This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/E90A311AB8BE11ED83994B4AC4F9AE02.roa File: E90A311AB8BE11ED83994B4AC4F9AE02.roa (raw, json) Hash identifier: vswShkW+ZlUD5Hjofipt/TWHX660RYIJmQI9hklHKxA= Subject key identifier: 00:4E:74:99:92:31:54:E3:F1:A9:66:41:79:DD:72:BB:FD:05:64:09 Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 0205 Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/E90A311AB8BE11ED83994B4AC4F9AE02.roa Signing time: Wed 26 Nov 2025 01:20:39 +0000 ROA not before: Wed 26 Nov 2025 01:20:39 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 0 IP address blocks: 43.243.21.0/24 maxlen: 24 103.94.93.0/24 maxlen: 24 103.94.95.0/24 maxlen: 24 2001:dee:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: Nov 26 01:20:39 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=692655e6-716e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:a6:33:0a:32:f7:3c:81:de:8e:97:64:ca: 1b:24:96:ef:24:0c:2b:f8:85:2a:e7:95:e8:e7:17: cc:72:5b:57:ff:59:03:c4:08:1c:d7:3d:8b:09:80: a2:84:62:60:5c:c8:c1:5d:fd:e2:c9:12:8d:e1:27: 47:ea:8e:94:98:eb:57:9d:e6:6d:97:87:35:7f:b5: 1f:86:e6:f9:b2:2a:57:20:b2:14:f1:71:41:d8:f1: 3b:78:9d:0c:27:3e:53:cb:3c:32:eb:b5:8a:2f:78: 15:ef:2d:fc:c8:b1:88:a4:82:62:e3:1c:6f:07:20: 49:dd:2c:46:f0:33:43:53:8e:d9:a2:aa:3f:b6:f0: 53:bb:ba:d5:a0:98:d3:62:9b:7a:ef:c5:bf:67:46: cf:de:1c:62:07:e8:b0:83:cc:97:fc:a7:f6:0e:41: e6:97:35:95:c8:49:0a:c0:b2:12:03:5b:f7:19:b6: 24:ef:58:94:d6:44:43:b4:9a:52:70:21:52:17:87: 84:21:b5:76:fb:1b:27:1d:c3:75:ad:15:da:00:ed: 48:bb:7d:b6:8c:47:cd:46:e4:22:d0:aa:1e:4f:a2: e3:2a:65:6c:db:43:e1:f8:30:4e:0c:c7:f1:fc:74: ba:3b:9f:36:96:a3:f8:6f:5e:50:cc:d8:19:98:ce: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4E:74:99:92:31:54:E3:F1:A9:66:41:79:DD:72:BB:FD:05:64:09 X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/E90A311AB8BE11ED83994B4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.21.0/24 103.94.93.0/24 103.94.95.0/24 IPv6: 2001:dee:8000::/48 Signature Algorithm: sha256WithRSAEncryption 72:1f:a8:ad:b4:72:52:d7:91:1d:a9:44:48:1d:ef:9e:5c:93: 22:95:5a:5e:f6:0c:b3:14:b2:d1:00:cd:65:9e:7f:6e:5f:c7: 0b:56:33:a1:24:8a:f0:1d:a2:59:cc:bb:ad:ab:e6:b4:b2:43: 61:ef:fe:2c:b8:5e:16:9c:d9:0b:31:0d:db:a1:73:6d:b3:c8: 88:d0:16:c7:2f:8e:7d:b9:09:9e:6f:76:d4:78:88:ea:e4:01: f0:a7:98:48:b9:9c:86:72:0e:49:d1:4e:88:ab:dd:45:96:f1: 2f:dd:a4:e2:f2:f2:2c:a4:4c:ca:07:0c:b2:46:de:78:b1:18: 99:e0:cc:a8:28:4d:2e:fa:1d:42:a6:1c:f2:43:4d:be:45:a6: bd:f0:43:f5:27:94:a8:35:86:e2:fe:06:c2:50:d9:03:15:de: b6:40:76:77:32:f9:dd:be:ca:1c:bb:d0:b7:a7:c5:6f:9a:a7: 2d:68:74:52:69:52:93:88:8a:67:37:6b:c8:a4:41:35:21:ee: c5:4c:37:ea:54:12:2b:67:c2:a4:01:6b:ac:a5:c5:3a:27:58: b9:0a:46:0c:b0:ae:97:26:91:d8:10:94:7e:86:80:08:e3:fa: a1:32:7b:07:de:18:bb:ac:eb:bb:39:8b:e6:de:28:7e:eb:14: eb:1d:83:d8 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUxMTI2MDEyMDM5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI2NTVlNi03MTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7WmMwoy9zyB3o6XZMobJJbvJAwr+IUq55Xo5xfMcltX/1kDxAgc1z2LCYCi hGJgXMjBXf3iyRKN4SdH6o6UmOtXneZtl4c1f7Ufhub5sipXILIU8XFB2PE7eJ0M Jz5Tyzwy67WKL3gV7y38yLGIpIJi4xxvByBJ3SxG8DNDU47Zoqo/tvBTu7rVoJjT Ypt678W/Z0bP3hxiB+iwg8yX/Kf2DkHmlzWVyEkKwLISA1v3GbYk71iU1kRDtJpS cCFSF4eEIbV2+xsnHcN1rRXaAO1Iu322jEfNRuQi0KoeT6LjKmVs20Ph+DBODMfx /HS6O582lqP4b15QzNgZmM4FPQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFABOdJmS MVTj8almQXndcrv9BWQJMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUyQUIvMkI5OTg1NEVCOEIwMTFFREI0QUZEMzVFQzRGOUFFMDIvRTkwQTMxMUFC OEJFMTFFRDgzOTk0QjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAAr8xUDBABnXl0DBABnXl8wDwQCAAIwCQMHACABDe6AADAN BgkqhkiG9w0BAQsFAAOCAQEAch+orbRyUteRHalESB3vnlyTIpVaXvYMsxSy0QDN ZZ5/bl/HC1YzoSSK8B2iWcy7ravmtLJDYe/+LLheFpzZCzEN26FzbbPIiNAWxy+O fbkJnm921HiI6uQB8KeYSLmchnIOSdFOiKvdRZbxL92k4vLyLKRMygcMskbeeLEY meDMqChNLvodQqYc8kNNvkWmvfBD9SeUqDWG4v4GwlDZAxXetkB2dzL53b7KHLvQ t6fFb5qnLWh0UmlSk4iKZzdryKRBNSHuxUw36lQSK2fCpAFrrKXFOidYuQpGDLCu lyaR2BCUfoaACOP6oTJ7B94Yu6zruzmL5t4ofusU6x2D2A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:41 2025 by rpki-client