This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/71D60BC2F6BA11EB865C4246C4F9AE02.roa File: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (raw, json) Hash identifier: Q/HpHUHSd002dwgO++qfVRwcPqC6Ze455Mxc2zmpuH0= Subject key identifier: B6:94:32:2E:76:26:27:F0:52:CC:74:49:A9:79:E2:CF:66:4C:07:9B Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 37BA Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/71D60BC2F6BA11EB865C4246C4F9AE02.roa Signing time: Tue 30 Dec 2025 15:10:41 +0000 ROA not before: Tue 30 Dec 2025 15:10:41 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 209242 IP address blocks: 125.22.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14266 (0x37ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: Dec 30 15:10:41 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6953eb71-ad59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:27:f8:7b:b5:d9:45:f2:59:11:30:43:40: 31:e2:b4:10:f9:02:db:8e:aa:25:16:c5:c3:31:92: ca:f1:5e:59:b1:0f:8f:d5:3f:a5:5f:c7:8f:83:14: b5:d9:07:1f:fc:d8:eb:01:78:38:35:a0:95:e7:26: ab:50:e9:6a:e0:f2:57:53:b0:3b:28:41:ca:e9:9b: 8d:8b:55:e0:ea:14:0f:0f:d9:a5:06:6b:40:a7:8f: 72:08:dd:d4:9d:6f:42:5d:01:6c:80:cb:ee:f4:36: 82:3b:b7:00:28:23:7f:a4:12:3f:04:ed:06:0b:b7: e1:e0:c1:a2:06:ce:ad:1f:e7:6f:e5:af:29:d7:32: e2:b0:cf:8d:3f:87:60:1c:ca:b1:0a:f9:23:ff:97: 36:63:72:d0:f7:29:47:f5:8b:58:44:d2:a3:58:56: ad:42:39:e5:cd:56:5f:4e:de:e9:80:b0:c4:06:9c: 0e:d1:1f:ad:47:1f:fe:23:c3:b3:37:80:5b:ba:05: cc:06:b3:48:c8:62:e1:d1:f9:de:26:88:86:44:7c: 0a:2a:7a:4e:b7:1a:ed:68:54:eb:aa:0d:b4:18:61: 17:c6:cc:84:21:aa:91:fe:4f:2b:52:e8:5d:30:f6: 10:dc:49:6c:c2:24:e9:de:55:cc:f7:57:97:77:34: ac:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:94:32:2E:76:26:27:F0:52:CC:74:49:A9:79:E2:CF:66:4C:07:9B X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/71D60BC2F6BA11EB865C4246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.22.120.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:7b:67:dc:ff:f8:da:cd:5a:8a:c0:10:71:e9:52:1b:e3:09: 0e:58:6d:86:30:29:6d:53:16:4d:71:6c:ba:fa:a7:ff:52:3d: 6e:fe:af:0e:0f:90:0f:8e:6d:d0:b5:25:60:5b:af:ca:d9:cd: 11:c9:58:bb:c9:01:2d:23:9f:69:d5:d3:f1:38:14:51:79:26: 61:fb:97:b0:36:1f:29:90:df:4c:ed:f0:07:bb:74:77:54:99: 8a:cc:fd:00:38:65:5e:f7:cf:fd:62:62:c1:65:10:7c:59:d4: 74:b6:af:aa:b5:49:2c:4e:dc:97:b0:7f:47:89:b6:87:14:25: 8a:42:f5:bd:62:ef:00:a1:8c:bc:ed:0a:cb:5d:f7:06:03:f0: be:d7:5e:a3:3b:4c:72:74:eb:56:cc:db:af:ea:fb:e9:4e:8c: 88:bf:45:b3:da:4d:23:23:ba:bc:61:b6:ed:56:69:83:6b:48: df:a9:da:04:d8:6d:6d:b1:84:8a:a1:d3:95:a9:ed:45:89:b1: 3d:4d:6d:5b:c1:94:b1:7b:30:d4:82:cb:ea:96:6b:74:30:43: c9:e9:12:7c:d2:1b:a9:a0:e7:e8:b1:d2:0f:c5:3d:d1:73:e1: d4:01:cd:32:d8:52:4e:9e:db:d3:43:4c:0d:ae:f3:39:f4:73: ff:c5:e2:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICN7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjUxMjMwMTUxMDQxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUzZWI3MS1hZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0cn+Hu12UXyWREwQ0Ax4rQQ+QLbjqolFsXDMZLK8V5ZsQ+P1T+lX8ePgxS1 2Qcf/NjrAXg4NaCV5yarUOlq4PJXU7A7KEHK6ZuNi1Xg6hQPD9mlBmtAp49yCN3U nW9CXQFsgMvu9DaCO7cAKCN/pBI/BO0GC7fh4MGiBs6tH+dv5a8p1zLisM+NP4dg HMqxCvkj/5c2Y3LQ9ylH9YtYRNKjWFatQjnlzVZfTt7pgLDEBpwO0R+tRx/+I8Oz N4BbugXMBrNIyGLh0fneJoiGRHwKKnpOtxrtaFTrqg20GGEXxsyEIaqR/k8rUuhd MPYQ3ElswiTp3lXM91eXdzSsGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLaUMi52 JifwUsx0Sal54s9mTAebMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0QjMvRTY1ODUxMTIxRDg0MTFFMkExQkEzMERCMDhCMDJDRDIvNzFENjBCQzJG NkJBMTFFQjg2NUM0MjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB9FngwDQYJKoZIhvcNAQELBQADggEBAG57Z9z/+NrNWorA EHHpUhvjCQ5YbYYwKW1TFk1xbLr6p/9SPW7+rw4PkA+ObdC1JWBbr8rZzRHJWLvJ AS0jn2nV0/E4FFF5JmH7l7A2HymQ30zt8Ae7dHdUmYrM/QA4ZV73z/1iYsFlEHxZ 1HS2r6q1SSxO3Jewf0eJtocUJYpC9b1i7wChjLztCstd9wYD8L7XXqM7THJ061bM 26/q++lOjIi/RbPaTSMjurxhtu1WaYNrSN+p2gTYbW2xhIqh05Wp7UWJsT1NbVvB lLF7MNSCy+qWa3QwQ8npEnzSG6mg5+ix0g/FPdFz4dQBzTLYUk6e29NDTA2u8zn0 c//F4p8= -----END CERTIFICATE-----Generated at Sun Jan 25 15:22:25 2026 by rpki-client