This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7F0270C6721B11EF81654E68C4F9AE02.roa File: 7F0270C6721B11EF81654E68C4F9AE02.roa (raw, json) Hash identifier: O8mqthJfjIrWQTa/t6vYc2BvksoIAQWXSSkInKjc6hY= Subject key identifier: 9E:41:FB:38:D3:ED:76:30:39:BE:A6:A6:A2:C0:8B:68:15:41:2D:B5 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01C7 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7F0270C6721B11EF81654E68C4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:35 +0000 ROA not before: Wed 31 Dec 2025 04:24:35 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 17827 IP address blocks: 202.28.100.0/24 maxlen: 24 202.28.101.0/24 maxlen: 24 202.28.102.0/24 maxlen: 24 202.28.103.0/24 maxlen: 24 2001:3c8:130a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:35 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a583-ee35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:38:5e:66:60:62:7b:66:9c:f5:4a:86:2b: be:38:70:93:10:ab:2b:b5:7a:f2:70:6b:76:b2:5e: a6:ff:7b:ab:84:60:7b:ef:81:c9:ab:2e:1c:68:20: 18:51:03:b4:5d:f0:81:60:3d:f3:3e:59:73:df:41: 26:4c:a6:70:d6:01:b2:12:db:78:58:71:32:2c:71: c7:90:92:bd:05:68:c7:88:fd:e0:fb:d5:3f:3b:8a: dc:45:e8:b5:22:ca:18:a1:a0:26:32:f9:05:69:ba: 31:8c:aa:ad:c3:d0:c0:cc:83:32:f8:82:c7:15:3a: 33:e4:47:14:bc:cf:bd:eb:7a:30:3c:1d:12:17:e0: 77:f3:30:26:84:eb:3a:08:2e:48:26:f3:d9:14:c3: 5e:ec:18:3a:18:9b:b6:d6:0e:f4:37:1a:a4:b0:49: 6a:ac:f1:0b:72:46:ac:8f:0d:a0:bc:1d:7d:f4:f4: ce:c8:e4:4d:45:aa:36:a6:b9:6a:e0:21:61:5a:39: f1:fa:5a:57:a3:a1:13:84:ee:96:77:c1:47:94:a7: 33:cf:68:fe:55:f5:6b:a3:b4:40:3c:46:e5:48:86: 5b:c0:de:1c:c5:59:c9:af:bb:56:00:14:e7:ef:51: 7b:9d:9a:c4:c7:95:4b:30:2b:f8:81:a4:b3:50:81: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:41:FB:38:D3:ED:76:30:39:BE:A6:A6:A2:C0:8B:68:15:41:2D:B5 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7F0270C6721B11EF81654E68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.100.0/22 IPv6: 2001:3c8:130a::/48 Signature Algorithm: sha256WithRSAEncryption 14:cb:9f:dc:23:31:4f:dc:8a:27:43:b4:76:6e:a9:88:c0:cb: 64:a6:84:6b:19:27:58:32:b7:3a:1f:5b:14:30:3b:de:f8:30: 80:34:d4:72:ac:ff:7d:bc:46:93:20:82:d7:93:f5:78:27:85: 1a:40:71:2f:fb:20:6f:53:82:8c:08:ce:d4:fd:21:97:c3:b7: dc:c2:4c:20:61:b9:f9:e4:04:46:72:94:8b:22:58:9a:32:e2: f2:26:2d:49:fd:fd:c1:21:4c:82:9f:99:91:2a:79:8e:e9:f6: e8:6d:32:46:58:9d:c8:df:c2:7b:e9:f1:93:da:2e:29:f0:90: 15:d5:1f:1b:d7:42:09:21:16:60:a4:70:e2:bb:ba:34:b2:b3: 95:62:f1:bf:1b:03:26:27:4b:1b:41:b8:ce:d8:5a:e3:11:6e: 06:84:ee:b2:b5:09:a3:b0:22:42:7b:84:97:d2:76:c9:19:15: 00:e5:26:61:83:8e:8c:a1:19:9d:bb:40:58:94:c9:d2:86:cd: 7c:0d:fe:99:33:65:31:4e:b8:3b:fc:5c:4f:39:d2:22:8e:88: 31:85:38:de:7d:3a:ab:44:4d:4e:f4:d4:60:a3:d5:d8:2c:63: 05:bd:4b:ff:49:5d:ec:c1:41:8b:0e:5f:cb:8f:8a:80:0a:35: cf:58:e8:0d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDM1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU4My1lZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJU4XmZgYntmnPVKhiu+OHCTEKsrtXrycGt2sl6m/3urhGB774HJqy4caCAY UQO0XfCBYD3zPllz30EmTKZw1gGyEtt4WHEyLHHHkJK9BWjHiP3g+9U/O4rcRei1 IsoYoaAmMvkFaboxjKqtw9DAzIMy+ILHFToz5EcUvM+963owPB0SF+B38zAmhOs6 CC5IJvPZFMNe7Bg6GJu21g70NxqksElqrPELckasjw2gvB199PTOyORNRao2prlq 4CFhWjnx+lpXo6EThO6Wd8FHlKczz2j+VfVro7RAPEblSIZbwN4cxVnJr7tWABTn 71F7nZrEx5VLMCv4gaSzUIF94QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJ5B+zjT 7XYwOb6mpqLAi2gVQS21MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvN0YwMjcwQzY3 MjFCMTFFRjgxNjU0RTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBALKHGQwDwQCAAIwCQMHACABA8gTCjANBgkqhkiG9w0BAQsF AAOCAQEAFMuf3CMxT9yKJ0O0dm6piMDLZKaEaxknWDK3Oh9bFDA73vgwgDTUcqz/ fbxGkyCC15P1eCeFGkBxL/sgb1OCjAjO1P0hl8O33MJMIGG5+eQERnKUiyJYmjLi 8iYtSf39wSFMgp+ZkSp5jun26G0yRlidyN/Ce+nxk9ouKfCQFdUfG9dCCSEWYKRw 4ru6NLKzlWLxvxsDJidLG0G4ztha4xFuBoTusrUJo7AiQnuEl9J2yRkVAOUmYYOO jKEZnbtAWJTJ0obNfA3+mTNlMU64O/xcTznSIo6IMYU43n06q0RNTvTUYKPV2Cxj Bb1L/0ld7MFBiw5fy4+KgAo1z1joDQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:28:36 2026 by rpki-client