This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A4C78624D4CC11F083620C83C4F9AE02.roa File: A4C78624D4CC11F083620C83C4F9AE02.roa (raw, json) Hash identifier: RMhtKWFizFNhImSOlDSqnOlsBhuPDi9/8pnyDBHx2dI= Subject key identifier: 2A:FF:2A:D8:89:6B:94:1D:16:7D:F8:F4:E4:03:8B:38:59:C2:A4:60 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 35A5 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A4C78624D4CC11F083620C83C4F9AE02.roa Signing time: Tue 09 Dec 2025 07:25:40 +0000 ROA not before: Tue 09 Dec 2025 07:25:40 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 147027 IP address blocks: 1.179.227.0/24 maxlen: 24 125.24.252.0/24 maxlen: 24 2001:ec0:8a5::/48 maxlen: 48 2001:ec0:400c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 03:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13733 (0x35a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Dec 9 07:25:40 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6937cef4-4f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:70:72:34:7d:45:79:d3:63:51:64:2b:54:60: 1d:11:d2:95:d3:1f:a0:0c:c8:3c:e6:3f:de:11:80: 5c:58:6c:5d:0a:b5:50:12:72:d6:12:40:03:dc:a2: 54:d6:21:ec:1c:c4:79:5c:ab:6c:cb:e7:24:81:94: f7:62:d3:06:8a:4c:16:1e:a7:3b:7a:03:01:15:75: 50:17:a4:09:07:44:b8:84:ce:6c:7d:67:20:8f:44: af:c9:e0:3d:ed:df:2d:89:4f:89:2d:17:9e:b1:c5: 6a:d7:62:0a:5a:43:35:2c:5d:95:8a:2a:ca:e6:8d: 98:19:31:fb:47:ae:83:a6:bc:a2:77:b8:cb:43:51: a4:7d:26:73:f2:80:cf:49:b0:18:b4:a0:eb:81:4b: 9b:e4:55:a4:93:83:1d:87:1b:e3:bb:c3:bc:10:e3: 77:02:1c:22:7d:29:2a:ed:29:72:1f:d4:06:0a:04: 02:05:f8:b3:85:8b:0b:91:10:88:7f:f8:cf:1f:89: 99:6a:7b:db:30:7b:8e:a8:e4:a2:2f:e6:e4:82:b4: bf:8a:15:ee:f2:67:df:84:58:86:8f:f9:db:d0:de: b2:a8:2d:b2:03:92:2b:8e:db:b6:5c:33:18:ed:f9: a6:e7:23:85:91:13:ef:ac:49:09:27:02:50:1b:34: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FF:2A:D8:89:6B:94:1D:16:7D:F8:F4:E4:03:8B:38:59:C2:A4:60 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A4C78624D4CC11F083620C83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.179.227.0/24 125.24.252.0/24 IPv6: 2001:ec0:8a5::/48 2001:ec0:400c::/48 Signature Algorithm: sha256WithRSAEncryption 7e:21:62:4e:16:cf:d0:87:59:eb:e8:f3:0c:e6:c7:81:48:59: dc:c8:13:73:9a:d8:0f:ae:37:2d:92:46:81:1d:a1:cd:8e:ee: 80:0b:18:e4:52:15:65:d9:62:0a:00:07:cd:23:b2:5e:18:65: 06:63:e2:79:7d:ad:b0:dd:8d:38:74:b1:bb:c6:52:2b:60:06: a8:e8:9e:a3:b8:c3:2a:63:4b:91:f2:56:99:5c:73:84:e9:fd: 3f:88:e5:f0:40:1f:3a:78:24:f6:5c:46:fe:ec:af:fe:24:3a: c8:7c:5e:0f:92:21:a1:f9:88:98:ef:57:31:9c:5c:cf:f8:dd: bb:96:49:34:a9:29:1e:92:48:5f:24:da:48:cf:b0:d1:4f:13: f8:73:9c:f3:dc:ba:08:88:f8:3f:79:be:bc:7e:d3:ba:98:e4: 12:f7:6b:c4:29:12:5a:1b:52:a5:e0:ec:47:b0:53:21:99:10: 1c:ef:b2:54:3e:a0:69:9c:81:7b:ac:b9:66:26:d8:b9:bd:ad: 4b:b5:57:68:06:fc:cf:85:de:8d:d4:a4:47:e3:cd:7c:d9:30: 5e:3f:bf:87:55:cf:b9:68:63:42:71:6b:6e:f6:21:23:d5:79: 1a:30:3c:51:85:ee:9a:67:ab:d1:27:20:17:9b:1d:82:7e:f2: 5b:3f:5a:ea -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICNaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUxMjA5MDcyNTQwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3Y2VmNC00Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXByNH1FedNjUWQrVGAdEdKV0x+gDMg85j/eEYBcWGxdCrVQEnLWEkAD3KJU 1iHsHMR5XKtsy+ckgZT3YtMGikwWHqc7egMBFXVQF6QJB0S4hM5sfWcgj0SvyeA9 7d8tiU+JLReescVq12IKWkM1LF2ViirK5o2YGTH7R66Dpryid7jLQ1GkfSZz8oDP SbAYtKDrgUub5FWkk4Mdhxvju8O8EON3AhwifSkq7SlyH9QGCgQCBfizhYsLkRCI f/jPH4mZanvbMHuOqOSiL+bkgrS/ihXu8mffhFiGj/nb0N6yqC2yA5Irjtu2XDMY 7fmm5yOFkRPvrEkJJwJQGzSBcwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFCr/KtiJ a5QdFn349OQDizhZwqRgMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvQTRDNzg2MjRE NENDMTFGMDgzNjIwQzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBAABs+MDBAB9GPwwGAQCAAIwEgMHACABDsAIpQMHACABDsBA DDANBgkqhkiG9w0BAQsFAAOCAQEAfiFiThbP0IdZ6+jzDObHgUhZ3MgTc5rYD643 LZJGgR2hzY7ugAsY5FIVZdliCgAHzSOyXhhlBmPieX2tsN2NOHSxu8ZSK2AGqOie o7jDKmNLkfJWmVxzhOn9P4jl8EAfOngk9lxG/uyv/iQ6yHxeD5IhofmImO9XMZxc z/jdu5ZJNKkpHpJIXyTaSM+w0U8T+HOc89y6CIj4P3m+vH7TupjkEvdrxCkSWhtS peDsR7BTIZkQHO+yVD6gaZyBe6y5ZibYub2tS7VXaAb8z4XejdSkR+PNfNkwXj+/ h1XPuWhjQnFrbvYhI9V5GjA8UYXummer0ScgF5sdgn7yWz9a6g== -----END CERTIFICATE-----Generated at Fri Dec 12 15:43:23 2025 by rpki-client