This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/880E53BC852A11EE8B988A85C4F9AE02.roa File: 880E53BC852A11EE8B988A85C4F9AE02.roa (raw, json) Hash identifier: UBqMKcD6QQJBVJugYFB7uy9ERpQ+nq3RYZ0virL4StU= Subject key identifier: 38:0B:CB:0C:A7:B6:5B:A8:79:72:20:27:EF:75:2A:7D:15:E1:BB:99 Certificate issuer: /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9 Certificate serial: 017E Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/880E53BC852A11EE8B988A85C4F9AE02.roa Signing time: Sat 29 Nov 2025 02:29:55 +0000 ROA not before: Sat 29 Nov 2025 02:29:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45666 IP address blocks: 202.89.100.0/22 maxlen: 22 202.89.100.0/24 maxlen: 24 202.89.101.0/24 maxlen: 24 202.89.102.0/24 maxlen: 24 202.89.103.0/24 maxlen: 24 203.55.53.0/24 maxlen: 24 2407:8600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DED9, serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9 Validity Not Before: Nov 29 02:29:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692a5aa3-5c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:82:fa:b8:40:15:7c:44:bd:d4:b3:c4:6d: 92:d6:17:d5:13:72:e2:73:4f:8d:b8:21:c8:66:68: fe:e1:d1:ef:cb:8e:12:d0:53:e9:76:1c:c6:cd:54: 2e:c6:36:dc:c9:a6:7a:36:a0:97:b5:20:ca:e3:45: ae:70:0a:6f:80:fe:2a:2e:8c:2f:42:8a:88:91:a3: 04:fe:ad:a6:e1:eb:b7:fd:c8:b5:51:d9:37:36:57: 13:85:3b:61:cd:7b:54:7b:8a:3f:e6:f0:0a:68:f8: 76:6e:9e:3d:a2:47:07:bc:6d:a6:6b:d4:88:da:a1: 69:72:4f:b5:5d:9c:96:1a:b2:00:35:ea:24:44:36: 26:bb:c4:c5:05:15:e2:c8:e7:7c:ae:6d:78:60:14: 08:69:71:1c:0a:f1:8f:c7:70:5c:af:5f:79:23:9e: dd:62:e3:a7:2f:20:f2:bf:d2:01:43:6b:1c:c7:a8: b8:30:11:74:a9:62:76:c2:4f:79:b9:72:9e:37:01: b7:ce:86:c1:b8:89:b2:0a:72:3f:13:b9:a2:ea:7a: 03:ee:94:88:48:19:60:e1:7f:d0:03:a2:d7:ff:18: f8:82:81:73:a8:a1:b9:bd:40:c6:39:cc:2a:e1:d0: 12:7a:e2:81:e1:ca:de:56:ec:25:84:6e:5e:43:9b: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0B:CB:0C:A7:B6:5B:A8:79:72:20:27:EF:75:2A:7D:15:E1:BB:99 X509v3 Authority Key Identifier: keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/880E53BC852A11EE8B988A85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.89.100.0/22 203.55.53.0/24 IPv6: 2407:8600::/32 Signature Algorithm: sha256WithRSAEncryption 05:3d:9b:f2:ed:9a:25:37:74:3b:f5:0a:0e:87:41:48:89:df: c9:87:38:ab:81:f0:5b:19:6d:a1:92:70:76:26:3b:6d:f2:f0: bf:d4:7f:6a:8a:92:ee:a3:b6:f5:6a:a1:33:c8:3f:fc:a7:6a: 11:a1:cb:04:88:c3:77:6e:3f:9c:b6:08:71:62:6a:29:fb:6d: b8:6f:9f:08:fc:1b:21:f3:a6:80:52:2b:c5:c6:34:7a:65:ab: ac:57:7b:dc:b4:a9:f2:06:d9:27:e4:48:10:83:bd:13:d7:3c: 20:1a:99:85:f9:6a:53:ac:de:1e:b8:b2:6d:ac:0e:a0:20:75: 33:35:d5:09:6e:13:5b:3b:72:56:7a:84:e8:4f:3c:10:6a:bf: fc:f7:f7:5e:c4:b0:f4:3f:4f:fd:10:cd:e8:06:93:27:5e:8c: 8b:bf:f0:25:fa:26:4a:13:5e:d5:43:4f:1c:a7:b3:d8:05:be: f4:75:55:31:bf:db:f7:dc:29:ab:2a:62:15:0d:f6:a5:9b:2a: 20:9b:d6:19:3a:bf:be:d1:98:fc:90:33:06:a6:6c:40:8c:98: 4d:52:58:6c:86:03:02:5b:2e:5e:1d:3b:8e:0f:c9:be:42:3c: 92:d0:a9:54:2f:53:44:2a:cb:54:1a:92:4c:f0:87:19:c4:8f: dc:dd:eb:3d -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRFRDkxMTAvBgNVBAUTKEUxNkU0RjY1RTJFMzk3RTlGQ0UwNTc4NUEyNjVDNjE5 N0M4MjIwQzkwHhcNMjUxMTI5MDIyOTU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhNWFhMy01YzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta2C+rhAFXxEvdSzxG2S1hfVE3Lic0+NuCHIZmj+4dHvy44S0FPpdhzGzVQu xjbcyaZ6NqCXtSDK40WucApvgP4qLowvQoqIkaME/q2m4eu3/ci1Udk3NlcThTth zXtUe4o/5vAKaPh2bp49okcHvG2ma9SI2qFpck+1XZyWGrIANeokRDYmu8TFBRXi yOd8rm14YBQIaXEcCvGPx3Bcr195I57dYuOnLyDyv9IBQ2scx6i4MBF0qWJ2wk95 uXKeNwG3zobBuImyCnI/E7mi6noD7pSISBlg4X/QA6LX/xj4goFzqKG5vUDGOcwq 4dASeuKB4creVuwlhG5eQ5sdAQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFDgLywyn tluoeXIgJ+91Kn0V4buZMB8GA1UdIwQYMBaAFOFuT2Xi45fp/OBXhaJlxhl8giDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REVEOS9ERjE1QjNCODg1 MjkxMUVFQUZEMDRDODRDNEY5QUUwMi80VzVQWmVMamwtbjg0RmVGb21YR0dYeUNJ TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRXNVBaZUxqbC1uODRGZUZvbVhHR1h5Q0lNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRFRDkvREYxNUIzQjg4NTI5MTFFRUFGRDA0Qzg0QzRGOUFFMDIvODgwRTUzQkM4 NTJBMTFFRThCOTg4QTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBALKWWQDBADLNzUwDQQCAAIwBwMFACQHhgAwDQYJKoZIhvcN AQELBQADggEBAAU9m/LtmiU3dDv1Cg6HQUiJ38mHOKuB8FsZbaGScHYmO23y8L/U f2qKku6jtvVqoTPIP/ynahGhywSIw3duP5y2CHFiain7bbhvnwj8GyHzpoBSK8XG NHplq6xXe9y0qfIG2SfkSBCDvRPXPCAamYX5alOs3h64sm2sDqAgdTM11QluE1s7 clZ6hOhPPBBqv/z3917EsPQ/T/0QzegGkydejIu/8CX6JkoTXtVDTxyns9gFvvR1 VTG/2/fcKasqYhUN9qWbKiCb1hk6v77RmPyQMwambECMmE1SWGyGAwJbLl4dO44P yb5CPJLQqVQvU0Qqy1QakkzwhxnEj9zd6z0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:52 2025 by rpki-client