This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5734DF38D56811EF89A7D332C4F9AE02.roa File: 5734DF38D56811EF89A7D332C4F9AE02.roa (raw, json) Hash identifier: yEbc6F9bHI0IpI/Ljg73yL3b8qnvoYUzAxWD62rFx2U= Subject key identifier: 24:53:80:E4:A4:ED:D7:9C:34:DC:82:D3:1F:A1:C1:92:34:01:24:35 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 0393 Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5734DF38D56811EF89A7D332C4F9AE02.roa Signing time: Wed 26 Nov 2025 23:16:42 +0000 ROA not before: Wed 26 Nov 2025 23:16:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153494 IP address blocks: 43.250.188.0/22 maxlen: 24 103.42.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Nov 26 23:16:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69278a5a-0ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:af:27:49:72:ad:5d:81:72:7b:75:04:47: 45:59:4c:e7:15:3f:ae:53:e1:d0:84:99:21:99:e6: 84:22:1b:6a:df:42:8e:c3:ca:4c:cd:70:0a:45:20: b7:57:ba:57:fe:2e:63:de:47:a0:e3:3f:2f:2e:5d: f8:08:bd:67:47:63:1e:68:db:3b:47:45:d2:41:ef: 56:74:2b:09:7f:f3:7b:31:80:d1:77:56:f3:82:fd: 9d:ff:bd:4e:56:d0:4a:30:94:70:d5:39:21:a2:12: fc:5d:00:e7:c0:c9:e3:e7:3f:cb:22:ef:19:a9:f5: 41:0b:76:3b:a2:80:d7:b6:f6:a5:82:da:c8:8a:f4: 3b:09:e1:7e:85:d3:69:db:d3:d5:2d:3f:0e:e0:50: ae:fa:87:35:61:90:a3:1b:38:7f:3b:d3:6a:fe:98: 68:69:d4:44:e9:9f:f4:d9:e9:de:74:5a:70:8c:d8: 78:ba:d0:ac:02:3a:2b:99:87:32:0d:0e:a5:c0:02: 44:6b:94:8a:85:3f:c1:2c:4b:8d:64:c0:4a:4c:39: 94:0e:62:32:f4:5e:b9:ca:7b:ca:12:4c:c1:c8:d0: 5a:10:c2:72:76:f4:01:d7:65:df:63:2d:d3:75:c5: 9e:aa:5d:7f:70:43:45:a8:ad:5c:7f:17:0a:de:15: fa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:53:80:E4:A4:ED:D7:9C:34:DC:82:D3:1F:A1:C1:92:34:01:24:35 X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/5734DF38D56811EF89A7D332C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.188.0/22 103.42.36.0/22 Signature Algorithm: sha256WithRSAEncryption 32:49:82:fb:b5:5b:58:3d:84:3b:36:c9:a1:2d:24:fb:5d:e2: e9:e9:61:89:ee:22:b1:66:9d:80:f6:4f:ab:89:57:e6:7e:bd: da:87:57:b7:27:f7:92:f8:49:db:9d:8b:d7:62:ad:f7:bc:10: f1:9f:c8:a5:95:4f:2c:7d:08:c6:9e:8e:00:ab:b4:fb:ee:1f: 2c:b8:10:03:5b:32:3d:ee:02:dc:db:22:56:31:92:7f:67:dd: d8:a1:0c:4e:ba:9e:70:aa:ac:60:40:c8:67:ad:dd:d4:2b:96: 43:c9:9f:6f:cd:82:57:53:b3:32:6d:1e:3a:a5:f5:2e:37:50: 75:4b:8d:d5:8f:0d:b7:24:27:e3:a5:a5:26:df:3e:3f:a1:9b: 11:de:e9:ce:9b:72:7c:71:bf:f6:d0:63:b8:ea:09:fa:e4:21: 79:31:9b:42:41:d5:f5:25:b1:89:ca:ef:5d:e6:73:00:2f:5c: 44:7f:81:60:cb:f6:37:eb:8c:c7:cc:29:c1:e3:0f:84:d6:aa: 63:87:dc:df:9c:24:cd:1f:f9:6e:e7:bb:8d:df:09:e7:4d:a2: 82:fa:72:03:ec:aa:22:ac:d2:c9:6b:9a:a6:c9:d5:6b:4f:60: 45:75:8b:11:2a:84:3e:e4:41:52:ab:2c:f7:17:dc:58:f6:85: f5:c2:20:f6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjUxMTI2MjMxNjQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI3OGE1YS0wZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yKvJ0lyrV2Bcnt1BEdFWUznFT+uU+HQhJkhmeaEIhtq30KOw8pMzXAKRSC3 V7pX/i5j3keg4z8vLl34CL1nR2MeaNs7R0XSQe9WdCsJf/N7MYDRd1bzgv2d/71O VtBKMJRw1TkhohL8XQDnwMnj5z/LIu8ZqfVBC3Y7ooDXtvalgtrIivQ7CeF+hdNp 29PVLT8O4FCu+oc1YZCjGzh/O9Nq/phoadRE6Z/02enedFpwjNh4utCsAjormYcy DQ6lwAJEa5SKhT/BLEuNZMBKTDmUDmIy9F65ynvKEkzByNBaEMJydvQB12XfYy3T dcWeql1/cENFqK1cfxcK3hX6OQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCRTgOSk 7decNNyC0x+hwZI0ASQ1MB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFCNzEvQjg0OUJBMTJDNjA0MTFFQ0I5MDY5MTVDQzRGOUFFMDIvNTczNERGMzhE NTY4MTFFRjg5QTdEMzMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+rwDBAJnKiQwDQYJKoZIhvcNAQELBQADggEBADJJgvu1 W1g9hDs2yaEtJPtd4unpYYnuIrFmnYD2T6uJV+Z+vdqHV7cn95L4Sdudi9dirfe8 EPGfyKWVTyx9CMaejgCrtPvuHyy4EANbMj3uAtzbIlYxkn9n3dihDE66nnCqrGBA yGet3dQrlkPJn2/NgldTszJtHjql9S43UHVLjdWPDbckJ+OlpSbfPj+hmxHe6c6b cnxxv/bQY7jqCfrkIXkxm0JB1fUlsYnK713mcwAvXER/gWDL9jfrjMfMKcHjD4TW qmOH3N+cJM0f+W7nu43fCedNooL6cgPsqiKs0slrmqbJ1WtPYEV1ixEqhD7kQVKr LPcX3Fj2hfXCIPY= -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:41 2025 by rpki-client