This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/ABF3C76E0C4B11EF87D4886FC4F9AE02.roa File: ABF3C76E0C4B11EF87D4886FC4F9AE02.roa (raw, json) Hash identifier: F/YxtB51WnmPfqrklEmeStvP3ev5uQ0VG5cbcJlxSlw= Subject key identifier: FB:E2:0D:C1:E3:35:3A:63:7C:79:F8:0D:8B:E0:86:78:56:29:E3:F5 Certificate issuer: /CN=A91A03CB/serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1 Certificate serial: 34FD Authority key identifier: 85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/ABF3C76E0C4B11EF87D4886FC4F9AE02.roa Signing time: Tue 02 Dec 2025 15:12:00 +0000 ROA not before: Tue 02 Dec 2025 15:12:00 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24107 IP address blocks: 202.49.120.0/24 maxlen: 24 202.49.121.0/24 maxlen: 24 202.164.28.0/22 maxlen: 22 202.164.28.0/23 maxlen: 23 202.164.28.0/24 maxlen: 24 202.164.29.0/24 maxlen: 24 202.164.30.0/23 maxlen: 23 202.164.30.0/24 maxlen: 24 202.164.31.0/24 maxlen: 24 2406:3d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A03CB, serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1 Validity Not Before: Dec 2 15:12:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f01c0-150e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:16:12:a0:4a:c2:4e:89:a0:de:bd:93:57: f3:2d:3a:cf:8a:29:21:b8:de:3d:8d:6d:30:28:df: d7:98:2d:31:8d:80:a5:f4:74:98:46:c4:4b:90:1f: 69:91:14:c3:3b:3c:5c:64:59:c8:09:c9:bd:c9:02: fa:ed:c0:53:7c:24:c7:0b:f8:d6:8f:79:19:91:b3: 26:68:78:3e:df:41:2a:25:8e:48:0a:07:c6:8d:64: 91:65:38:cd:c4:62:88:11:a0:47:65:de:d6:c5:af: 50:a2:61:0f:04:4b:50:81:9a:c4:04:d4:44:df:2b: d3:3a:d1:15:2f:d9:f6:48:ad:f8:83:86:ea:84:c9: 50:d0:3b:70:9c:b8:c7:51:1e:50:ef:36:97:d6:91: 7a:6d:f5:2f:30:22:ef:ec:e0:01:55:c0:e5:d4:f2: 6e:c3:23:05:27:77:76:f6:a9:81:20:2a:68:e6:e7: 2e:ae:aa:cd:ae:2c:72:55:ca:f8:40:2e:f5:c5:a9: c3:98:16:4e:37:a4:61:62:04:a9:a1:59:b6:3c:da: 44:a6:df:83:b8:31:7f:e0:31:0a:35:ef:25:06:3b: 76:d8:61:55:23:f4:6a:7a:83:a8:26:7e:2a:ad:3a: ce:f4:88:6a:e1:d9:bd:b8:50:0c:0a:e7:9c:1f:96: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:0D:C1:E3:35:3A:63:7C:79:F8:0D:8B:E0:86:78:56:29:E3:F5 X509v3 Authority Key Identifier: keyid:85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/ABF3C76E0C4B11EF87D4886FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.49.120.0/23 202.164.28.0/22 IPv6: 2406:3d00::/32 Signature Algorithm: sha256WithRSAEncryption c1:d7:df:08:5b:c6:8b:ef:4e:f2:c0:f9:4d:76:77:d6:0a:bf: 