This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0F1CF78721511EF9D7B9F3DC4F9AE02.roa File: C0F1CF78721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: RcfKdMbytY+5WfZlfa09lPP5Po5hvXyHkw04WsGwR/c= Subject key identifier: 7A:76:1D:38:D2:07:1E:FD:C9:F2:D6:36:35:F4:C6:53:C1:A2:84:78 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01AF Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0F1CF78721511EF9D7B9F3DC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:13 +0000 ROA not before: Wed 31 Dec 2025 04:24:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134690 IP address blocks: 202.29.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a56d-f347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:7d:68:c6:7f:78:2a:78:91:53:22:38:5b: e9:f7:42:ba:17:78:0b:9a:e2:1f:72:06:25:3e:b2: c2:37:d3:d9:f0:ef:9d:61:78:5b:74:a9:c2:99:31: 6a:a9:14:77:6b:90:53:aa:69:e2:66:77:07:c0:6e: 9b:7c:9e:d2:4b:6f:01:3a:04:05:96:b7:85:74:ba: c3:ff:20:92:5c:68:7f:1f:ca:ee:58:e9:6c:5d:97: 29:6a:20:58:6d:af:c5:8c:35:31:37:26:f9:b4:75: 5a:77:44:13:c3:35:39:44:67:70:b9:56:4a:99:4b: a4:3d:96:75:e4:64:b5:c3:7f:36:61:25:22:5f:65: 82:57:4d:6c:9f:ef:39:ba:14:11:a2:04:3f:1a:1f: 17:ba:09:e7:ab:9a:ab:32:44:7d:4d:29:a7:c1:1b: a9:00:8c:0a:d2:ca:b4:e9:16:e0:36:18:a0:ce:2b: 44:c4:32:b0:f8:20:21:f8:67:e9:83:38:7c:e6:20: 5d:60:66:6f:fd:19:ce:1b:96:9a:7b:c9:22:5b:1e: 44:ba:6d:16:d3:5e:83:5e:e2:05:42:0c:d3:1c:6f: 42:92:af:b3:f8:1f:19:b4:6b:4f:c9:b1:86:04:53: c2:5e:68:b3:b7:8f:e1:c4:26:27:9c:07:cf:1b:6d: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:76:1D:38:D2:07:1E:FD:C9:F2:D6:36:35:F4:C6:53:C1:A2:84:78 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0F1CF78721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.98.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:89:d8:ed:65:b5:5a:d3:1f:9d:02:f4:8a:f3:e4:26:16:b8: e7:b9:85:5e:aa:46:03:0e:00:44:06:7f:f9:30:da:c3:37:a4: ce:d2:96:e8:75:7c:3b:1d:cc:c2:69:db:85:f0:0c:0b:bb:27: c3:59:b1:61:3c:6d:dc:b4:02:25:1d:2e:72:52:11:6a:8b:81: 16:cb:18:f6:33:34:2e:ef:fe:95:01:61:ab:76:41:0b:7c:81: d7:10:3a:c1:cd:e9:dc:7a:a1:6e:8c:66:c7:db:bc:8f:37:5e: 84:3b:95:99:07:25:89:ff:e6:e3:f7:90:1e:3e:bb:63:94:d9: 38:72:6e:fd:a6:92:3d:28:6c:d5:40:bf:02:37:5d:df:ed:3e: df:d8:af:39:2f:c2:b0:35:b1:00:2b:3b:de:78:ec:1f:bf:b7: 69:5e:75:5a:de:15:57:08:3e:74:8d:c5:06:97:77:08:4e:49: 0b:a7:14:d0:7b:13:cc:95:24:81:77:d3:07:d0:fc:d3:ad:74: 44:93:20:9d:a5:2a:71:98:3b:2f:11:e2:11:68:63:78:3a:4a: c3:47:9e:7d:c1:a8:b4:82:58:91:94:7b:bf:4f:a2:5c:d3:63: 85:73:f0:ce:69:9e:62:34:64:56:bf:10:76:0d:f3:c6:29:bf: bf:6f:c0:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU2ZC1mMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUB9aMZ/eCp4kVMiOFvp90K6F3gLmuIfcgYlPrLCN9PZ8O+dYXhbdKnCmTFq qRR3a5BTqmniZncHwG6bfJ7SS28BOgQFlreFdLrD/yCSXGh/H8ruWOlsXZcpaiBY ba/FjDUxNyb5tHVad0QTwzU5RGdwuVZKmUukPZZ15GS1w382YSUiX2WCV01sn+85 uhQRogQ/Gh8Xugnnq5qrMkR9TSmnwRupAIwK0sq06RbgNhigzitExDKw+CAh+Gfp gzh85iBdYGZv/RnOG5aae8kiWx5Eum0W016DXuIFQgzTHG9Ckq+z+B8ZtGtPybGG BFPCXmizt4/hxCYnnAfPG20WHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHp2HTjS Bx79yfLWNjX0xlPBooR4MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQzBGMUNGNzg3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKHWIwDQYJKoZIhvcNAQELBQADggEBAHqJ2O1ltVrTH50C 9Irz5CYWuOe5hV6qRgMOAEQGf/kw2sM3pM7Sluh1fDsdzMJp24XwDAu7J8NZsWE8 bdy0AiUdLnJSEWqLgRbLGPYzNC7v/pUBYat2QQt8gdcQOsHN6dx6oW6MZsfbvI83 XoQ7lZkHJYn/5uP3kB4+u2OU2Thybv2mkj0obNVAvwI3Xd/tPt/YrzkvwrA1sQAr O9547B+/t2ledVreFVcIPnSNxQaXdwhOSQunFNB7E8yVJIF30wfQ/NOtdESTIJ2l KnGYOy8R4hFoY3g6SsNHnn3BqLSCWJGUe79PolzTY4Vz8M5pnmI0ZFa/EHYN88Yp v79vwJs= -----END CERTIFICATE-----Generated at Sun Jan 25 17:03:52 2026 by rpki-client