This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/FAA2E3324C3811EEB7116433C4F9AE02.roa File: FAA2E3324C3811EEB7116433C4F9AE02.roa (raw, json) Hash identifier: lp3xmOm8VpMKZjMN4wnKudx9lNNJk9A7QEoVNpNZM/Y= Subject key identifier: 7C:1D:FC:21:ED:F5:83:81:CE:41:8B:06:0E:54:67:F0:E9:CA:67:4E Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Certificate serial: 01AE Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/FAA2E3324C3811EEB7116433C4F9AE02.roa Signing time: Thu 06 Nov 2025 23:38:35 +0000 ROA not before: Thu 06 Nov 2025 23:38:35 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 17435 IP address blocks: 58.28.0.0/16 maxlen: 16 118.90.0.0/16 maxlen: 16 182.154.0.0/16 maxlen: 16 2001:e20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Validity Not Before: Nov 6 23:38:35 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=690d317a-27fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:1e:3d:e9:03:f5:8c:b2:25:d1:ff:4d:c4: cd:61:af:14:12:ef:19:b2:c1:d5:3c:1b:84:da:ae: 94:b9:a2:c8:a6:d3:1a:72:39:0e:d0:a4:4c:20:18: 1a:34:7d:b4:88:09:b1:62:0f:6c:57:ba:2d:1a:41: 8c:39:a5:c3:17:7d:6c:98:01:fb:32:ca:a2:e0:e0: 7a:9a:43:e7:5c:f1:12:6e:18:86:7f:19:b4:9e:1b: e1:f9:a8:aa:67:e4:24:ca:5b:7a:c4:04:88:ff:ce: f0:15:97:be:2e:6a:2e:cc:46:08:7a:a6:c2:5f:57: 5e:90:4a:0f:a7:0a:6a:7d:6f:ba:5c:0f:c3:54:37: c4:db:0c:bc:04:52:68:f9:2a:01:40:04:64:86:ec: e4:2e:26:3b:98:ec:3b:ce:f9:ba:30:e9:b8:30:fc: c9:c6:d7:a8:46:59:23:37:e9:0a:df:83:86:fa:9e: ac:9f:43:09:98:15:f3:68:f9:e9:20:30:63:e9:35: 80:71:e4:e7:61:d6:a4:86:09:21:2d:29:e1:0a:31: fc:8b:db:84:7f:39:b3:7d:c6:79:f8:f6:e7:66:ee: c1:52:20:99:54:fa:9a:fe:91:17:6a:20:d6:42:7e: ad:fd:5c:9e:21:bd:0d:81:b2:ed:93:30:02:a1:4f: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1D:FC:21:ED:F5:83:81:CE:41:8B:06:0E:54:67:F0:E9:CA:67:4E X509v3 Authority Key Identifier: keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/FAA2E3324C3811EEB7116433C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.28.0.0/16 118.90.0.0/16 182.154.0.0/16 IPv6: 2001:e20::/32 Signature Algorithm: sha256WithRSAEncryption 3f:dc:90:89:6d:e2:4a:2f:79:1a:bb:89:9a:40:5f:fb:d4:75: eb:f1:4f:1e:09:b2:2c:6e:11:8c:31:83:b5:2f:48:74:18:23: b8:c0:76:c3:3c:fc:20:22:33:24:87:ae:23:93:46:68:45:66: a9:3f:b3:e4:46:2b:d2:59:da:26:2f:15:7b:7b:34:05:61:96: 40:7b:c4:94:d9:d3:4e:f8:92:2b:d3:fe:91:88:ba:f0:ec:be: b1:56:24:92:c1:dd:9a:e4:07:ea:6c:29:71:14:07:49:0d:d1: e0:b2:a0:17:14:a9:77:53:3c:ef:15:d8:40:eb:cb:9d:30:c9: ed:b4:bb:16:76:07:23:f7:6c:78:54:38:58:06:23:81:03:d2: d2:ae:5e:40:e6:de:66:cf:73:40:26:bc:56:a1:53:ba:af:48: 00:d0:2a:39:e6:af:cb:44:40:5b:87:36:4a:fd:dc:34:f6:6a: d4:50:61:34:f1:68:c3:a1:38:ec:93:8e:5d:15:bf:50:b9:a9: 8b:0c:84:30:e6:e6:22:5d:66:fd:b5:43:fd:70:0a:aa:a2:2a: 45:25:62:19:c2:e2:04:5c:5a:78:ef:8d:b8:d1:33:8c:f8:96: 44:15:ad:ae:e6:af:5e:3e:7e:e4:8e:42:2f:60:3c:a5:3c:36: 8b:a1:94:39 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE1QzYxMTAvBgNVBAUTKDNENDdFNjY4N0JCNERGNDBDNTFCMDNBNDU1OUMxMENB MjJGNjc3MkYwHhcNMjUxMTA2MjMzODM1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBkMzE3YS0yN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkgePekD9YyyJdH/TcTNYa8UEu8ZssHVPBuE2q6UuaLIptMacjkO0KRMIBga NH20iAmxYg9sV7otGkGMOaXDF31smAH7Msqi4OB6mkPnXPESbhiGfxm0nhvh+aiq Z+Qkylt6xASI/87wFZe+LmouzEYIeqbCX1dekEoPpwpqfW+6XA/DVDfE2wy8BFJo +SoBQARkhuzkLiY7mOw7zvm6MOm4MPzJxteoRlkjN+kK34OG+p6sn0MJmBXzaPnp IDBj6TWAceTnYdakhgkhLSnhCjH8i9uEfzmzfcZ5+PbnZu7BUiCZVPqa/pEXaiDW Qn6t/VyeIb0NgbLtkzACoU+LGwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHwd/CHt 9YOBzkGLBg5UZ/DpymdOMB8GA1UdIwQYMBaAFD1H5mh7tN9AxRsDpFWcEMoi9ncv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTVDNi9ENTU1MTlCNDRD MzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMwREZHd09rVlp3UXlpTDJk eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVZm1hSHUwMzBERkd3T2tWWndReWlMMmR5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUE1QzYvRDU1NTE5QjQ0QzM0MTFFRUFFRURBMjJDQzRGOUFFMDIvRkFBMkUzMzI0 QzM4MTFFRUI3MTE2NDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMBUEAgABMA8DAwA6HAMDAHZaAwMAtpowDQQCAAIwBwMFACABDiAwDQYJKoZI hvcNAQELBQADggEBAD/ckIlt4koveRq7iZpAX/vUdevxTx4JsixuEYwxg7UvSHQY I7jAdsM8/CAiMySHriOTRmhFZqk/s+RGK9JZ2iYvFXt7NAVhlkB7xJTZ0074kivT /pGIuvDsvrFWJJLB3ZrkB+psKXEUB0kN0eCyoBcUqXdTPO8V2EDry50wye20uxZ2 ByP3bHhUOFgGI4ED0tKuXkDm3mbPc0AmvFahU7qvSADQKjnmr8tEQFuHNkr93DT2 atRQYTTxaMOhOOyTjl0Vv1C5qYsMhDDm5iJdZv21Q/1wCqqiKkUlYhnC4gRcWnjv jbjRM4z4lkQVra7mr14+fuSOQi9gPKU8NouhlDk= -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:15 2025 by rpki-client