This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/30A0F15C844211F08D5EDC71C4F9AE02.roa File: 30A0F15C844211F08D5EDC71C4F9AE02.roa (raw, json) Hash identifier: BRG8PCAPQi0/O3ne0ONgbWxdoF8gM0NMg0IhrG1Z1Gw= Subject key identifier: 4F:48:A3:E2:7C:D1:38:E7:25:3E:76:C2:70:27:F6:C0:E7:12:7A:10 Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Certificate serial: 41 Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/30A0F15C844211F08D5EDC71C4F9AE02.roa Signing time: Sat 27 Dec 2025 10:32:06 +0000 ROA not before: Sat 27 Dec 2025 10:32:06 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154173 IP address blocks: 203.174.22.0/23 maxlen: 23 203.174.22.0/24 maxlen: 24 203.174.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533 Validity Not Before: Dec 27 10:32:06 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=694fb5a6-522f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:c0:76:48:f4:b6:b1:b2:fd:3a:07:23:52: 06:8a:5e:e5:ee:5c:a5:a0:89:8d:16:3a:05:df:83: ed:87:fb:12:f3:39:26:9b:ad:21:24:75:98:32:4b: 46:94:c5:6f:06:2e:b5:6d:de:bf:b1:38:f4:87:7d: 1f:54:f2:f9:65:78:78:40:59:db:f6:50:e9:40:3a: 77:47:9e:bf:62:45:3f:59:65:d0:e9:08:60:c1:d3: 3a:83:61:ba:81:c7:c2:7c:ca:67:d4:af:2e:19:85: 99:d5:e4:b2:72:16:02:33:28:99:04:d1:69:ff:f2: 7b:5d:f6:20:f5:94:c6:77:5c:e2:68:44:ea:52:31: 70:5a:d9:ac:30:c1:4f:f1:d4:2c:14:78:49:52:6f: 1b:dd:33:58:fb:1c:05:ce:f0:3f:3d:68:ec:8c:f1: 79:56:62:c7:4b:b6:c6:e3:9e:d6:fa:7b:97:c0:34: e1:87:81:38:30:1a:1d:a0:45:13:aa:0b:cb:ec:10: 33:61:02:cc:de:4d:a4:a5:42:49:31:3c:58:a5:6c: 7d:4a:b3:b6:e0:a3:11:3b:5a:59:c3:ee:be:e8:7b: 26:d5:48:0b:a3:89:9b:30:3c:e4:33:b3:97:70:df: a7:82:1d:b6:70:2f:f9:dc:23:c9:0f:d5:df:84:11: bb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:48:A3:E2:7C:D1:38:E7:25:3E:76:C2:70:27:F6:C0:E7:12:7A:10 X509v3 Authority Key Identifier: keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/30A0F15C844211F08D5EDC71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.174.22.0/23 Signature Algorithm: sha256WithRSAEncryption 12:78:d4:71:87:14:11:b8:8b:85:0a:ab:18:67:77:10:dd:9b: 75:d0:2b:25:4a:b9:e6:59:ff:65:77:5f:c6:b5:e0:9f:ef:52: a3:38:11:8c:ec:c7:6e:59:dc:a3:55:4a:58:e0:6f:2d:32:b0: b0:0c:19:c9:00:85:23:a7:b9:95:cd:93:aa:16:01:9f:f5:61: e4:a2:9e:c6:fe:66:53:ee:67:57:39:4e:e2:2f:96:ec:9f:00: 17:06:a6:6d:af:d6:fa:70:ef:7e:0c:62:e4:74:a7:2d:2f:1c: 79:e9:e0:37:84:3d:4d:f7:54:57:d2:4e:c0:c3:9f:83:98:d7: d8:ce:b0:ac:e2:0f:a6:df:a5:00:41:7f:bc:1a:c2:94:4e:27: 60:3a:50:f8:37:c8:c2:04:14:28:fb:ef:43:31:ee:07:66:e4: 41:55:a0:c2:c2:38:a1:8d:da:7c:27:3f:87:26:f1:59:d9:8d: 96:5c:58:41:99:b4:1a:c3:f7:a0:2c:33:99:75:04:f9:fd:0c: 58:8d:c6:c4:83:21:fe:37:97:60:6d:04:87:48:96:fd:a3:3b: 92:de:03:c7:31:05:b0:af:38:58:19:f0:a0:90:19:67:ff:e5: e3:1d:3e:ee:c3:aa:72:7e:f5:19:23:47:c2:1a:99:34:9d:b3: b2:59:87:f4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NERCRjExMC8GA1UEBRMoMENBMzE2MjEyNEVFNjQ2Mjk2NDNGRjI5RUIzMTEwNzJE OTEyODUzMzAeFw0yNTEyMjcxMDMyMDZaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NGZiNWE2LTUyMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/DsB2SPS2sbL9OgcjUgaKXuXuXKWgiY0WOgXfg+2H+xLzOSabrSEkdZgyS0aU xW8GLrVt3r+xOPSHfR9U8vlleHhAWdv2UOlAOndHnr9iRT9ZZdDpCGDB0zqDYbqB x8J8ymfUry4ZhZnV5LJyFgIzKJkE0Wn/8ntd9iD1lMZ3XOJoROpSMXBa2awwwU/x 1CwUeElSbxvdM1j7HAXO8D89aOyM8XlWYsdLtsbjntb6e5fANOGHgTgwGh2gRROq C8vsEDNhAszeTaSlQkkxPFilbH1Ks7bgoxE7WlnD7r7oeybVSAujiZswPOQzs5dw 36eCHbZwL/ncI8kP1d+EEbvVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUT0ij4nzR OOclPnbCcCf2wOcSehAwHwYDVR0jBBgwFoAUDKMWISTuZGKWQ/8p6zEQctkShTMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0REJGL0MxNDU2MDUwODQ0 MDExRjBBNTcwQkM0OUM0RjlBRTAyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREtNV0lTVHVaR0tXUV84cDZ6RVFjdGtTaFRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NERCRi9DMTQ1NjA1MDg0NDAxMUYwQTU3MEJDNDlDNEY5QUUwMi8zMEEwRjE1Qzg0 NDIxMUYwOEQ1RURDNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcuuFjANBgkqhkiG9w0BAQsFAAOCAQEAEnjUcYcUEbiLhQqr GGd3EN2bddArJUq55ln/ZXdfxrXgn+9SozgRjOzHblnco1VKWOBvLTKwsAwZyQCF I6e5lc2TqhYBn/Vh5KKexv5mU+5nVzlO4i+W7J8AFwamba/W+nDvfgxi5HSnLS8c eengN4Q9TfdUV9JOwMOfg5jX2M6wrOIPpt+lAEF/vBrClE4nYDpQ+DfIwgQUKPvv QzHuB2bkQVWgwsI4oY3afCc/hybxWdmNllxYQZm0GsP3oCwzmXUE+f0MWI3GxIMh /jeXYG0Eh0iW/aM7kt4DxzEFsK84WBnwoJAZZ//l4x0+7sOqcn71GSNHwhqZNJ2z slmH9A== -----END CERTIFICATE-----Generated at Sun Jan 25 13:57:31 2026 by rpki-client