This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa File: 902F4AAC567011EFA451BD7CC4F9AE02.roa (raw, json) Hash identifier: 97Wh0yU8kzDSNFKSnD4fUoCpxuSAIwSu8rQgCE0bUqQ= Subject key identifier: 08:B8:95:9E:79:8C:FD:5C:FD:3D:B4:05:67:9D:4B:26:E2:89:7C:52 Certificate issuer: /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Certificate serial: 338A Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa Signing time: Wed 24 Dec 2025 16:12:49 +0000 ROA not before: Wed 24 Dec 2025 16:12:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 58867 IP address blocks: 163.47.176.0/24 maxlen: 24 203.175.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13194 (0x338a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348 Validity Not Before: Dec 24 16:12:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694c1101-2e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:35:78:7b:f9:30:da:03:c8:8a:b1:b5:e8: fd:8a:fb:b7:f9:d7:41:58:58:79:18:90:0d:54:aa: 02:f8:0a:0c:21:3b:33:77:52:b5:93:4a:7e:14:4a: d6:e8:5c:48:80:75:e4:32:8b:9f:b6:2d:fd:ba:72: a1:26:17:34:b8:fc:01:82:8a:f7:83:78:a0:b5:f6: e5:91:60:f6:02:5c:8d:b8:8b:16:dd:79:37:b1:7a: b5:f4:e9:06:4d:e9:3d:8d:de:52:b8:53:db:6f:a0: 60:ce:d3:6d:7b:54:f3:1a:6d:69:42:d5:09:99:2b: ba:d5:fc:ab:3d:91:d7:a0:86:0c:5e:9f:4f:bf:71: d4:bb:d5:62:72:15:e7:00:3d:46:a6:b3:de:50:1c: dd:ef:b9:f9:9d:7f:9d:5f:d0:dc:fa:4f:18:98:41: fb:1d:59:b4:ff:ee:20:d2:67:cd:55:6d:fc:6d:bc: ed:10:79:5d:d8:2c:08:8e:95:cc:78:12:6c:77:65: 2b:2c:f6:35:56:1d:6a:0f:f1:64:96:24:0d:97:70: 48:d7:c3:41:56:8c:7a:a6:85:34:43:56:41:33:60: 65:4d:5d:41:8e:e6:3d:78:6e:bb:ba:d0:7c:8c:b3: 71:41:1d:85:b5:20:4b:01:95:d3:55:1e:05:5b:47: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B8:95:9E:79:8C:FD:5C:FD:3D:B4:05:67:9D:4B:26:E2:89:7C:52 X509v3 Authority Key Identifier: keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/902F4AAC567011EFA451BD7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.47.176.0/24 203.175.175.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:36:af:7e:a8:b9:b2:a4:8c:bf:55:37:8e:4a:93:8b:5d:d4: d2:35:75:c6:1a:25:ae:89:65:32:2e:e8:1e:e4:be:83:1d:a4: 8f:46:2f:90:cb:e2:e6:00:9f:74:c5:78:e9:cd:9f:ac:95:4d: 73:fc:38:ff:aa:bb:12:32:72:14:93:78:6a:f2:34:cd:68:3f: 5b:c7:5f:09:e6:60:15:a1:49:4c:6e:22:85:b2:b2:75:39:30: 71:93:90:d2:a1:f5:b0:c0:3e:ce:e9:3a:bc:86:0c:3a:cb:68: 79:8d:b8:7e:fe:de:66:af:ed:77:07:e0:56:e6:95:70:3a:87: 82:16:2e:f8:69:a7:77:f6:8e:6a:ff:a7:d3:17:ad:5d:42:f2: 15:0d:0d:76:5b:3f:2d:77:7e:66:5a:6b:f4:3a:21:7c:02:48: 29:91:a6:6f:9f:82:45:57:87:32:ae:40:59:86:79:19:88:48: 9f:eb:8d:f4:2f:9b:5c:5a:e1:66:b1:46:76:e1:ad:d6:69:ff: a7:bf:d4:61:ba:96:81:b7:38:37:7d:10:aa:68:e4:30:4c:0a: 9f:b2:65:a7:2a:58:34:7b:eb:1e:df:72:ff:99:9a:55:62:f0: a8:3c:e0:8f:a0:8d:02:55:d3:13:b5:b6:05:5f:18:1f:df:94: 61:30:e1:71 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICM4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REY4NjMxMTAvBgNVBAUTKDM5Q0UxNURCMzY3MzlBMjJDQUVFNjRFMENGOEJBMzFG NUE2QjkzNDgwHhcNMjUxMjI0MTYxMjQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRjMTEwMS0yZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVY1eHv5MNoDyIqxtej9ivu3+ddBWFh5GJANVKoC+AoMITszd1K1k0p+FErW 6FxIgHXkMoufti39unKhJhc0uPwBgor3g3igtfblkWD2AlyNuIsW3Xk3sXq19OkG Tek9jd5SuFPbb6BgztNte1TzGm1pQtUJmSu61fyrPZHXoIYMXp9Pv3HUu9VichXn AD1GprPeUBzd77n5nX+dX9Dc+k8YmEH7HVm0/+4g0mfNVW38bbztEHld2CwIjpXM eBJsd2UrLPY1Vh1qD/FkliQNl3BI18NBVox6poU0Q1ZBM2BlTV1BjuY9eG67utB8 jLNxQR2FtSBLAZXTVR4FW0eQrQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAi4lZ55 jP1c/T20BWedSybiiXxSMB8GA1UdIwQYMBaAFDnOFds2c5oiyu5k4M+Lox9aa5NI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg2My9CRkU1NEE2ODgx NUIxMUUyOUI1OEE3M0IzMjkyQjVFOC9PYzRWMnpaem1pTEs3bVRnejR1akgxcHJr MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jNFYyelp6bWlMSzdtVGd6NHVqSDFwcmswZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY4NjMvQkZFNTRBNjg4MTVCMTFFMjlCNThBNzNCMzI5MkI1RTgvOTAyRjRBQUM1 NjcwMTFFRkE0NTFCRDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACjL7ADBADLr68wDQYJKoZIhvcNAQELBQADggEBAJ02r36o ubKkjL9VN45Kk4td1NI1dcYaJa6JZTIu6B7kvoMdpI9GL5DL4uYAn3TFeOnNn6yV TXP8OP+quxIychSTeGryNM1oP1vHXwnmYBWhSUxuIoWysnU5MHGTkNKh9bDAPs7p OryGDDrLaHmNuH7+3mav7XcH4FbmlXA6h4IWLvhpp3f2jmr/p9MXrV1C8hUNDXZb Py13fmZaa/Q6IXwCSCmRpm+fgkVXhzKuQFmGeRmISJ/rjfQvm1xa4WaxRnbhrdZp /6e/1GG6loG3ODd9EKpo5DBMCp+yZacqWDR76x7fcv+ZmlVi8Kg84I+gjQJV0xO1 tgVfGB/flGEw4XE= -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:20 2025 by rpki-client