This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/9E283D22E07A11F0AD28F7913A6F56BC.roa File: 9E283D22E07A11F0AD28F7913A6F56BC.roa (raw, json) Hash identifier: kvLeQTrBrWwHA2shiEotr3VQqnyo8ZeA1spX1g7O3vU= Subject key identifier: 11:2D:AF:35:41:73:4C:A2:7A:E0:B3:9C:82:95:89:98:05:3C:3D:63 Certificate issuer: /CN=A91DFA25/serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B Certificate serial: 05 Authority key identifier: CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/9E283D22E07A11F0AD28F7913A6F56BC.roa Signing time: Wed 24 Dec 2025 03:42:49 +0000 ROA not before: Wed 24 Dec 2025 03:42:49 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141216 IP address blocks: 203.31.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 03:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA25, serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B Validity Not Before: Dec 24 03:42:49 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=694b6139-b824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:20:9c:18:35:e4:b3:34:b3:f6:4b:92:28: c6:6c:cc:9f:ac:60:6d:ca:e5:1d:9f:1f:4e:4f:89: 39:84:d4:db:da:a3:b9:d7:8e:50:8c:06:d0:57:87: cf:43:fb:d3:e8:65:28:71:c5:0b:0d:01:e8:a9:13: d2:41:15:37:27:b2:e4:59:b0:5e:1c:60:63:c3:f5: f7:54:e0:fe:fa:3a:dc:62:eb:71:a5:6c:8d:7a:9b: d7:d9:f2:48:65:a2:c9:88:c9:6b:ff:b2:28:e4:c8: 3a:67:35:a5:f7:d1:c2:ae:8b:13:17:9e:49:64:36: 92:1d:5f:9f:15:04:cb:87:d2:cf:98:ba:aa:ca:47: 9f:27:0f:e3:b4:17:1d:13:43:ef:aa:ca:73:fb:b4: d2:1f:79:0e:d0:ff:e0:48:fa:a0:68:ec:5c:62:77: 80:75:e4:26:5c:6f:c4:21:f6:8f:8e:f6:c8:0a:65: ab:1d:6d:97:6f:d0:bd:d3:37:87:a0:96:07:d1:ea: 00:d1:0d:96:aa:1a:63:eb:bf:d0:2f:d9:64:40:dc: cf:a9:5d:db:ac:87:50:7e:6f:03:4b:25:70:2a:cd: 3e:f3:a5:6d:c3:5e:fb:80:e7:2d:c9:13:a9:a4:6b: 57:96:cc:44:fa:de:15:88:5a:e6:d5:e5:75:a7:67: fe:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2D:AF:35:41:73:4C:A2:7A:E0:B3:9C:82:95:89:98:05:3C:3D:63 X509v3 Authority Key Identifier: keyid:CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/9E283D22E07A11F0AD28F7913A6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.31.93.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a9:88:e6:13:e9:cb:02:93:fe:97:28:17:9c:dd:c2:a5:86: d2:ad:e4:24:64:a9:83:6e:48:f5:f4:3e:c8:7c:f4:0d:26:2e: 90:3e:90:2f:63:3f:81:88:c2:c3:af:0d:bf:dc:f3:d7:7c:25: fd:91:c3:77:3d:d4:5d:5b:7c:9d:60:f5:73:09:69:cf:75:42: fb:5e:98:da:dc:ed:5e:e0:7d:52:32:6a:a9:b4:27:72:f3:72: cf:51:ac:db:29:b5:3b:8c:15:c8:fd:b9:6b:b7:e0:a9:20:be: f8:16:c2:19:52:ca:d1:8e:de:ed:e1:ea:81:bc:a5:ef:73:4d: 5a:1d:38:1a:5e:9d:25:bb:b9:6b:81:36:23:d4:74:52:ca:52: ea:c2:db:28:7e:fd:b6:c4:72:8a:d4:99:6a:74:7b:8a:12:32: ca:ea:cb:66:c4:30:40:3c:1a:c5:66:89:84:9d:fe:da:3d:e3: c0:36:6f:11:cd:7d:f1:6f:41:a4:5e:94:25:5b:b8:31:9b:a9: 32:cd:f9:52:e6:85:59:05:f3:94:24:f1:8d:c4:4c:9a:21:eb: f3:d0:3c:1e:e5:ec:f2:d9:bf:4d:5f:75:c1:57:e6:f7:cb:29: aa:07:6a:d7:e5:24:bd:a8:0f:c7:f0:f8:0c:b3:66:60:eb:27: 95:ce:79:84 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE RkEyNTExMC8GA1UEBRMoQ0M3MEQ4NzM0Mjg5RDMwNUE1MjMzQTk5QjA5Q0Q3OEI4 RkQ2NjY0QjAeFw0yNTEyMjQwMzQyNDlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NGI2MTM5LWI4MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5ryCcGDXkszSz9kuSKMZszJ+sYG3K5R2fH05PiTmE1Nvao7nXjlCMBtBXh89D +9PoZShxxQsNAeipE9JBFTcnsuRZsF4cYGPD9fdU4P76Otxi63GlbI16m9fZ8khl osmIyWv/sijkyDpnNaX30cKuixMXnklkNpIdX58VBMuH0s+YuqrKR58nD+O0Fx0T Q++qynP7tNIfeQ7Q/+BI+qBo7Fxid4B15CZcb8Qh9o+O9sgKZasdbZdv0L3TN4eg lgfR6gDRDZaqGmPrv9Av2WRA3M+pXdush1B+bwNLJXAqzT7zpW3DXvuA5y3JE6mk a1eWzET63hWIWubV5XWnZ/4fAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUES2vNUFz TKJ64LOcgpWJmAU8PWMwHwYDVR0jBBgwFoAUzHDYc0KJ0wWlIzqZsJzXi4/WZksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGQTI1LzcwRjk3OEYyRTA3 NTExRjBBNTY0MkYwNTM5NkY1NkJDL3pIRFljMEtKMHdXbEl6cVpzSnpYaTRfV1pr cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvekhEWWMwS0owd1dsSXpxWnNKelhpNF9XWmtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkEyNS83MEY5NzhGMkUwNzUxMUYwQTU2NDJGMDUzOTZGNTZCQy85RTI4M0QyMkUw N0ExMUYwQUQyOEY3OTEzQTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsfXTANBgkqhkiG9w0BAQsFAAOCAQEAQamI5hPpywKT/pco F5zdwqWG0q3kJGSpg25I9fQ+yHz0DSYukD6QL2M/gYjCw68Nv9zz13wl/ZHDdz3U XVt8nWD1cwlpz3VC+16Y2tztXuB9UjJqqbQncvNyz1Gs2ym1O4wVyP25a7fgqSC+ +BbCGVLK0Y7e7eHqgbyl73NNWh04Gl6dJbu5a4E2I9R0UspS6sLbKH79tsRyitSZ anR7ihIyyurLZsQwQDwaxWaJhJ3+2j3jwDZvEc198W9BpF6UJVu4MZupMs35UuaF WQXzlCTxjcRMmiHr89A8HuXs8tm/TV91wVfm98spqgdq1+UkvagPx/D4DLNmYOsn lc55hA== -----END CERTIFICATE-----Generated at Wed Dec 24 17:32:46 2025 by rpki-client