This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/A3D607F0C9D611F0BC0DEA51C4F9AE02.roa File: A3D607F0C9D611F0BC0DEA51C4F9AE02.roa (raw, json) Hash identifier: mIfWqURedmsVPJBea7EDmPK9Ms2T18gS2XdLmuXNgyU= Subject key identifier: BB:C9:1B:FF:19:45:2B:77:0D:96:EC:05:1C:A0:BE:8B:CC:50:78:B0 Certificate issuer: /CN=A914E928/serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1 Certificate serial: 0F Authority key identifier: 34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/A3D607F0C9D611F0BC0DEA51C4F9AE02.roa Signing time: Wed 26 Nov 2025 09:14:10 +0000 ROA not before: Wed 26 Nov 2025 09:14:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24090 IP address blocks: 202.170.48.0/24 maxlen: 24 202.170.50.0/23 maxlen: 23 202.170.51.0/24 maxlen: 24 202.170.52.0/23 maxlen: 24 202.170.56.0/21 maxlen: 21 202.170.56.0/23 maxlen: 24 202.170.58.0/24 maxlen: 24 202.170.59.0/24 maxlen: 24 202.170.60.0/23 maxlen: 24 202.170.62.0/24 maxlen: 24 2402:2200:2000::/35 maxlen: 35 2402:2200:2a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E928, serialNumber=346C20F389DB9EDC6A1BF2F4031A9A1703BE87E1 Validity Not Before: Nov 26 09:14:10 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6926c4e2-b26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:bc:11:6b:fe:9f:70:75:dd:a5:bc:ef:7f: 7a:45:9e:7b:23:8a:90:6a:a2:19:e8:d8:d8:8d:37: d4:63:ec:37:4f:8e:60:bd:fd:1a:20:4c:7e:a6:46: db:65:a5:e5:51:33:40:cc:63:5f:cc:50:56:df:c0: 85:25:07:67:e8:53:b1:6c:c8:af:09:26:1d:01:00: e1:1f:6a:32:0d:22:e7:3e:8e:5c:52:2b:ec:99:3e: 3e:37:3b:24:44:e8:1b:51:5e:20:3b:f7:9c:df:8a: 5a:d5:48:41:42:cd:0e:c8:98:6a:df:f4:42:e0:ed: 2f:cf:69:ee:09:0f:2d:ce:e7:09:71:be:a8:7e:4c: 9a:6c:43:7e:3d:5c:a9:27:0a:67:d0:d3:e8:89:f6: 17:44:2c:1d:55:9f:e8:d5:31:b9:b8:92:33:ba:70: 04:c4:b3:15:20:94:a0:7d:ce:50:23:a1:10:80:1f: 9a:16:81:7c:35:a7:aa:21:63:1f:cd:6f:af:d3:2f: 31:5e:c9:c4:b9:b3:76:9d:d0:5e:c6:08:13:7d:7f: da:88:43:b0:eb:e5:fb:3a:2a:57:df:7e:fe:7d:84: cd:5c:b3:80:2c:ea:e6:f9:f6:ae:ca:cc:6e:3c:5a: c5:b1:ff:9a:bd:0b:4b:bd:60:03:d7:62:29:63:ce: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C9:1B:FF:19:45:2B:77:0D:96:EC:05:1C:A0:BE:8B:CC:50:78:B0 X509v3 Authority Key Identifier: keyid:34:6C:20:F3:89:DB:9E:DC:6A:1B:F2:F4:03:1A:9A:17:03:BE:87:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/NGwg84nbntxqG_L0AxqaFwO-h-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NGwg84nbntxqG_L0AxqaFwO-h-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E928/89A60A0CC9D511F0897FDD4FC4F9AE02/A3D607F0C9D611F0BC0DEA51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.170.48.0/24 