This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/21EE9510083211EB81509633C4F9AE02.roa File: 21EE9510083211EB81509633C4F9AE02.roa (raw, json) Hash identifier: ZfvnXdczblwrDF4Ejj/73M+zlN7DQoj1HAdYgFet7TY= Subject key identifier: C6:61:A1:97:91:EC:E1:3A:34:CC:83:22:D7:B0:D3:07:83:19:12:CF Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Certificate serial: 07FE Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/21EE9510083211EB81509633C4F9AE02.roa Signing time: Tue 18 Nov 2025 20:12:16 +0000 ROA not before: Tue 18 Nov 2025 20:12:16 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 1221 IP address blocks: 203.4.192.0/24 maxlen: 24 203.4.193.0/24 maxlen: 24 203.4.194.0/24 maxlen: 24 203.4.195.0/24 maxlen: 24 203.4.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Validity Not Before: Nov 18 20:12:16 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691cd320-6851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:33:c9:41:53:52:92:67:21:03:d0:d4:59: fc:7f:cc:ea:a7:3f:9b:c4:ca:88:e3:59:34:f3:1d: a6:68:06:3c:5d:2b:4b:57:9d:d7:18:ae:ac:82:e0: 92:5f:82:b9:07:11:03:98:d4:70:c8:95:4a:4e:6c: 60:cb:a5:bc:5a:be:5b:30:e6:5d:3e:09:2c:2b:90: 17:25:af:12:26:eb:b1:42:57:4c:fb:7c:c6:d0:db: e5:e6:85:e7:92:f6:c2:32:df:2e:c8:a8:ab:17:4f: ac:54:14:0f:8a:0f:9a:6a:ec:3a:76:be:77:bb:40: 61:5c:99:cf:43:6b:5b:81:ea:15:20:c6:3e:aa:8b: d2:94:fe:60:76:2c:e9:ae:ee:5e:ba:48:9f:94:1f: b2:ad:cb:10:0e:dc:8a:46:63:24:ad:99:f3:68:93: 64:af:74:89:a0:da:87:97:f0:41:b7:f1:89:9d:3e: a5:b9:4d:dc:1f:09:5a:58:df:18:65:f6:18:de:23: 36:07:50:b8:02:0e:9f:d8:d6:68:36:15:bc:cf:18: df:92:71:35:6c:97:0c:2c:3c:48:e1:18:42:12:de: b1:21:39:b6:6d:57:a3:bc:75:5f:91:a2:67:5a:ea: 9d:ab:07:3a:f4:db:9a:c3:8f:07:35:93:69:cc:f0: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:61:A1:97:91:EC:E1:3A:34:CC:83:22:D7:B0:D3:07:83:19:12:CF X509v3 Authority Key Identifier: keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/21EE9510083211EB81509633C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.4.192.0-203.4.196.255 Signature Algorithm: sha256WithRSAEncryption 84:84:3f:0c:ed:af:b9:d5:87:7d:96:cb:46:76:28:0f:3a:ec: 53:03:c4:a3:f1:22:fc:07:1e:fa:4c:a1:e9:3e:b2:5f:ac:33: a7:e4:de:2d:0b:1d:3b:74:86:a9:9a:71:05:18:bc:b2:47:3d: a2:3f:e3:af:1f:39:f4:7c:3f:30:e7:fb:16:76:17:4e:93:9a: dd:b5:e1:f2:d1:f0:9a:c6:e6:58:fe:06:57:9b:02:fe:cc:05: fe:f8:d7:fe:9c:ab:8a:7c:aa:2f:a6:03:ed:1d:df:bc:43:6d: b1:5b:b7:51:b9:30:d9:0f:0d:c1:8a:41:5d:3e:39:85:8e:93: 0a:ca:36:a2:d3:61:86:02:5d:94:4f:18:ac:34:b5:27:64:23: ba:64:bd:cc:b2:55:32:55:4c:61:96:72:f4:14:79:14:16:83: 16:9e:23:8d:ca:89:f3:2b:4c:84:e3:b5:bd:7b:d1:c8:f1:aa: 13:50:74:68:5f:79:a6:e7:77:35:f0:ab:dc:6a:c7:ad:3c:80: 69:58:92:fb:4f:60:81:b0:40:bb:d0:50:1c:70:aa:74:16:a0: a8:c2:e1:e4:97:4f:48:32:29:15:65:0c:26:d7:03:48:c3:61: 68:b8:98:d3:a4:12:a0:05:00:13:7c:28:e4:25:80:2a:c3:de: f3:75:50:b7 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF RkFCMzExODYwHhcNMjUxMTE4MjAxMjE2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFjZDMyMC02ODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVkzyUFTUpJnIQPQ1Fn8f8zqpz+bxMqI41k08x2maAY8XStLV53XGK6sguCS X4K5BxEDmNRwyJVKTmxgy6W8Wr5bMOZdPgksK5AXJa8SJuuxQldM+3zG0Nvl5oXn kvbCMt8uyKirF0+sVBQPig+aauw6dr53u0BhXJnPQ2tbgeoVIMY+qovSlP5gdizp ru5eukiflB+yrcsQDtyKRmMkrZnzaJNkr3SJoNqHl/BBt/GJnT6luU3cHwlaWN8Y ZfYY3iM2B1C4Ag6f2NZoNhW8zxjfknE1bJcMLDxI4RhCEt6xITm2bVejvHVfkaJn Wuqdqwc69Nuaw48HNZNpzPCZ2wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFMZhoZeR 7OE6NMyDItew0weDGRLPMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4 MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODE0RTkvRkU1N0MyQkMwODMwMTFFQkJGRTRDNzMyQzRGOUFFMDIvMjFFRTk1MTAw ODMyMTFFQjgxNTA5NjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBssEwAMEAMsExDANBgkqhkiG9w0BAQsFAAOCAQEAhIQ/ DO2vudWHfZbLRnYoDzrsUwPEo/Ei/Ace+kyh6T6yX6wzp+TeLQsdO3SGqZpxBRi8 skc9oj/jrx859Hw/MOf7FnYXTpOa3bXh8tHwmsbmWP4GV5sC/swF/vjX/pyrinyq L6YD7R3fvENtsVu3Ubkw2Q8NwYpBXT45hY6TCso2otNhhgJdlE8YrDS1J2QjumS9 zLJVMlVMYZZy9BR5FBaDFp4jjcqJ8ytMhOO1vXvRyPGqE1B0aF95pud3NfCr3GrH rTyAaViS+09ggbBAu9BQHHCqdBagqMLh5JdPSDIpFWUMJtcDSMNhaLiY06QSoAUA E3wo5CWAKsPe83VQtw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:13 2025 by rpki-client