This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/4F7F735071BF11EF9707C757C4F9AE02.roa File: 4F7F735071BF11EF9707C757C4F9AE02.roa (raw, json) Hash identifier: YkyVmdSo8mu0gw6voTciKKcoxgu9EI3E8Rsa74scM0A= Subject key identifier: D3:FD:62:2E:31:B1:E3:4A:8F:85:8E:87:58:1C:1D:3E:B0:8E:1E:75 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01C5 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/4F7F735071BF11EF9707C757C4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:33 +0000 ROA not before: Wed 31 Dec 2025 04:24:33 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 17479 IP address blocks: 202.28.24.0/22 maxlen: 22 202.28.24.0/24 maxlen: 24 202.28.25.0/24 maxlen: 24 202.28.26.0/24 maxlen: 24 202.28.27.0/24 maxlen: 24 202.28.244.0/22 maxlen: 22 202.28.244.0/24 maxlen: 24 202.28.245.0/24 maxlen: 24 202.28.246.0/24 maxlen: 24 202.28.247.0/24 maxlen: 24 202.28.248.0/22 maxlen: 22 202.28.248.0/24 maxlen: 24 202.28.249.0/24 maxlen: 24 202.28.250.0/24 maxlen: 24 202.28.251.0/24 maxlen: 24 2001:3c8:5007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:33 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a581-28f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:f0:98:41:98:35:43:de:eb:b0:2f:80:45: 82:bf:55:20:ab:90:e4:88:4f:eb:e5:40:d1:dd:c4: a8:b0:17:55:3d:40:3b:91:aa:10:28:6f:cc:76:51: 35:d4:71:fb:f0:a1:9f:e7:37:5a:d2:b9:b8:c1:70: c2:c9:62:1f:8c:38:de:0f:8e:94:ad:09:dd:76:4a: b4:e7:ab:be:d7:54:40:0e:f5:7d:84:06:0c:1f:94: 4d:b5:38:18:66:ad:46:f4:57:6b:4d:b8:a0:e3:85: 58:ed:b3:12:6e:56:ff:08:47:bb:1d:2b:ee:73:25: d8:f0:c7:99:96:8f:a2:8a:6c:26:76:16:ae:23:2a: 30:2a:c8:ad:a7:16:82:cd:71:58:35:46:8d:de:c6: 16:28:64:fb:51:0d:23:a1:4d:6c:96:57:b4:1d:52: 73:a2:1c:82:09:5e:cc:06:19:7f:52:21:3c:91:91: e2:9a:f4:99:3b:28:b9:40:02:43:90:3f:4c:1a:24: ae:e0:28:6b:6c:18:78:15:03:56:32:24:2f:78:5b: cb:98:f3:79:21:9b:66:10:56:4f:83:e8:e1:3d:71: 8a:32:fd:a2:45:89:8f:fe:cb:d9:7d:e3:91:f4:20: 56:f5:09:0b:0f:73:c8:16:bc:31:c2:8b:70:20:fc: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FD:62:2E:31:B1:E3:4A:8F:85:8E:87:58:1C:1D:3E:B0:8E:1E:75 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/4F7F735071BF11EF9707C757C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.24.0/22 202.28.244.0-202.28.251.255 IPv6: 2001:3c8:5007::/48 Signature Algorithm: sha256WithRSAEncryption 7b:72:51:97:d9:8f:a6:89:1f:27:ac:e1:cb:1f:99:89:54:5e: 80:f5:f6:df:37:22:ac:55:10:aa:7f:f6:9e:b7:2c:69:ed:bc: ce:c7:f1:c0:3e:e2:67:77:7f:64:ab:19:36:a9:5c:14:7c:01: 58:7f:f4:f5:8a:10:c2:c8:6f:f5:5b:e4:dd:7f:39:87:07:98: ba:c3:5b:4b:da:f7:dd:0c:13:95:07:80:eb:00:51:2e:09:f8: 1d:be:00:d0:cb:8a:f7:9f:e1:f2:fd:ac:62:a1:25:d5:cf:f9: be:11:42:10:ea:c9:64:30:85:a5:91:bf:58:a5:5f:11:67:81: b2:95:17:75:a7:85:f0:3a:c9:af:bc:c2:7b:f0:17:c0:3c:27: 0c:9e:99:ae:ae:ae:e6:43:ef:31:df:c3:a1:e4:e5:22:16:61: 6b:94:32:57:57:1e:e3:cb:c5:6d:25:17:6f:b6:ea:7c:6f:c9: e3:04:3a:f1:11:11:3e:df:1d:7a:69:f7:6a:ae:86:86:48:bb: 7c:d6:cb:03:af:3c:09:99:90:85:0d:ec:17:31:c8:e3:d9:cb: 5a:59:37:3c:00:3f:05:cb:a4:db:bf:a3:3f:f3:96:70:ec:23: 22:6c:ca:b5:28:bb:91:7f:44:66:e3:84:0f:6c:9e:d3:71:59: 81:cc:51:f6 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDMzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU4MS0yOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVHwmEGYNUPe67AvgEWCv1Ugq5DkiE/r5UDR3cSosBdVPUA7kaoQKG/MdlE1 1HH78KGf5zda0rm4wXDCyWIfjDjeD46UrQnddkq056u+11RADvV9hAYMH5RNtTgY Zq1G9FdrTbig44VY7bMSblb/CEe7HSvucyXY8MeZlo+iimwmdhauIyowKsitpxaC zXFYNUaN3sYWKGT7UQ0joU1slle0HVJzohyCCV7MBhl/UiE8kZHimvSZOyi5QAJD kD9MGiSu4ChrbBh4FQNWMiQveFvLmPN5IZtmEFZPg+jhPXGKMv2iRYmP/svZfeOR 9CBW9QkLD3PIFrwxwotwIPwsIQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNP9Yi4x seNKj4WOh1gcHT6wjh51MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvNEY3RjczNTA3 MUJGMTFFRjk3MDdDNzU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPgYIKwYBBQUHAQcBAf8E LzAtMBoEAgABMBQDBALKHBgwDAMEAsoc9AMEAsoc+DAPBAIAAjAJAwcAIAEDyFAH MA0GCSqGSIb3DQEBCwUAA4IBAQB7clGX2Y+miR8nrOHLH5mJVF6A9fbfNyKsVRCq f/aetyxp7bzOx/HAPuJnd39kqxk2qVwUfAFYf/T1ihDCyG/1W+TdfzmHB5i6w1tL 2vfdDBOVB4DrAFEuCfgdvgDQy4r3n+Hy/axioSXVz/m+EUIQ6slkMIWlkb9YpV8R Z4GylRd1p4XwOsmvvMJ78BfAPCcMnpmurq7mQ+8x38Oh5OUiFmFrlDJXVx7jy8Vt JRdvtup8b8njBDrxERE+3x16afdqroaGSLt81ssDrzwJmZCFDewXMcjj2ctaWTc8 AD8Fy6Tbv6M/85Zw7CMibMq1KLuRf0Rm44QPbJ7TcVmBzFH2 -----END CERTIFICATE-----Generated at Sun Jan 25 14:08:49 2026 by rpki-client