This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/989C920254F311E7AC64ED3AC4F9AE02.roa File: 989C920254F311E7AC64ED3AC4F9AE02.roa (raw, json) Hash identifier: 87KuRJBmm8dkaxG84GyWayoipsQfeKQlETf+pUQe8D8= Subject key identifier: D0:9B:F0:DA:2B:71:42:19:53:7D:7E:26:EB:0B:92:2F:AC:44:38:77 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 2859 Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/989C920254F311E7AC64ED3AC4F9AE02.roa Signing time: Sun 14 Dec 2025 15:32:56 +0000 ROA not before: Sun 14 Dec 2025 15:32:56 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 58439 IP address blocks: 103.194.176.0/22 maxlen: 22 183.177.96.0/20 maxlen: 24 2402:8880::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10329 (0x2859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Dec 14 15:32:56 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693ed8a8-f842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:d5:93:02:ab:8b:7f:65:6f:56:ca:2f:87: 36:d5:fa:0e:80:68:19:6c:54:4c:b7:c7:e7:7a:71: 49:3e:a6:27:47:d1:06:7e:00:b9:43:91:ee:f6:5a: 69:df:09:6a:3e:98:0c:de:f6:8c:92:99:fc:e0:c4: c7:18:de:94:81:1f:f2:c2:a4:91:9c:d3:69:90:8a: 64:be:c2:49:e3:1b:c9:ba:67:57:47:73:18:2d:3a: 64:66:e9:2f:0c:18:2a:8f:27:2b:ef:92:a7:4b:0e: 31:8d:53:6f:76:ba:7c:9a:4b:df:d5:26:3d:69:a7: 33:6b:8e:d7:0f:33:a5:58:42:2b:eb:d5:ce:c3:6a: 32:6f:46:c7:0c:a9:8d:b5:65:26:d3:b8:b6:21:01: 18:ca:ab:5f:de:48:89:0a:b8:09:f4:ac:ec:66:4c: f1:8b:63:fa:86:96:75:3e:be:b6:a6:81:a5:7c:08: e6:18:c1:3d:bb:76:9e:26:ed:ea:af:69:00:64:75: 3a:e6:0c:d4:c0:95:3f:b2:ed:63:03:e8:51:70:d7: fa:4c:cc:93:4e:39:5d:62:69:2a:64:94:62:83:b5: 7c:c8:a3:e5:05:8d:31:65:c6:6e:71:19:8f:37:d6: 17:04:6b:4e:d9:89:dd:63:ae:c3:6a:05:e4:93:ce: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9B:F0:DA:2B:71:42:19:53:7D:7E:26:EB:0B:92:2F:AC:44:38:77 X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/989C920254F311E7AC64ED3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.194.176.0/22 183.177.96.0/20 IPv6: 2402:8880::/32 Signature Algorithm: sha256WithRSAEncryption 40:21:8a:5c:1d:8c:0e:19:cf:97:b8:40:b1:30:4f:73:b1:d8: 33:0d:71:c7:c3:1c:ea:cc:62:09:f6:f4:d8:70:b5:54:37:cc: 78:04:b2:ed:69:af:26:7b:68:f0:c2:7c:55:a2:b0:34:98:bf: 64:2c:08:c3:4c:8a:29:be:d2:46:25:35:48:f1:c8:1d:67:f1: b8:ec:91:63:ec:5f:63:93:21:fd:a2:8a:59:ef:82:b9:fa:1b: 94:64:93:cc:c4:19:20:d1:98:99:c3:23:07:6d:1a:80:34:75: 6f:48:bd:e8:14:89:15:67:33:28:3f:4f:e3:bb:e1:94:85:db: 5a:be:a9:4c:17:f9:41:2b:1c:a8:2c:69:4c:40:a8:b6:85:7a: 82:70:a7:00:46:3d:7b:0a:5d:a2:2c:df:f9:1a:35:8f:18:7a: c6:13:61:fa:b8:22:f3:f9:50:7e:b6:c9:af:02:d4:9f:c0:ef: 92:c3:7c:fc:7f:20:80:d9:b4:e5:17:51:ff:f6:f4:98:33:1f: 01:9e:3e:a2:ce:32:f8:3b:55:57:68:92:9b:42:e1:5a:cf:b0: e4:04:f6:17:b1:6d:01:0c:3f:eb:7d:7c:fa:c5:99:c7:bb:48: 7c:8e:15:89:f1:0f:43:36:ac:5f:00:3b:ec:e9:61:05:e8:b3: 24:4f:9a:fc -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICKFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUxMjE0MTUzMjU2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNlZDhhOC1mODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcPVkwKri39lb1bKL4c21foOgGgZbFRMt8fnenFJPqYnR9EGfgC5Q5Hu9lpp 3wlqPpgM3vaMkpn84MTHGN6UgR/ywqSRnNNpkIpkvsJJ4xvJumdXR3MYLTpkZukv DBgqjycr75KnSw4xjVNvdrp8mkvf1SY9aacza47XDzOlWEIr69XOw2oyb0bHDKmN tWUm07i2IQEYyqtf3kiJCrgJ9KzsZkzxi2P6hpZ1Pr62poGlfAjmGME9u3aeJu3q r2kAZHU65gzUwJU/su1jA+hRcNf6TMyTTjldYmkqZJRig7V8yKPlBY0xZcZucRmP N9YXBGtO2YndY67DagXkk86NQQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNCb8Nor cUIZU31+JusLki+sRDh3MB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjRCMjUvQjIxQTU3Mjg5RjkyMTFFNDlERUZFMjE2QzRGOUFFMDIvOTg5QzkyMDI1 NEYzMTFFN0FDNjRFRDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnwrADBAS3sWAwDQQCAAIwBwMFACQCiIAwDQYJKoZIhvcN AQELBQADggEBAEAhilwdjA4Zz5e4QLEwT3Ox2DMNccfDHOrMYgn29NhwtVQ3zHgE su1pryZ7aPDCfFWisDSYv2QsCMNMiim+0kYlNUjxyB1n8bjskWPsX2OTIf2iilnv grn6G5Rkk8zEGSDRmJnDIwdtGoA0dW9IvegUiRVnMyg/T+O74ZSF21q+qUwX+UEr HKgsaUxAqLaFeoJwpwBGPXsKXaIs3/kaNY8YesYTYfq4IvP5UH62ya8C1J/A75LD fPx/IIDZtOUXUf/29JgzHwGePqLOMvg7VVdokptC4VrPsOQE9hexbQEMP+t9fPrF mce7SHyOFYnxD0M2rF8AO+zpYQXosyRPmvw= -----END CERTIFICATE-----Generated at Wed Dec 24 15:59:09 2025 by rpki-client