This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE93C5C6721A11EFBDE87567C4F9AE02.roa File: EE93C5C6721A11EFBDE87567C4F9AE02.roa (raw, json) Hash identifier: FN4ZmCpD4S/1NwmTEfiO7WCgvUf06qS1e8ywwPozd6c= Subject key identifier: 38:3B:58:A4:FC:B4:26:E5:41:A0:C2:35:7D:DE:5C:31:AA:1A:FC:B1 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01A8 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE93C5C6721A11EFBDE87567C4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:07 +0000 ROA not before: Wed 31 Dec 2025 04:24:07 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132493 IP address blocks: 202.29.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 04:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:07 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a567-aa33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:de:1a:0e:79:75:af:4a:42:01:14:65:32: b4:be:e8:b2:67:3b:2a:78:95:e6:21:8a:47:59:fa: 00:cf:16:2e:cf:19:7a:07:a0:80:26:cf:b1:c6:45: bf:6c:fc:01:64:a9:93:c7:39:63:a1:32:58:e6:22: 3e:04:fc:3e:85:d7:e2:d9:c6:0b:8b:45:15:b4:94: 93:a5:90:3f:e6:80:33:89:3f:65:24:6d:eb:d8:ce: c2:7f:5a:71:b0:8f:49:89:f4:6c:af:59:59:ac:ec: e7:32:ac:c4:d4:7a:e8:e4:80:f0:7a:6d:ae:f9:de: 11:c9:27:9e:58:32:5e:92:2e:d3:5b:92:67:8f:1e: 98:cf:b3:7d:c2:73:ea:d7:49:91:c2:b1:a2:6d:6e: a6:ab:bb:b9:7a:ec:69:45:92:a6:b4:7d:30:34:45: 8f:16:47:f8:25:3b:61:88:31:d4:6b:a7:0e:da:4d: 17:b7:b9:8b:5f:93:b4:20:a9:2d:ae:3a:25:d0:18: c5:6b:20:a2:49:9e:24:1e:0a:6a:f7:6a:8f:20:a1: 93:48:eb:76:e1:5f:0d:89:84:5e:0a:4d:66:ce:ec: 57:ac:60:40:a0:71:40:15:4b:2c:4c:46:f8:36:91: 54:e1:0e:6c:78:d4:f4:75:71:ac:ac:2e:61:89:18: 2e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3B:58:A4:FC:B4:26:E5:41:A0:C2:35:7D:DE:5C:31:AA:1A:FC:B1 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE93C5C6721A11EFBDE87567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.58.0/24 Signature Algorithm: sha256WithRSAEncryption 01:1f:e0:1a:80:7b:be:f6:11:1a:0f:53:6d:a3:79:5f:47:32: 14:bb:21:16:b8:bc:50:f8:be:8d:d4:4b:ef:e8:9f:16:96:fd: 09:3c:2a:1d:b6:10:7c:c8:ac:d9:a2:26:15:62:80:a7:cf:fb: 43:b8:3e:36:9f:26:c8:2a:f0:5a:e0:23:39:e8:35:e1:31:0c: 2c:a7:e0:6a:81:41:17:18:03:c4:62:f8:c3:8c:a7:48:4e:7d: 1b:d7:57:26:65:53:34:20:6d:ef:9a:94:2d:7f:67:e0:d7:f6: aa:c6:6f:b2:e2:3e:b8:6e:23:1b:a5:58:51:78:38:72:7d:36: a2:86:68:c0:1e:de:94:5a:80:01:6b:4f:bc:57:b7:68:6a:1e: 86:93:e5:f4:54:dd:53:1d:2a:2c:d3:7d:4c:c4:2f:79:20:8f: 6e:87:4e:c3:51:d4:33:d8:ac:f3:aa:bf:12:59:6c:41:b8:89: 83:56:ef:ed:e3:2b:da:fe:84:27:c0:de:bd:50:80:4a:1d:d0: 16:fe:84:ac:20:2b:f9:d5:d8:2b:f9:9b:4c:06:10:3f:32:77: 1a:00:fb:21:7b:6a:bb:d6:97:bd:28:2c:fa:4e:8b:e8:b0:b4: dd:fb:63:24:fc:bb:55:8c:09:bd:11:46:3c:7c:0c:8b:30:13: 3f:65:ae:e3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDA3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU2Ny1hYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2zeGg55da9KQgEUZTK0vuiyZzsqeJXmIYpHWfoAzxYuzxl6B6CAJs+xxkW/ bPwBZKmTxzljoTJY5iI+BPw+hdfi2cYLi0UVtJSTpZA/5oAziT9lJG3r2M7Cf1px sI9JifRsr1lZrOznMqzE1Hro5IDwem2u+d4RySeeWDJeki7TW5Jnjx6Yz7N9wnPq 10mRwrGibW6mq7u5euxpRZKmtH0wNEWPFkf4JTthiDHUa6cO2k0Xt7mLX5O0IKkt rjol0BjFayCiSZ4kHgpq92qPIKGTSOt24V8NiYReCk1mzuxXrGBAoHFAFUssTEb4 NpFU4Q5seNT0dXGsrC5hiRguwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDg7WKT8 tCblQaDCNX3eXDGqGvyxMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRUU5M0M1QzY3 MjFBMTFFRkJERTg3NTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKHTowDQYJKoZIhvcNAQELBQADggEBAAEf4BqAe772ERoP U22jeV9HMhS7IRa4vFD4vo3US+/onxaW/Qk8Kh22EHzIrNmiJhVigKfP+0O4Pjaf Jsgq8FrgIznoNeExDCyn4GqBQRcYA8Ri+MOMp0hOfRvXVyZlUzQgbe+alC1/Z+DX 9qrGb7LiPrhuIxulWFF4OHJ9NqKGaMAe3pRagAFrT7xXt2hqHoaT5fRU3VMdKizT fUzEL3kgj26HTsNR1DPYrPOqvxJZbEG4iYNW7+3jK9r+hCfA3r1QgEod0Bb+hKwg K/nV2Cv5m0wGED8ydxoA+yF7arvWl70oLPpOi+iwtN37YyT8u1WMCb0RRjx8DIsw Ez9lruM= -----END CERTIFICATE-----Generated at Wed Jan 28 09:49:43 2026 by rpki-client