This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49CAEF64D07011F08EAB2929C4F9AE02.roa File: 49CAEF64D07011F08EAB2929C4F9AE02.roa (raw, json) Hash identifier: xrabRuzeZRPHll8r5CHbhuH1rWLoKaZjkwzKjrnPVi4= Subject key identifier: 14:2A:1A:FA:55:B4:C9:F8:80:80:92:D0:E6:AF:BE:0F:C5:D9:3D:CC Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 221C Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49CAEF64D07011F08EAB2929C4F9AE02.roa Signing time: Fri 30 Jan 2026 16:13:42 +0000 ROA not before: Fri 30 Jan 2026 16:13:42 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 26337 IP address blocks: 43.245.52.0/22 maxlen: 24 203.17.36.0/24 maxlen: 24 203.170.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Feb 2026 15:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8732 (0x221c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Jan 30 16:13:42 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697cd8b6-0148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2c:9d:d7:6c:9b:30:c0:64:a9:ee:11:e3:cc: d4:b4:ba:f3:34:72:f3:36:de:75:4d:6a:3c:b8:20: d6:87:26:61:66:21:86:94:21:ec:95:88:09:08:60: 63:a8:13:df:27:80:0e:44:fc:df:5a:75:d7:be:31: 4f:37:13:72:f5:0f:1d:bd:a9:5b:c1:bb:7d:08:a2: 4a:02:ef:df:c6:20:42:e8:83:5d:b0:8e:39:27:7d: f2:8e:52:b0:fe:87:8b:67:f9:59:f3:51:33:6a:02: 91:0c:67:63:c4:6c:50:1a:2a:ba:51:36:56:b8:5c: 3b:b6:37:6c:c1:24:b7:7d:62:a8:74:37:5b:22:a1: d4:9d:a6:ce:56:d1:a6:a7:3b:32:42:a5:c7:a1:8c: a9:99:78:2e:f4:7a:78:3e:3f:56:42:7a:ce:53:b5: e2:87:e1:5c:d6:26:e1:29:b3:93:86:2f:6e:94:d9: e4:7a:7e:a2:d9:b4:6a:7b:7a:ab:3a:d8:dc:86:90: b8:56:7f:4d:06:91:ad:2c:90:66:05:6e:ca:58:0a: b9:47:14:d9:b2:3c:0a:91:c5:3a:fc:d3:1a:76:b5: 79:0a:5d:19:04:bc:e9:2e:a1:b0:09:4f:56:29:44: c0:ef:e9:79:0d:1d:27:83:16:5b:b6:c2:6e:4f:63: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2A:1A:FA:55:B4:C9:F8:80:80:92:D0:E6:AF:BE:0F:C5:D9:3D:CC X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49CAEF64D07011F08EAB2929C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.52.0/22 203.17.36.0/24 203.170.80.0/21 Signature Algorithm: sha256WithRSAEncryption 04:df:df:65:a1:67:88:87:ca:a9:99:53:56:58:02:b7:35:74: 4a:af:35:b5:5f:4b:da:4a:e3:48:11:eb:91:a6:af:ec:30:bc: 9f:8b:40:13:9c:c0:9f:e1:2c:24:32:40:54:76:d3:ad:56:bc: 9d:4c:dd:34:68:72:95:45:02:b4:21:14:86:c2:7a:3f:59:ce: df:8c:31:a2:4b:87:80:96:99:4c:27:de:71:12:22:35:71:38: 8e:42:60:92:6c:05:be:f6:1c:03:c2:48:a9:1a:d1:5d:aa:1b: dc:ed:c6:0c:f8:ed:64:3b:03:a7:a1:80:b1:75:5f:10:0d:86: 98:38:24:21:0a:54:e7:3e:28:d2:80:fb:2a:18:f9:32:85:d0: 28:d5:2c:09:26:f7:52:d5:a7:36:9b:f2:9a:1a:cd:93:6b:7e: b1:f9:54:de:5b:95:64:76:7c:27:63:07:c9:b3:62:ea:b6:d7: 5f:cf:dd:e9:cd:cc:e7:1c:0d:70:77:4f:33:cf:32:23:9e:96: 51:3c:df:c8:a9:35:f3:50:07:9e:f6:c7:4c:a1:77:f9:48:d1: 3c:03:b4:b9:1b:e7:99:b4:3c:18:b3:f0:c3:f4:e2:cc:40:7f: 22:5f:75:8a:3d:d8:7d:ef:22:b6:f9:3e:1c:33:cb:a0:99:25: 73:a7:8c:29 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICIhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjYwMTMwMTYxMzQyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdjZDhiNi0wMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8yyd12ybMMBkqe4R48zUtLrzNHLzNt51TWo8uCDWhyZhZiGGlCHslYgJCGBj qBPfJ4AORPzfWnXXvjFPNxNy9Q8dvalbwbt9CKJKAu/fxiBC6INdsI45J33yjlKw /oeLZ/lZ81EzagKRDGdjxGxQGiq6UTZWuFw7tjdswSS3fWKodDdbIqHUnabOVtGm pzsyQqXHoYypmXgu9Hp4Pj9WQnrOU7Xih+Fc1ibhKbOThi9ulNnken6i2bRqe3qr OtjchpC4Vn9NBpGtLJBmBW7KWAq5RxTZsjwKkcU6/NMadrV5Cl0ZBLzpLqGwCU9W KUTA7+l5DR0ngxZbtsJuT2N0CQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBQqGvpV tMn4gICS0Oavvg/F2T3MMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM3OTQvMjBGRTU2MTZFOThGMTFFNUEzREREQzY2QzRGOUFFMDIvNDlDQUVGNjRE MDcwMTFGMDhFQUIyOTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr9TQDBADLESQDBAPLqlAwDQYJKoZIhvcNAQELBQADggEB AATf32WhZ4iHyqmZU1ZYArc1dEqvNbVfS9pK40gR65Gmr+wwvJ+LQBOcwJ/hLCQy QFR2061WvJ1M3TRocpVFArQhFIbCej9Zzt+MMaJLh4CWmUwn3nESIjVxOI5CYJJs Bb72HAPCSKka0V2qG9ztxgz47WQ7A6ehgLF1XxANhpg4JCEKVOc+KNKA+yoY+TKF 0CjVLAkm91LVpzab8poazZNrfrH5VN5blWR2fCdjB8mzYuq211/P3enNzOccDXB3 TzPPMiOellE838ipNfNQB572x0yhd/lI0TwDtLkb55m0PBiz8MP04sxAfyJfdYo9 2H3vIrb5Phwzy6CZJXOnjCk= -----END CERTIFICATE-----Generated at Thu Feb 5 02:43:22 2026 by rpki-client