This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/909C5126F0A711EEA6150174C4F9AE02.roa File: 909C5126F0A711EEA6150174C4F9AE02.roa (raw, json) Hash identifier: cT2HTnQYDI4/vifr8Nzt4mMkqabAx2MoOZZz7StrDAE= Subject key identifier: 5A:8A:96:FA:67:2A:28:39:2B:E3:F3:05:80:63:B7:A3:26:72:08:36 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 3511 Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/909C5126F0A711EEA6150174C4F9AE02.roa Signing time: Tue 02 Dec 2025 15:12:11 +0000 ROA not before: Tue 02 Dec 2025 15:12:11 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 9241 IP address blocks: 110.35.88.0/21 maxlen: 21 113.20.64.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13585 (0x3511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Dec 2 15:12:11 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=692f01cb-fb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:01:61:35:ca:fd:3b:bb:bd:7f:53:1b:ca:1d: 88:b7:41:da:c4:7c:1b:6c:85:d3:8b:b7:ab:00:f4: 65:09:5a:ef:fa:82:e4:b5:6d:45:ae:59:78:be:a0: 03:aa:4c:8a:66:df:34:71:9b:9a:a5:23:ea:2c:9b: e5:36:2e:94:8d:24:a5:b1:da:e9:aa:27:1b:c1:fa: ef:ca:92:14:86:ed:64:82:6d:05:3e:d2:ef:b0:d8: 18:8a:fb:0c:93:81:b1:a4:f3:c1:f8:07:67:e2:91: fd:c8:f9:d9:52:58:5d:6f:d3:4c:49:c9:84:19:d6: 25:5d:8a:ca:ed:61:03:04:b2:09:a7:ca:57:52:56: 07:c9:01:87:12:d2:6b:d2:51:9e:dd:cd:07:66:8d: 2b:9a:f1:f9:52:25:db:67:4c:7b:dc:51:81:cc:09: 25:0e:1a:1b:32:17:99:63:16:4a:02:03:ae:af:36: ce:2b:f7:2a:96:ee:6d:ee:af:ca:f2:43:6e:53:ac: 7e:d8:38:d9:47:a1:e2:bd:b2:6e:fa:4e:16:2b:c4: 8d:9b:49:eb:c1:71:58:cc:9c:7a:61:95:06:32:d4: fd:be:79:c1:04:ce:04:92:b8:a1:64:ad:6a:e5:93: 53:7d:b6:fe:cb:3d:85:15:50:57:1c:20:08:2c:c7: d9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8A:96:FA:67:2A:28:39:2B:E3:F3:05:80:63:B7:A3:26:72:08:36 X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/909C5126F0A711EEA6150174C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.35.88.0/21 113.20.64.0/19 Signature Algorithm: sha256WithRSAEncryption a2:11:dc:7e:a3:bc:57:ea:36:15:5f:6f:f3:d6:7a:30:71:ee: e5:8d:1c:4f:78:fc:78:50:29:88:8b:bf:40:df:df:07:c9:08: 34:db:dc:d4:0d:05:95:d4:40:18:8a:89:b7:ff:ba:d3:25:38: f3:ba:2e:43:97:80:b6:71:78:db:1c:bc:92:ff:a9:0b:be:a0: 36:f9:75:6b:c6:c2:50:e5:f1:54:ac:44:fb:a8:e5:8a:46:54: b4:e9:ee:1d:51:12:53:1c:30:bd:37:37:13:d7:4b:f6:56:ba: db:c3:a3:70:4b:15:f1:4c:2b:55:6e:96:36:61:9c:54:ba:19: aa:6d:b3:ca:d2:e6:08:16:01:17:72:11:4e:ad:14:14:f7:16: b8:af:e4:8f:a8:61:bf:e4:b6:60:2a:7f:1b:48:e1:1b:b7:e7: fb:bf:e2:f6:4b:e9:a9:02:e9:43:93:78:26:ad:6f:6e:a8:4e: 24:81:31:2a:10:ac:f7:d4:52:62:05:15:3c:e5:88:e4:3f:89: 01:74:aa:b9:3b:b1:da:ac:32:ea:86:d2:43:cd:5b:99:07:77: 2d:a2:a6:a6:e7:70:96:f0:86:61:c3:a1:45:1b:b7:2c:b0:8d: 81:a3:d2:6c:1a:e6:60:40:d4:b2:5b:25:03:ea:2d:52:5c:f6: 02:14:87:01 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjUxMjAyMTUxMjExWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmMDFjYi1mYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wFhNcr9O7u9f1Mbyh2It0HaxHwbbIXTi7erAPRlCVrv+oLktW1Frll4vqAD qkyKZt80cZuapSPqLJvlNi6UjSSlsdrpqicbwfrvypIUhu1kgm0FPtLvsNgYivsM k4GxpPPB+Adn4pH9yPnZUlhdb9NMScmEGdYlXYrK7WEDBLIJp8pXUlYHyQGHEtJr 0lGe3c0HZo0rmvH5UiXbZ0x73FGBzAklDhobMheZYxZKAgOurzbOK/cqlu5t7q/K 8kNuU6x+2DjZR6HivbJu+k4WK8SNm0nrwXFYzJx6YZUGMtT9vnnBBM4EkrihZK1q 5ZNTfbb+yz2FFVBXHCAILMfZyQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFqKlvpn Kig5K+PzBYBjt6Mmcgg2MB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI3RjkvNkVEMkVCQUExRDlBMTFFMkFFOTNBRDg3MDhCMDJDRDIvOTA5QzUxMjZG MEE3MTFFRUE2MTUwMTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBANuI1gDBAVxFEAwDQYJKoZIhvcNAQELBQADggEBAKIR3H6j vFfqNhVfb/PWejBx7uWNHE94/HhQKYiLv0Df3wfJCDTb3NQNBZXUQBiKibf/utMl OPO6LkOXgLZxeNscvJL/qQu+oDb5dWvGwlDl8VSsRPuo5YpGVLTp7h1RElMcML03 NxPXS/ZWutvDo3BLFfFMK1VuljZhnFS6Gapts8rS5ggWARdyEU6tFBT3Friv5I+o Yb/ktmAqfxtI4Ru35/u/4vZL6akC6UOTeCatb26oTiSBMSoQrPfUUmIFFTzliOQ/ iQF0qrk7sdqsMuqG0kPNW5kHdy2ipqbncJbwhmHDoUUbtyywjYGj0mwa5mBA1LJb JQPqLVJc9gIUhwE= -----END CERTIFICATE-----Generated at Sun Dec 21 03:36:13 2025 by rpki-client