3T2tWWndReWlMMmR5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUE1QzYvRDU1NTE5QjQ0QzM0MTFFRUFFRURBMjJDQzRGOUFFMDIvRUExRThCOEE1 MUM3MTFFRTlBM0NDOTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKAYIKwYBBQUHAQcBAf8E GTAXMBUEAgABMA8DAwA6HAMDAHZaAwMAtpowDQYJKoZIhvcNAQELBQADggEBADcY sAIIrs0CGWRHgtv0svzqoLP9EhJRofPtjnIDTKcb8ktNcD3sZhDJAD0HqoYu/Gan 68uN01X1w2O2hp6qjg+zPTYSB8LerXcwPWggCiIv2+SNevEkHy+DQDRbAOonSB55 90nm+yYX3Ssmh2zG/5vMHTuj4Pn6/6EaEbuShUAVPsfuPwEBSRCLtOY6M41GtYbk pMscF53OOwE5n3pPiWTkZwmwyg31iVocAgUXcPJaciXabFe7bpi0sK/RSQHDDKtp I5r0jtjfeKO7EIOv46ewmZ1JKa5sR1IcYQCJYbMNXa+mg1ym8FRWNkdCbmoUCVAH 4S0XahjC8L9XiLvE6dY= -----END CERTIFICATE-----Generated at Fri Dec 5 22:10:06 2025 by rpki-client