This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/21656302D9A211F09604B56168D3641D.roa File: 21656302D9A211F09604B56168D3641D.roa (raw, json) Hash identifier: MzpEivAK43y+EyRc9LHLYYj12JAzyfhxl29v0dpkat4= Subject key identifier: 9A:F1:49:F1:12:44:92:FA:F6:10:2D:86:DA:21:76:F7:30:8F:B0:5D Certificate issuer: /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Certificate serial: 02 Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/21656302D9A211F09604B56168D3641D.roa Signing time: Mon 15 Dec 2025 10:38:02 +0000 ROA not before: Mon 15 Dec 2025 10:38:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 152194 IP address blocks: 43.249.204.0/22 maxlen: 24 103.41.64.0/22 maxlen: 24 2401:ab80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 10:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Validity Not Before: Dec 15 10:38:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693fe50a-9f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:ca:19:b8:79:1a:a4:49:8d:5b:61:95:11: 2f:cf:f4:e8:f3:97:33:15:c1:f1:91:79:86:1a:3c: c6:f7:81:8d:03:a9:a9:13:cf:b0:b7:90:75:a9:8a: e6:bd:69:db:73:fd:6c:bf:c6:55:31:ed:64:71:3d: 9e:dd:00:b1:3c:dd:4b:9a:8b:3f:a5:ca:78:ae:c6: 42:a4:4e:be:17:14:1c:e1:e3:ce:bc:cf:1b:b5:3c: 0a:b5:d9:01:6a:82:72:e6:50:ee:51:b5:94:0d:7d: b7:03:db:12:ef:19:6e:63:c5:4f:51:c8:92:02:80: 4b:a5:07:d3:9f:b9:a8:8a:4c:36:d1:57:0f:f0:79: c3:ea:0e:38:c7:0c:87:c0:55:b5:5b:da:d1:da:e3: 19:08:d7:9b:2e:47:02:a6:64:33:3a:41:99:16:e4: 80:08:26:0d:01:b0:4d:86:0f:c5:76:28:7e:07:bc: 9d:10:61:b0:24:ec:39:de:86:d0:65:2d:28:09:34: 1c:81:cf:73:05:08:37:32:a3:bf:4d:44:99:15:aa: 86:cf:a3:d6:03:9a:1c:2d:19:2c:0f:44:85:8d:50: 4a:45:35:0a:4b:c5:e7:79:2e:1b:9d:a7:d0:43:f6: 37:11:89:8b:58:1c:93:ec:5d:75:19:1d:eb:37:b9: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F1:49:F1:12:44:92:FA:F6:10:2D:86:DA:21:76:F7:30:8F:B0:5D X509v3 Authority Key Identifier: keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/21656302D9A211F09604B56168D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.204.0/22 103.41.64.0/22 IPv6: 2401:ab80::/32 Signature Algorithm: sha256WithRSAEncryption 17:20:56:74:30:2f:ba:d2:8c:be:f5:80:1b:11:a1:9a:40:50: 37:2b:96:fc:83:88:17:31:d2:b1:01:b7:df:01:3d:d8:ab:7d: 7e:b2:67:97:d7:4e:ee:3f:e2:9f:1c:28:b6:32:47:4b:cc:c2: a2:7b:ac:7a:4f:f0:cd:58:a4:d6:21:76:fc:60:38:0c:d3:a6: 6d:8f:59:13:01:b9:4f:1a:e5:3c:6b:d6:64:91:a7:6e:89:34: 47:78:16:65:96:3e:9b:33:e6:c8:86:55:fd:1e:2c:2d:9f:56: 2b:d8:d5:d3:9d:3b:44:24:91:46:1a:20:95:d2:de:6f:f1:63: a1:a7:b8:cf:c2:c0:6a:31:6f:ca:24:1d:c3:7b:6a:ec:f7:15: ae:68:b0:9b:9d:18:8a:94:ca:62:0e:ff:05:9d:03:4d:6d:ee: d0:c6:16:ca:29:70:6d:16:2f:4c:ef:7f:1c:e0:12:0d:09:09: 1f:d7:c4:49:40:1d:a4:a2:6e:85:6e:b1:77:cd:58:be:4d:7a: 5f:7e:59:5f:37:d7:3f:7b:ce:f7:8f:6f:45:3e:70:ec:a5:34: f0:15:8e:85:70:9a:36:ae:8d:4c:53:f6:c2:d9:a4:5e:e6:aa: d9:f7:b0:22:e6:15:1e:f3:86:de:a2:83:1d:ba:d2:3e:0f:87: 9a:e5:ef:8e -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDM3ODExMC8GA1UEBRMoNkQxQjFDNUVDOUE5Q0UyMEU4Qjg1REEzRjZDMUUzQ0RE NDJFRjgzOTAeFw0yNTEyMTUxMDM4MDJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5M2ZlNTBhLTlmODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4y8oZuHkapEmNW2GVES/P9OjzlzMVwfGReYYaPMb3gY0DqakTz7C3kHWpiua9 adtz/Wy/xlUx7WRxPZ7dALE83Uuaiz+lyniuxkKkTr4XFBzh4868zxu1PAq12QFq gnLmUO5RtZQNfbcD2xLvGW5jxU9RyJICgEulB9OfuaiKTDbRVw/wecPqDjjHDIfA VbVb2tHa4xkI15suRwKmZDM6QZkW5IAIJg0BsE2GD8V2KH4HvJ0QYbAk7DnehtBl LSgJNByBz3MFCDcyo79NRJkVqobPo9YDmhwtGSwPRIWNUEpFNQpLxed5Lhudp9BD 9jcRiYtYHJPsXXUZHes3uQevAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUmvFJ8RJE kvr2EC2G2iF29zCPsF0wHwYDVR0jBBgwFoAUbRscXsmpziDouF2j9sHjzdQu+Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0Mzc4L0Y2MjkxNDhDRDlB MDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlEb3VGMmo5c0hqemRRdS1E ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlJzY1hzbXB6aURvdUYyajlzSGp6ZFF1LURrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDM3OC9GNjI5MTQ4Q0Q5QTAxMUYwOUEwRkIwMTc2OEQzNjQxRC8yMTY1NjMwMkQ5 QTIxMUYwOTYwNEI1NjE2OEQzNjQxRC5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAiv5zAMEAmcpQDANBAIAAjAHAwUAJAGrgDANBgkqhkiG9w0B AQsFAAOCAQEAFyBWdDAvutKMvvWAGxGhmkBQNyuW/IOIFzHSsQG33wE92Kt9frJn l9dO7j/inxwotjJHS8zConusek/wzVik1iF2/GA4DNOmbY9ZEwG5TxrlPGvWZJGn bok0R3gWZZY+mzPmyIZV/R4sLZ9WK9jV0507RCSRRhogldLeb/Fjoae4z8LAajFv yiQdw3tq7PcVrmiwm50YipTKYg7/BZ0DTW3u0MYWyilwbRYvTO9/HOASDQkJH9fE SUAdpKJuhW6xd81Yvk16X35ZXzfXP3vO949vRT5w7KU08BWOhXCaNq6NTFP2wtmk Xuaq2fewIuYVHvOG3qKDHbrSPg+HmuXvjg== -----END CERTIFICATE-----Generated at Thu Dec 18 02:09:20 2025 by rpki-client