09:cf:c6:79:bd:1a:3a:b5:a1:19:7f:96:48:e9:6a:ce:a3:2b: e9:1e:b8:75:72:ba:dc:19:4d:04:74:a5:fa:21:19:fc:df:99: 38:0f:61:3b:64:3c:63:6b:d9:59:94:56:a8:af:95:0e:16:f2: 67:67:a3:4b:76:e5:1c:03:70:51:ab:5f:72:08:f7:ae:0a:ab: e6:6f:8e:0d:6d:a5:ee:28:4a:a7:28:90:0e:37:f6:ad:7e:50: 55:24:99:e5:ea:64:d4:5c:ca:ca:c2:a7:ab:47:bf:0f:b3:5b: 32:d2:e0:14:29:03:d4:9f:6d:72:41:da:57:5a:3e:67:89:69: f1:73:75:85:ff:b9:7c:ce:99:09:75:ec:04:2a:05:fd:33:a3: 69:30:42:63:d7:94:da:a5:01:f5:e6:03:3e:71:2a:21:09:a7: 9e:b8:a7:d9:26:de:3b:50:df:f6:ef:8e:69:8f:d7:56:f7:ee: d6:e2:de:0d:24:8e:4b:54:92:2d:7c:a9:67:60:27:df:10:39: 1c:78:09:03:4a:0f:20:3c:1d:ea:7d:f1:8b:6b:b2:82:f5:b4: 57:d7:de:22:5d:0c:82:eb:ff:51:cd:7b:14:1a:42:af:c7:b9: fb:60:40:40 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAzQ0IxMTAvBgNVBAUTKDg1QUJGODQ4MEM5MDk2MzhCRENDQTY1M0FGMUU2OTBG NTcyQjIzRTEwHhcNMjUxMjAyMTUxMjAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmMDFjMC0xNTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuf0WEqBKwk6JoN69k1fzLTrPiikhuN49jW0wKN/XmC0xjYCl9HSYRsRLkB9p kRTDOzxcZFnICcm9yQL67cBTfCTHC/jWj3kZkbMmaHg+30EqJY5ICgfGjWSRZTjN xGKIEaBHZd7Wxa9QomEPBEtQgZrEBNRE3yvTOtEVL9n2SK34g4bqhMlQ0DtwnLjH UR5Q7zaX1pF6bfUvMCLv7OABVcDl1PJuwyMFJ3d29qmBICpo5ucurqrNrixyVcr4 QC71xanDmBZON6RhYgSpoVm2PNpEpt+DuDF/4DEKNe8lBjt22GFVI/RqeoOoJn4q rTrO9Ihq4dm9uFAMCuecH5YB2QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPviDcHj NTpjfHn4DYvghnhWKeP1MB8GA1UdIwQYMBaAFIWr+EgMkJY4vcymU68eaQ9XKyPh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDNDQi84MUQ5RTRBMDFE OTYxMUUyQUFDMjE0N0YwOEIwMkNEMi9oYXY0U0F5UWxqaTl6S1pUcng1cEQxY3JJ LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhdjRTQXlRbGppOXpLWlRyeDVwRDFjckktRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTAzQ0IvODFEOUU0QTAxRDk2MTFFMkFBQzIxNDdGMDhCMDJDRDIvQUJGM0M3NkUw QzRCMTFFRjg3RDQ4ODZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAHKMXgDBALKpBwwDQQCAAIwBwMFACQGPQAwDQYJKoZIhvcN AQELBQADggEBAMHX3whbxovvTvLA+U12d9YKvwnPxnm9Gjq1oRl/lkjpas6jK+ke uHVyutwZTQR0pfohGfzfmTgPYTtkPGNr2VmUVqivlQ4W8mdno0t25RwDcFGrX3II 964Kq+Zvjg1tpe4oSqcokA439q1+UFUkmeXqZNRcysrCp6tHvw+zWzLS4BQpA9Sf bXJB2ldaPmeJafFzdYX/uXzOmQl17AQqBf0zo2kwQmPXlNqlAfXmAz5xKiEJp564 p9km3jtQ3/bvjmmP11b37tbi3g0kjktUki18qWdgJ98QORx4CQNKDyA8Hep98Ytr soL1tFfX3iJdDILr/1HNexQaQq/HuftgQEA= -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:46 2025 by rpki-client