This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/EC4AB04AAA5511EABCEBDE19C4F9AE02.roa File: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (raw, json) Hash identifier: lYe/+IkQ+R02IaPZzlGxsHV36S7X3fY0hJQ296NQhrQ= Subject key identifier: 18:E9:93:9E:75:18:7D:5E:78:23:6C:27:E4:AB:73:E4:40:05:BB:F1 Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0BFF Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/EC4AB04AAA5511EABCEBDE19C4F9AE02.roa Signing time: Thu 20 Nov 2025 18:38:51 +0000 ROA not before: Thu 20 Nov 2025 18:38:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45485 IP address blocks: 203.194.252.0/24 maxlen: 24 203.194.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3071 (0xbff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Nov 20 18:38:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691f603b-bf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:97:1b:fd:79:fc:6d:f1:5a:73:b6:64:f4: dc:de:03:5a:9d:a6:f7:2d:dd:21:0f:7e:26:c8:78: 10:14:40:9e:3d:47:41:a8:36:d2:cd:2e:b5:c8:9b: 55:53:a8:04:ed:99:9f:cb:70:30:a2:b4:c7:55:11: 58:53:27:bf:56:0f:77:e2:64:2f:3e:1b:18:0e:cb: ff:ad:74:f1:08:56:5b:f1:7d:ba:5c:77:a3:01:f7: e8:e2:8d:0a:57:33:5d:fb:c6:16:fd:9f:4e:af:16: af:6f:df:43:11:f2:f8:47:1d:dc:7a:0d:cd:e8:d5: 03:ed:58:ec:21:88:ed:9d:c7:08:dd:9d:52:d4:91: 4d:7a:2a:62:02:80:fa:12:9c:b0:3c:12:e5:0c:74: e9:68:0b:00:fe:f1:70:dd:04:9b:56:bf:b1:6f:d8: a8:74:82:96:a7:89:01:45:c2:8e:d2:b7:d0:83:6a: 84:b3:56:43:22:95:7f:fa:a3:29:35:20:62:3e:b9: b3:e0:26:2c:f4:1b:e3:87:1d:9f:58:4b:84:ab:a5: d4:ba:d2:1a:96:b1:74:b2:f3:9c:9b:97:0e:97:0c: 31:ca:d3:3e:72:e2:33:1e:28:49:af:48:67:8b:51: 47:5d:14:91:9c:2c:b6:68:59:91:46:44:84:6d:b6: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:93:9E:75:18:7D:5E:78:23:6C:27:E4:AB:73:E4:40:05:BB:F1 X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/EC4AB04AAA5511EABCEBDE19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.194.252.0/23 Signature Algorithm: sha256WithRSAEncryption 68:ff:67:21:e7:9d:d8:b4:e5:20:a5:4d:05:07:06:77:7e:b5: a1:21:9a:e4:f2:d2:6b:5b:9c:ba:cf:17:6a:88:0f:4e:79:45: e5:9f:12:1a:ff:5c:20:d2:fc:1a:06:6f:16:53:78:2e:1f:0c: 66:fb:6f:37:ac:a5:98:8c:e5:73:56:ac:e3:3c:2b:f2:f1:44: 22:23:31:92:73:01:00:6f:cc:b9:92:83:35:02:88:55:09:e6: 3f:09:4c:05:39:91:a2:60:97:5e:cb:ea:eb:53:ab:b2:43:f5: c5:b5:ee:20:d2:37:d6:4e:cb:25:b9:7d:21:2d:bb:c1:15:c3: 2a:99:96:1c:4a:3b:04:47:d7:dd:11:e7:8d:2c:87:a6:e0:39: ae:d0:44:c9:bb:26:77:fb:58:a7:66:6b:2e:46:15:79:6c:61: 0e:6b:68:72:f1:02:4c:5c:34:6b:51:8d:b1:e1:24:06:30:c9: 9c:d8:b1:ba:59:f5:c0:b3:db:47:a8:96:43:0c:0e:ec:12:8e: f2:84:e2:15:ff:99:39:08:2f:6c:6c:ec:f5:bd:6b:df:b7:3c: 9c:3e:1f:3d:32:7b:07:d6:2e:a3:aa:65:5f:67:6e:fa:33:90: 1c:dd:e5:48:d8:62:df:ec:ca:65:33:54:81:a4:01:0e:ec:43: 8e:2e:bf:95 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjUxMTIwMTgzODUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmNjAzYi1iZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2GXG/15/G3xWnO2ZPTc3gNanab3Ld0hD34myHgQFECePUdBqDbSzS61yJtV U6gE7Zmfy3AworTHVRFYUye/Vg934mQvPhsYDsv/rXTxCFZb8X26XHejAffo4o0K VzNd+8YW/Z9Orxavb99DEfL4Rx3ceg3N6NUD7VjsIYjtnccI3Z1S1JFNeipiAoD6 EpywPBLlDHTpaAsA/vFw3QSbVr+xb9iodIKWp4kBRcKO0rfQg2qEs1ZDIpV/+qMp NSBiPrmz4CYs9Bvjhx2fWEuEq6XUutIalrF0svOcm5cOlwwxytM+cuIzHihJr0hn i1FHXRSRnCy2aFmRRkSEbbYFxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBjpk551 GH1eeCNsJ+Src+RABbvxMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA5QkYvRDEzREExRDQyREZDMTFFQUJDMUI2QjgyQzRGOUFFMDIvRUM0QUIwNEFB QTU1MTFFQUJDRUJERTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLwvwwDQYJKoZIhvcNAQELBQADggEBAGj/ZyHnndi05SCl TQUHBnd+taEhmuTy0mtbnLrPF2qID055ReWfEhr/XCDS/BoGbxZTeC4fDGb7bzes pZiM5XNWrOM8K/LxRCIjMZJzAQBvzLmSgzUCiFUJ5j8JTAU5kaJgl17L6utTq7JD 9cW17iDSN9ZOyyW5fSEtu8EVwyqZlhxKOwRH190R540sh6bgOa7QRMm7Jnf7WKdm ay5GFXlsYQ5raHLxAkxcNGtRjbHhJAYwyZzYsbpZ9cCz20eolkMMDuwSjvKE4hX/ mTkIL2xs7PW9a9+3PJw+Hz0yewfWLqOqZV9nbvozkBzd5UjYYt/symUzVIGkAQ7s Q44uv5U= -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:39 2025 by rpki-client