This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa File: EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa (raw, json) Hash identifier: K/3zsKqKBKKkyXwdCmeFMwsfDDIdOrhL5paVvImcij8= Subject key identifier: F6:D6:8F:EC:12:82:62:83:8C:A9:FC:32:13:45:59:85:7B:8E:D2:D4 Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 083F Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa Signing time: Wed 14 Jan 2026 11:55:32 +0000 ROA not before: Wed 14 Jan 2026 11:55:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132231 IP address blocks: 202.150.96.0/20 maxlen: 24 202.150.112.0/20 maxlen: 24 202.189.172.0/23 maxlen: 24 202.189.174.0/24 maxlen: 24 202.189.175.0/24 maxlen: 24 2403:c900::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Jan 14 11:55:32 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69678434-db9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:2e:07:be:c9:0e:00:6b:40:6b:c6:5f:77: 3a:e1:94:a8:5d:e9:9c:63:2a:23:99:b1:e0:5c:b6: 11:e3:85:28:0b:c8:10:95:db:ee:9a:58:38:ea:ae: b5:5b:19:c8:bf:bc:14:d8:c7:fd:bb:c7:e1:9d:c4: 31:0b:76:49:95:28:52:1d:fa:21:49:f9:60:59:71: e1:95:db:8c:38:78:0b:3e:e2:94:64:65:43:a9:fb: 51:f2:6f:6b:0b:37:8a:eb:08:bc:cc:ac:d3:6b:09: 32:58:28:84:30:23:82:fe:d6:5e:3a:4f:bf:9b:27: 7e:73:21:de:c6:39:54:76:f0:4b:94:8c:9e:4f:b4: 09:ce:54:51:d9:3e:85:57:56:be:75:bc:9c:78:a3: 96:bd:89:ee:15:e9:7f:e2:ee:0d:2f:69:d3:c0:ae: 13:9b:85:a1:57:ab:fb:35:6f:80:da:55:09:2b:ad: ae:bf:2c:d0:37:6b:1d:dd:2b:dd:b8:ea:3d:28:c8: da:b7:05:63:43:65:0f:d1:5e:6c:7a:52:c4:53:5c: de:b8:06:40:c0:94:c0:5a:f0:20:55:d0:d8:a8:4a: 67:1f:a3:77:94:4d:05:7d:d3:f4:c1:9d:70:8c:66: ee:34:c3:c3:4f:52:92:f2:52:99:b6:04:e5:ac:53: 96:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D6:8F:EC:12:82:62:83:8C:A9:FC:32:13:45:59:85:7B:8E:D2:D4 X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.150.96.0/19 202.189.172.0/22 IPv6: 2403:c900::/32 Signature Algorithm: sha256WithRSAEncryption c0:a8:cc:bd:46:d8:35:2b:43:83:6a:1e:95:c0:56:91:87:cc: 1b:df:06:cd:3c:c1:91:83:7f:ea:66:52:1a:ca:92:c4:a7:89: 29:fb:95:ff:c9:c0:61:54:64:ff:fb:c5:36:a4:2e:af:3d:c7: 55:33:ef:ba:6c:13:99:74:57:cb:dd:fe:d8:17:74:2b:da:ba: 41:8d:21:da:a3:d5:f6:98:b5:80:8d:63:2c:2a:fa:97:85:29: a1:ba:3d:5c:2c:a0:13:59:f3:c9:9f:89:15:3f:56:6a:f5:eb: d2:c3:ce:00:08:c9:70:c4:b3:e4:9d:2e:9c:cf:40:dd:b8:b7: d0:36:c3:89:54:66:70:da:9c:c1:1b:7a:9f:1f:e9:db:99:f9: 0e:0c:db:af:82:cd:c4:ad:17:a7:b9:35:bf:45:b4:bc:9f:f4: a6:b7:a4:58:cd:66:49:a0:7f:a0:20:6c:33:d4:aa:d6:d2:ce: 3a:d9:34:28:e6:91:20:db:c6:01:e5:da:23:9f:1e:59:1e:ee: 9d:bd:ed:6d:67:0d:1f:17:fd:3d:d6:28:75:75:16:09:57:dc: 8d:aa:88:fd:f5:f6:8c:34:01:8a:d7:18:69:42:94:b5:39:89: 43:d9:b4:50:a2:30:c5:73:13:92:a8:58:28:73:19:33:90:1e: 8b:ee:49:a4 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjYwMTE0MTE1NTMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY3ODQzNC1kYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY4uB77JDgBrQGvGX3c64ZSoXemcYyojmbHgXLYR44UoC8gQldvumlg46q61 WxnIv7wU2Mf9u8fhncQxC3ZJlShSHfohSflgWXHhlduMOHgLPuKUZGVDqftR8m9r CzeK6wi8zKzTawkyWCiEMCOC/tZeOk+/myd+cyHexjlUdvBLlIyeT7QJzlRR2T6F V1a+dbyceKOWvYnuFel/4u4NL2nTwK4Tm4WhV6v7NW+A2lUJK62uvyzQN2sd3Svd uOo9KMjatwVjQ2UP0V5selLEU1zeuAZAwJTAWvAgVdDYqEpnH6N3lE0FfdP0wZ1w jGbuNMPDT1KS8lKZtgTlrFOWJQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPbWj+wS gmKDjKn8MhNFWYV7jtLUMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvRURENERCMENF REIyMTFFRkIwRDI2MjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAXKlmADBALKvawwDQQCAAIwBwMFACQDyQAwDQYJKoZIhvcN AQELBQADggEBAMCozL1G2DUrQ4NqHpXAVpGHzBvfBs08wZGDf+pmUhrKksSniSn7 lf/JwGFUZP/7xTakLq89x1Uz77psE5l0V8vd/tgXdCvaukGNIdqj1faYtYCNYywq +peFKaG6PVwsoBNZ88mfiRU/Vmr169LDzgAIyXDEs+SdLpzPQN24t9A2w4lUZnDa nMEbep8f6duZ+Q4M26+CzcStF6e5Nb9FtLyf9Ka3pFjNZkmgf6AgbDPUqtbSzjrZ NCjmkSDbxgHl2iOfHlke7p297W1nDR8X/T3WKHV1FglX3I2qiP319ow0AYrXGGlC lLU5iUPZtFCiMMVzE5KoWChzGTOQHovuSaQ= -----END CERTIFICATE-----Generated at Sun Jan 25 09:21:41 2026 by rpki-client