This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa File: 85AEBA76504C11ED829F7D24C4F9AE02.roa (raw, json) Hash identifier: eVob+o4PqksNTa/Q5H7V6/lXUkpT0waGoTDuWTkrO5g= Subject key identifier: 13:1E:87:CC:D5:6B:70:01:8E:FF:96:A1:50:25:12:89:61:4A:A7:DE Certificate issuer: /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Certificate serial: 0245 Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa Signing time: Tue 11 Nov 2025 00:17:22 +0000 ROA not before: Tue 11 Nov 2025 00:17:22 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24504 IP address blocks: 202.51.0.0/22 maxlen: 22 202.51.0.0/24 maxlen: 24 202.51.1.0/24 maxlen: 24 202.51.2.0/24 maxlen: 24 202.51.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91728E2, serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF Validity Not Before: Nov 11 00:17:22 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69128091-6fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b3:c2:96:75:e4:7d:a8:6e:ba:9b:70:66:12: 41:2a:5b:bd:c3:fa:f4:54:63:b0:1c:9f:46:a1:79: 32:fd:02:11:fb:38:07:88:1b:35:16:ac:2d:79:d9: e3:90:4c:c5:be:1f:c5:ae:25:d5:e9:62:bd:39:be: 4b:b3:32:d6:51:8f:74:2c:05:25:53:fd:b1:77:3b: 5f:82:38:dc:07:9d:fb:12:13:b7:82:aa:cf:23:9f: 22:e3:c6:de:c4:5f:82:2a:b7:e9:ed:60:a7:50:0a: ee:cf:32:41:3f:be:76:66:74:94:a9:82:78:ce:b5: b5:e0:45:d6:5a:38:c8:ef:2e:20:05:5a:9f:81:b5: 68:37:b3:7c:39:d0:77:ac:7c:47:ba:1d:d7:5e:7b: 27:c0:24:98:1d:64:59:d4:ee:e4:e8:87:ea:08:b8: 42:50:99:08:ab:11:5c:f6:15:be:bc:d1:0b:1d:4d: e3:ac:04:f0:f2:ed:af:03:fe:1f:eb:7e:01:10:c1: cb:64:0d:8f:4e:35:86:0f:30:a9:2a:6e:18:93:51: 1b:7b:9e:2b:38:72:e6:ce:59:1b:84:d6:a3:91:54: 78:68:ec:9d:2c:e3:52:f4:d3:8f:00:08:91:80:9c: e9:f4:eb:58:ca:a9:49:f9:30:09:af:e4:bd:2f:6e: 1f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1E:87:CC:D5:6B:70:01:8E:FF:96:A1:50:25:12:89:61:4A:A7:DE X509v3 Authority Key Identifier: keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/85AEBA76504C11ED829F7D24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.51.0.0/22 Signature Algorithm: sha256WithRSAEncryption b2:83:24:fb:8f:96:2d:9e:d5:31:cf:a4:c6:3c:7b:ea:ca:6a: 54:6a:2b:cb:af:ba:f0:44:08:40:5e:6c:ca:83:94:ce:0c:62: 10:1f:2e:4f:6d:78:0d:91:02:68:aa:54:84:3a:43:c1:c8:3c: 62:0b:aa:dc:a9:01:7c:62:2a:ec:27:c2:42:3a:5f:aa:e8:99: 72:75:65:de:4d:2d:d7:39:ec:96:67:b2:a3:b0:e4:8d:25:76: c2:64:0d:6a:65:d1:06:5a:26:03:8b:91:63:ca:35:db:fc:24: ea:5b:c7:68:e9:9d:e8:f4:bc:b8:64:57:98:03:99:8f:f1:3e: 3b:8b:dc:b6:0e:f9:2f:30:ec:fc:b9:6b:11:52:83:22:ba:8d: ae:1f:25:34:29:97:b3:e4:fd:ad:b7:05:90:38:c1:d2:e5:d2: 2e:41:5c:8f:03:ca:03:bf:92:61:f0:3b:ad:7a:cd:64:fe:f7: 79:5d:0a:1e:42:ad:3d:4c:ca:9b:38:4e:93:9c:80:a2:27:89: 4f:a3:2f:40:93:92:5b:73:07:3e:ae:27:9d:60:7a:28:f3:ef: 6b:2e:e7:07:65:ab:09:28:c3:3d:57:35:dc:19:09:eb:f8:62: 8e:51:5f:4c:4c:e6:aa:b0:f4:52:9f:50:02:dd:38:c6:74:f2: 19:e5:0a:0a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4RTIxMTAvBgNVBAUTKDAxOTcwNEJFN0U0QUNFMEJBMTIxMTRCMzI4RUIwMjA3 MTFFRjRFQUYwHhcNMjUxMTExMDAxNzIyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTEyODA5MS02ZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9rPClnXkfahuuptwZhJBKlu9w/r0VGOwHJ9GoXky/QIR+zgHiBs1Fqwtednj kEzFvh/FriXV6WK9Ob5LszLWUY90LAUlU/2xdztfgjjcB537EhO3gqrPI58i48be xF+CKrfp7WCnUAruzzJBP752ZnSUqYJ4zrW14EXWWjjI7y4gBVqfgbVoN7N8OdB3 rHxHuh3XXnsnwCSYHWRZ1O7k6IfqCLhCUJkIqxFc9hW+vNELHU3jrATw8u2vA/4f 634BEMHLZA2PTjWGDzCpKm4Yk1Ebe54rOHLmzlkbhNajkVR4aOydLONS9NOPAAiR gJzp9OtYyqlJ+TAJr+S9L24fhQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBMeh8zV a3ABjv+WoVAlEolhSqfeMB8GA1UdIwQYMBaAFAGXBL5+Ss4LoSEUsyjrAgcR706v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjhFMi85NzAxM0E0RTUw NDAxMUVEOEFFQ0FBNkZDNEY5QUUwMi9BWmNFdm41S3pndWhJUlN6S09zQ0J4SHZU cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FaY0V2bjVLemd1aElSU3pLT3NDQnhIdlRxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI4RTIvOTcwMTNBNEU1MDQwMTFFRDhBRUNBQTZGQzRGOUFFMDIvODVBRUJBNzY1 MDRDMTFFRDgyOUY3RDI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKMwAwDQYJKoZIhvcNAQELBQADggEBALKDJPuPli2e1THP pMY8e+rKalRqK8uvuvBECEBebMqDlM4MYhAfLk9teA2RAmiqVIQ6Q8HIPGILqtyp AXxiKuwnwkI6X6romXJ1Zd5NLdc57JZnsqOw5I0ldsJkDWpl0QZaJgOLkWPKNdv8 JOpbx2jpnej0vLhkV5gDmY/xPjuL3LYO+S8w7Py5axFSgyK6ja4fJTQpl7Pk/a23 BZA4wdLl0i5BXI8DygO/kmHwO616zWT+93ldCh5CrT1Myps4TpOcgKIniU+jL0CT kltzBz6uJ51geijz72su5wdlqwkowz1XNdwZCev4Yo5RX0xM5qqw9FKfUALdOMZ0 8hnlCgo= -----END CERTIFICATE-----Generated at Sun Dec 7 04:31:22 2025 by rpki-client