This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa File: 1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa (raw, json) Hash identifier: qmzNMDj0eJRO3I+2FONjuUe85vVvjRJp6v99858Vj2M= Subject key identifier: A9:87:43:86:BD:32:99:5F:AE:AD:06:6E:4A:BD:42:C6:55:06:46:38 Certificate issuer: /CN=A91599B5/serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Certificate serial: 4F Authority key identifier: B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa Signing time: Wed 26 Nov 2025 14:50:10 +0000 ROA not before: Wed 26 Nov 2025 14:50:10 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 154103 IP address blocks: 202.1.28.0/24 maxlen: 24 2402:1e20::/32 maxlen: 36 2402:1e20:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91599B5, serialNumber=B52AE1836C61193DEA8BA5BE9D71B8CBB3430398 Validity Not Before: Nov 26 14:50:10 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=692713a2-fdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:22:56:42:5d:09:32:20:d2:3b:c1:ad:3b: d9:75:3b:b8:7f:bd:ec:d0:bb:29:fa:0b:bb:7a:19: 3f:9a:40:84:85:a9:fe:42:45:57:b3:81:6d:3a:51: af:61:69:91:53:73:59:f9:46:2f:3d:9e:73:4e:79: ee:42:0b:34:0e:a3:77:df:5d:b2:80:d5:ae:b9:4d: 9d:b0:b8:e3:d1:20:c1:c0:e2:62:5b:79:9d:b8:b9: 4f:43:4e:8d:66:6a:be:ed:ba:d6:8e:a2:ba:9d:2f: 97:ec:89:a2:5c:1e:4f:aa:9c:e3:de:6f:aa:7a:05: 6a:10:43:62:74:36:1a:9c:a7:52:08:4c:1c:7f:60: a8:7c:e6:fd:61:19:d3:20:63:df:34:ec:be:23:02: e8:53:94:db:18:bb:4c:90:57:0f:5b:78:fd:62:6e: a2:c7:3e:f4:36:48:c9:c2:98:76:8e:d1:b2:38:1b: 75:be:fb:14:9e:30:76:31:ed:50:c2:bd:5d:9f:f3: 53:0b:0e:f7:5b:f1:3d:5b:cb:b2:6f:53:a5:eb:6a: a3:35:f0:57:a4:f1:c7:5a:b0:d2:a0:b8:4a:85:81: 55:9d:43:18:fe:29:ab:e4:9d:d0:79:47:71:f7:09: 5e:1e:00:5e:5f:fc:7e:ce:ab:b3:b6:e4:87:0e:dd: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:87:43:86:BD:32:99:5F:AE:AD:06:6E:4A:BD:42:C6:55:06:46:38 X509v3 Authority Key Identifier: keyid:B5:2A:E1:83:6C:61:19:3D:EA:8B:A5:BE:9D:71:B8:CB:B3:43:03:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/tSrhg2xhGT3qi6W-nXG4y7NDA5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSrhg2xhGT3qi6W-nXG4y7NDA5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91599B5/B2266FD26DE411F0BE02F961C4F9AE02/1D5A2DB2CAD711F0A64CBB56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.1.28.0/24 IPv6: 2402:1e20::/32 Signature Algorithm: sha256WithRSAEncryption 0e:0f:59:f4:aa:a2:36:c5:5b:55:d9:54:0a:28:24:aa:cd:65: 86:f0:6f:64:49:ed:a1:b7:dd:0d:83:2b:a0:36:fc:42:62:11: ff:bc:d7:ab:e8:f1:9d:41:8f:95:d5:a8:9b:49:f5:ea:5f:73: 7b:9a:54:1d:5d:d8:97:28:c8:18:b9:05:53:ab:43:d8:1d:88: f2:0d:b2:98:c8:f2:ac:23:b9:e5:6b:9e:71:54:41:45:c5:e0: a9:9e:5d:f2:2e:32:00:b5:7e:57:7c:83:ae:28:d7:20:da:4e: 27:7b:79:52:1d:06:97:0e:fc:a7:53:6d:a8:62:8e:17:7d:59: c3:fc:56:82:07:21:0d:b6:eb:52:b2:c5:64:b3:8e:4e:6d:56: d9:2e:eb:24:6f:6c:aa:98:46:13:0e:9e:10:b6:b2:63:0a:08: eb:16:e7:10:50:52:9c:97:07:60:ad:fc:20:74:fe:b9:74:31: db:31:9e:05:d8:9d:1b:42:db:fb:8e:19:a9:49:3a:aa:e6:cd: b4:30:3f:cc:ef:3f:7d:43:89:88:11:63:84:98:a6:ce:32:6e: 77:b8:73:2f:52:a4:ce:b6:1c:e5:ba:2f:3c:14:7d:01:d3:35: 29:5f:c4:33:3d:2f:c6:5a:4f:fe:8a:c9:5d:67:73:a6:4b:30: 87:52:85:21 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTlCNTExMC8GA1UEBRMoQjUyQUUxODM2QzYxMTkzREVBOEJBNUJFOUQ3MUI4Q0JC MzQzMDM5ODAeFw0yNTExMjYxNDUwMTBaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjcxM2EyLWZkZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgYCJWQl0JMiDSO8GtO9l1O7h/vezQuyn6C7t6GT+aQISFqf5CRVezgW06Ua9h aZFTc1n5Ri89nnNOee5CCzQOo3ffXbKA1a65TZ2wuOPRIMHA4mJbeZ24uU9DTo1m ar7tutaOorqdL5fsiaJcHk+qnOPeb6p6BWoQQ2J0Nhqcp1IITBx/YKh85v1hGdMg Y9807L4jAuhTlNsYu0yQVw9beP1ibqLHPvQ2SMnCmHaO0bI4G3W++xSeMHYx7VDC vV2f81MLDvdb8T1by7JvU6XraqM18Fek8cdasNKguEqFgVWdQxj+KavkndB5R3H3 CV4eAF5f/H7Oq7O25IcO3WlrAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUqYdDhr0y mV+urQZuSr1CxlUGRjgwHwYDVR0jBBgwFoAUtSrhg2xhGT3qi6W+nXG4y7NDA5gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OUI1L0IyMjY2RkQyNkRF NDExRjBCRTAyRjk2MUM0RjlBRTAyL3RTcmhnMnhoR1QzcWk2Vy1uWEc0eTdOREE1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFNyaGcyeGhHVDNxaTZXLW5YRzR5N05EQTVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTlCNS9CMjI2NkZEMjZERTQxMUYwQkUwMkY5NjFDNEY5QUUwMi8xRDVBMkRCMkNB RDcxMUYwQTY0Q0JCNTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAMoBHDANBAIAAjAHAwUAJAIeIDANBgkqhkiG9w0BAQsFAAOC AQEADg9Z9KqiNsVbVdlUCigkqs1lhvBvZEntobfdDYMroDb8QmIR/7zXq+jxnUGP ldWom0n16l9ze5pUHV3YlyjIGLkFU6tD2B2I8g2ymMjyrCO55WuecVRBRcXgqZ5d 8i4yALV+V3yDrijXINpOJ3t5Uh0Glw78p1NtqGKOF31Zw/xWggchDbbrUrLFZLOO Tm1W2S7rJG9sqphGEw6eELayYwoI6xbnEFBSnJcHYK38IHT+uXQx2zGeBdidG0Lb +44ZqUk6qubNtDA/zO8/fUOJiBFjhJimzjJud7hzL1KkzrYc5bovPBR9AdM1KV/E Mz0vxlpP/orJXWdzpkswh1KFIQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:19 2025 by rpki-client