This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/B3811802FED411EA83E4EC37C4F9AE02.roa File: B3811802FED411EA83E4EC37C4F9AE02.roa (raw, json) Hash identifier: fhn75hnvAM/eHyYwTUGBEzgQiQhS+4pm+bv2EOyW5UI= Subject key identifier: DA:6E:8F:58:33:E4:01:D0:92:57:C7:AF:0B:88:6A:6D:60:6F:03:80 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 0F73 Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/B3811802FED411EA83E4EC37C4F9AE02.roa Signing time: Fri 28 Feb 2025 19:29:44 +0000 ROA not before: Fri 28 Feb 2025 19:29:44 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 38796 IP address blocks: 120.29.248.0/23 maxlen: 23 120.29.250.0/23 maxlen: 23 120.29.255.0/24 maxlen: 24 202.65.14.0/24 maxlen: 24 202.65.15.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:9::/48 maxlen: 48 2001:dcd:11::/48 maxlen: 48 2001:dcd:12::/48 maxlen: 48 2001:dcd:30::/48 maxlen: 48 2001:dcd:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3955 (0xf73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 28 19:29:44 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c20ea8-2db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c8:0d:f8:7c:5b:d9:a9:1f:a3:4f:4c:d4:4c: 63:96:41:c4:02:af:27:59:4c:12:72:9d:64:43:0f: 11:67:f4:2c:f2:db:23:06:6f:13:40:83:d0:73:1d: 7f:58:8f:eb:6a:3a:43:12:28:d5:87:52:a8:2d:8d: cf:40:b2:5e:b5:6f:74:0c:2e:09:c1:bd:f1:c0:78: 37:8d:67:69:08:02:d9:52:61:97:5a:db:2e:16:25: b0:6e:8e:ec:d7:d7:d4:93:9b:52:e5:96:ac:c5:48: bb:65:44:e7:b6:dc:15:99:17:62:ac:53:9f:8f:37: 8e:d2:21:ae:1d:ca:d7:f4:56:87:a7:99:5e:10:69: 6c:cf:86:c3:0d:b3:9c:5a:de:a3:8d:a7:bf:73:d7: f8:12:a9:84:26:e7:f3:5f:28:0a:5a:39:e5:f8:ea: 62:77:bb:4f:18:d0:e7:74:ac:1f:b5:79:65:7a:08: fa:2a:ed:2d:33:68:1f:ad:4c:ed:9e:4f:19:69:6d: 3c:a4:2c:c8:a8:63:73:30:fd:41:a1:18:96:e2:c9: 68:72:85:5e:f5:36:16:29:54:31:a5:b7:6e:d5:9f: bb:ac:7b:48:9c:5e:f9:0e:a1:0f:e6:4e:52:3e:7e: 74:1d:6a:f8:6f:ef:a2:6a:7d:2e:37:f9:2e:cf:b4: 5a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6E:8F:58:33:E4:01:D0:92:57:C7:AF:0B:88:6A:6D:60:6F:03:80 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/B3811802FED411EA83E4EC37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.248.0/22 120.29.255.0/24 202.65.14.0/23 203.17.72.0/24 IPv6: 2001:dcd:9::/48 2001:dcd:11::-2001:dcd:12:ffff:ffff:ffff:ffff:ffff 2001:dcd:30::/48 2001:dcd:40::/48 Signature Algorithm: sha256WithRSAEncryption 54:11:c0:bf:f0:c0:dc:c6:b9:a2:07:d8:9f:01:a4:fa:dd:50: 6c:bd:ed:02:d9:0e:fc:aa:d6:0a:a2:6a:bc:55:35:85:a1:56: 9b:b3:42:f4:0e:14:63:2e:e9:7f:41:84:5a:b2:12:99:75:2f: 5c:39:fc:66:56:49:4d:c5:30:e3:c3:fe:dc:45:f5:0a:aa:d4: 0a:30:51:4c:ac:2d:c1:c4:cb:96:e9:17:18:46:24:dd:bc:bd: a4:38:05:88:86:85:18:ec:ca:62:c2:9a:23:04:b0:96:12:1e: 68:f7:6a:5e:eb:c7:1b:ac:23:70:76:91:7c:38:f0:95:aa:57: d0:82:0d:96:be:a6:50:31:83:9d:78:73:73:8e:41:da:c6:dc: 9a:3f:99:79:24:bc:90:90:54:63:dd:23:d3:c4:67:c7:52:68: ed:1d:78:94:67:68:dd:b2:88:38:e1:97:a6:46:14:2c:0e:9f: 24:eb:70:89:af:76:aa:ed:8d:ef:00:13:e7:14:ba:9f:0f:fc: a7:c6:43:68:39:6a:1c:b6:8b:da:d8:04:83:d0:14:0c:89:d7: e1:0b:79:af:63:7d:23:d7:17:e8:99:7b:a1:26:59:7d:be:84: 41:56:37:64:d4:4c:45:ff:d0:b0:ef:92:c8:1e:4b:c0:18:fd: 73:f9:85:5f -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgICD3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjUwMjI4MTkyOTQ0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyMGVhOC0yZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8gN+Hxb2akfo09M1ExjlkHEAq8nWUwScp1kQw8RZ/Qs8tsjBm8TQIPQcx1/ WI/rajpDEijVh1KoLY3PQLJetW90DC4Jwb3xwHg3jWdpCALZUmGXWtsuFiWwbo7s 19fUk5tS5ZasxUi7ZUTnttwVmRdirFOfjzeO0iGuHcrX9FaHp5leEGlsz4bDDbOc Wt6jjae/c9f4EqmEJufzXygKWjnl+Opid7tPGNDndKwftXllegj6Ku0tM2gfrUzt nk8ZaW08pCzIqGNzMP1BoRiW4slocoVe9TYWKVQxpbdu1Z+7rHtInF75DqEP5k5S Pn50HWr4b++ian0uN/kuz7RaOwIDAQABo4IC3jCCAtowHQYDVR0OBBYEFNpuj1gz 5AHQklfHrwuIam1gbwOAMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvQjM4MTE4MDJG RUQ0MTFFQTgzRTRFQzM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaAYIKwYBBQUHAQcBAf8E WTBXMB4EAgABMBgDBAJ4HfgDBAB4Hf8DBAHKQQ4DBADLEUgwNQQCAAIwLwMHACAB Dc0ACTASAwcAIAENzQARAwcAIAENzQASAwcAIAENzQAwAwcAIAENzQBAMA0GCSqG SIb3DQEBCwUAA4IBAQBUEcC/8MDcxrmiB9ifAaT63VBsve0C2Q78qtYKomq8VTWF oVabs0L0DhRjLul/QYRashKZdS9cOfxmVklNxTDjw/7cRfUKqtQKMFFMrC3BxMuW 6RcYRiTdvL2kOAWIhoUY7MpiwpojBLCWEh5o92pe68cbrCNwdpF8OPCVqlfQgg2W vqZQMYOdeHNzjkHaxtyaP5l5JLyQkFRj3SPTxGfHUmjtHXiUZ2jdsog44ZemRhQs Dp8k63CJr3aq7Y3vABPnFLqfD/ynxkNoOWoctova2ASD0BQMidfhC3mvY30j1xfo mXuhJll9voRBVjdk1ExF/9Cw75LIHkvAGP1z+YVf -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:01 2025 by rpki-client