202.170.50.0-202.170.53.255 202.170.56.0/21 IPv6: 2402:2200:2000::/35 Signature Algorithm: sha256WithRSAEncryption 76:8b:73:56:e6:47:16:84:d0:88:fe:f6:8f:26:8d:da:ff:e2: 97:21:23:cb:86:9b:2c:57:0a:7f:c5:d1:79:64:87:b5:13:95: a3:15:a9:76:69:d9:1c:f1:ca:25:7b:1f:2b:4f:e5:48:8a:66: 37:67:ce:5a:6e:73:6f:c5:5b:17:b5:0e:f2:95:b8:7d:a5:94: fe:49:f4:b5:b0:6f:56:be:55:67:1e:ea:7c:85:8a:f0:1e:5f: 54:80:59:c5:1c:59:f6:e1:47:ca:60:a2:47:f0:30:7f:f1:23: df:4b:3d:c1:e0:56:4e:93:2f:4d:8d:a8:a2:d8:b9:6e:2f:69: a0:e5:43:74:68:f6:80:7f:c5:d3:47:80:84:18:72:8c:e9:e0: a4:42:ae:e4:75:c2:66:ba:ac:51:3f:23:7e:1c:d2:12:a7:a8: b4:e6:6e:49:eb:08:08:3f:86:9f:1c:21:16:b4:49:65:96:b7: 87:c2:22:38:e1:f1:13:be:ad:91:75:04:e4:ed:80:88:56:28: b5:27:23:b2:50:03:39:ab:4b:19:ac:b0:45:79:28:b5:89:41: 51:6f:25:92:0f:6a:a2:c1:af:23:9e:9e:8f:8a:0f:0c:e2:b1: 7a:5f:ab:9e:7e:65:f1:30:e6:80:92:fa:00:29:31:76:29:41: 77:a8:93:29 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTkyODExMC8GA1UEBRMoMzQ2QzIwRjM4OURCOUVEQzZBMUJGMkY0MDMxQTlBMTcw M0JFODdFMTAeFw0yNTExMjYwOTE0MTBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjZjNGUyLWIyNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI8rwRa/6fcHXdpbzvf3pFnnsjipBqohno2NiNN9Rj7DdPjmC9/RogTH6mRttl peVRM0DMY1/MUFbfwIUlB2foU7FsyK8JJh0BAOEfajINIuc+jlxSK+yZPj43OyRE 6BtRXiA795zfilrVSEFCzQ7ImGrf9ELg7S/Pae4JDy3O5wlxvqh+TJpsQ349XKkn CmfQ0+iJ9hdELB1Vn+jVMbm4kjO6cATEsxUglKB9zlAjoRCAH5oWgXw1p6ohYx/N b6/TLzFeycS5s3ad0F7GCBN9f9qIQ7Dr5fs6Klfffv59hM1cs4As6ub59q7KzG48 WsWx/5q9C0u9YAPXYiljzmoXAgMBAAGjggK5MIICtTAdBgNVHQ4EFgQUu8kb/xlF K3cNluwFHKC+i8xQeLAwHwYDVR0jBBgwFoAUNGwg84nbntxqG/L0AxqaFwO+h+Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFOTI4Lzg5QTYwQTBDQzlE NTExRjA4OTdGREQ0RkM0RjlBRTAyL05Hd2c4NG5ibnR4cUdfTDBBeHFhRndPLWgt RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkd3Zzg0bmJudHhxR19MMEF4cWFGd08taC1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTkyOC84OUE2MEEwQ0M5RDUxMUYwODk3RkRENEZDNEY5QUUwMi9BM0Q2MDdGMEM5 RDYxMUYwQkMwREVBNTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBDBggrBgEFBQcBBwEB/wQ0 MDIwIAQCAAEwGgMEAMqqMDAMAwQByqoyAwQByqo0AwQDyqo4MA4EAgACMAgDBgUk AiIAIDANBgkqhkiG9w0BAQsFAAOCAQEAdotzVuZHFoTQiP72jyaN2v/ilyEjy4ab LFcKf8XReWSHtROVoxWpdmnZHPHKJXsfK0/lSIpmN2fOWm5zb8VbF7UO8pW4faWU /kn0tbBvVr5VZx7qfIWK8B5fVIBZxRxZ9uFHymCiR/Awf/Ej30s9weBWTpMvTY2o oti5bi9poOVDdGj2gH/F00eAhBhyjOngpEKu5HXCZrqsUT8jfhzSEqeotOZuSesI CD+GnxwhFrRJZZa3h8IiOOHxE76tkXUE5O2AiFYotScjslADOatLGaywRXkotYlB UW8lkg9qosGvI56ej4oPDOKxel+rnn5l8TDmgJL6ACkxdilBd6iTKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:50 2025 by rpki-client