This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/8ADEE00C71AB11EFB9222180C4F9AE02.roa File: 8ADEE00C71AB11EFB9222180C4F9AE02.roa (raw, json) Hash identifier: mb9EYVTFOwSeroALgtSuzNWKbJmEMZhqY5a2EZKLO14= Subject key identifier: D7:79:FA:B2:8E:1E:9E:3E:21:D2:36:01:7B:8E:0B:57:97:EA:74:A8 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01DB Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/8ADEE00C71AB11EFB9222180C4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:55 +0000 ROA not before: Wed 31 Dec 2025 04:24:55 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9546 IP address blocks: 202.28.92.0/22 maxlen: 22 202.28.116.0/24 maxlen: 24 202.28.117.0/24 maxlen: 24 202.28.118.0/24 maxlen: 24 202.28.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:55 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a597-2078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:b1:26:0e:a1:ba:3a:31:2b:a9:87:76:8b: a4:bf:ed:6e:39:e1:3b:9a:45:0c:d1:2e:55:b3:d8: 86:a4:b9:c2:35:ff:9f:01:13:44:b3:41:de:5b:1d: 84:67:fc:92:60:4c:68:97:1a:22:27:b9:5d:ef:54: 6c:ba:4c:30:ff:ee:55:8d:79:36:5d:db:fd:1c:10: b4:ac:4a:35:88:38:43:5a:d7:ca:25:03:2c:be:14: ad:27:25:d0:9d:64:a9:69:0e:96:f9:3a:9d:a9:fa: 9e:8e:99:be:a8:9e:8b:12:56:da:f8:64:9d:e8:19: bb:47:d9:89:96:fb:bc:d5:ea:cf:94:82:bb:71:42: f6:6b:f2:35:d2:c0:17:93:37:b3:b2:09:f0:3c:4c: ef:54:52:46:f1:3b:7a:32:8d:5e:e7:bf:7d:65:05: e3:68:6a:fc:6b:b0:45:6c:4b:f2:34:bc:75:2d:09: ea:cd:fd:94:d5:8e:4d:2f:3e:10:39:44:8f:bb:0b: fa:9a:fc:34:9b:6a:ba:7b:06:7a:f4:37:f2:5f:12: 04:7e:1e:20:37:61:fc:58:e5:f3:b4:01:8b:ae:67: 04:08:27:6a:c7:b1:bc:74:23:62:0b:5b:17:15:73: b6:0b:c5:0f:92:81:90:75:fa:43:79:31:75:b9:c5: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:79:FA:B2:8E:1E:9E:3E:21:D2:36:01:7B:8E:0B:57:97:EA:74:A8 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/8ADEE00C71AB11EFB9222180C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.92.0/22 202.28.116.0/22 Signature Algorithm: sha256WithRSAEncryption 06:5d:33:48:4f:7d:70:ba:d7:16:1c:f7:b6:20:62:f1:91:36: 19:10:ea:02:b8:24:8a:2d:bd:27:fc:64:58:d0:7f:3c:65:7f: ea:ec:79:5a:46:8e:5e:f9:9d:cd:5b:1e:9d:9d:e8:37:f3:90: 5f:c3:1c:a7:35:f2:92:2a:20:b3:c7:03:60:c9:24:f3:4d:80: ba:d0:e8:00:f2:b7:29:07:7f:2d:51:6a:61:27:e7:67:d6:5d: 25:00:5c:1c:d7:8d:64:7d:49:00:fa:4d:04:b6:a9:0a:7d:6c: ff:28:2e:dc:df:43:df:61:fb:5b:7d:d1:11:82:16:7c:00:79: 6d:91:c2:33:d4:7b:cd:68:2e:ef:34:b4:d7:23:18:80:78:80: 96:85:3d:1b:10:22:5e:9b:03:30:4c:e4:61:bf:0e:cd:88:40: 7f:51:8c:0c:91:51:b5:49:68:39:a0:da:ac:24:89:03:4b:fc: 18:e7:39:ae:8d:af:3f:1f:c7:2c:eb:55:df:be:c8:bc:a3:b5: b6:20:35:62:2c:6a:7e:60:57:7d:9d:f5:58:32:05:18:e9:f3: e9:07:06:7c:0b:7a:42:24:be:96:7c:d5:ef:fa:90:1d:1d:32: c2:28:af:1a:2c:b3:1a:07:14:58:bd:1c:bb:7a:a4:8b:b8:5d: 8a:1d:b3:86 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDU1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU5Ny0yMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKexJg6hujoxK6mHdoukv+1uOeE7mkUM0S5Vs9iGpLnCNf+fARNEs0HeWx2E Z/ySYExolxoiJ7ld71Rsukww/+5VjXk2Xdv9HBC0rEo1iDhDWtfKJQMsvhStJyXQ nWSpaQ6W+Tqdqfqejpm+qJ6LElba+GSd6Bm7R9mJlvu81erPlIK7cUL2a/I10sAX kzezsgnwPEzvVFJG8Tt6Mo1e5799ZQXjaGr8a7BFbEvyNLx1LQnqzf2U1Y5NLz4Q OUSPuwv6mvw0m2q6ewZ69DfyXxIEfh4gN2H8WOXztAGLrmcECCdqx7G8dCNiC1sX FXO2C8UPkoGQdfpDeTF1ucWYDwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNd5+rKO Hp4+IdI2AXuOC1eX6nSoMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvOEFERUUwMEM3 MUFCMTFFRkI5MjIyMTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALKHFwDBALKHHQwDQYJKoZIhvcNAQELBQADggEBAAZdM0hP fXC61xYc97YgYvGRNhkQ6gK4JIotvSf8ZFjQfzxlf+rseVpGjl75nc1bHp2d6Dfz kF/DHKc18pIqILPHA2DJJPNNgLrQ6ADytykHfy1RamEn52fWXSUAXBzXjWR9SQD6 TQS2qQp9bP8oLtzfQ99h+1t90RGCFnwAeW2RwjPUe81oLu80tNcjGIB4gJaFPRsQ Il6bAzBM5GG/Ds2IQH9RjAyRUbVJaDmg2qwkiQNL/BjnOa6Nrz8fxyzrVd++yLyj tbYgNWIsan5gV32d9VgyBRjp8+kHBnwLekIkvpZ81e/6kB0dMsIorxossxoHFFi9 HLt6pIu4XYods4Y= -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:02 2026 by rpki-client