This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C304F128721511EF9D7B9F3DC4F9AE02.roa File: C304F128721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: CT9Q0NK4A4wIvLWpeB3ZIklID/v1iUMQM/pI22JeIzM= Subject key identifier: 41:BA:8C:AD:E9:00:62:E9:18:7D:DD:9F:9C:45:B2:87:03:61:3E:85 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01B4 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C304F128721511EF9D7B9F3DC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:18 +0000 ROA not before: Wed 31 Dec 2025 04:24:18 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137241 IP address blocks: 202.29.80.0/23 maxlen: 23 2001:3c8:4007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:18 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a572-1d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:52:ed:02:ac:13:c3:b0:ff:75:2b:a7:c6: 75:5d:b9:dd:d1:66:71:83:41:48:4f:f3:6d:e0:ea: 32:79:7b:b6:6f:60:70:fd:9e:05:47:b6:88:ac:7d: 71:c8:a9:63:c7:26:87:44:07:04:41:8d:ec:69:4d: 8a:05:db:a9:5c:9e:67:f2:b0:91:45:56:3f:fb:42: e7:76:97:a5:fa:ba:2a:e1:86:cf:9a:61:0c:8e:89: c2:70:f0:a5:0a:c1:e9:31:98:e5:bf:d9:80:2b:24: 08:f0:14:1c:c8:01:e3:0d:0a:a2:8d:74:bb:db:d2: d1:a8:c5:ba:08:ce:17:0a:b8:b6:f8:a2:87:3e:e5: 23:c6:ac:08:19:64:a9:86:5a:1b:17:74:81:0b:7e: fc:37:af:db:a1:6d:fc:95:6e:a6:aa:17:51:42:84: e4:1f:78:5a:58:0e:35:b9:d6:22:bb:d7:47:68:02: 58:68:7a:5f:fb:11:ea:89:9d:b9:fb:4a:be:21:df: d9:f1:50:ae:07:ad:29:43:54:3d:06:5c:89:be:9f: 90:4f:12:8d:12:2c:cc:95:9f:c5:22:b0:4f:5d:81: fb:0e:06:af:b9:4b:33:69:c9:72:fa:d4:6e:4e:45: 65:d6:11:56:cb:63:01:ab:b3:08:67:0e:7d:55:93: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BA:8C:AD:E9:00:62:E9:18:7D:DD:9F:9C:45:B2:87:03:61:3E:85 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C304F128721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.80.0/23 IPv6: 2001:3c8:4007::/48 Signature Algorithm: sha256WithRSAEncryption 9a:55:b3:31:4a:fd:51:d1:72:9a:22:c0:6c:39:bc:a7:7a:a9: a0:13:50:ee:cb:99:9b:44:5c:01:ef:aa:23:68:0b:f4:39:8c: 07:60:db:da:55:b4:b5:18:e9:32:c9:44:0e:13:8d:2d:20:5e: 19:49:7f:61:ef:d4:d9:7e:d1:86:dd:ce:79:0f:e0:f7:d9:2c: 9b:3d:e8:b9:f8:3c:b8:18:13:0d:87:91:ff:0e:b4:50:a6:0b: 86:14:60:94:b6:e4:b7:6e:4d:d1:b0:6c:3a:a4:f3:99:d3:96: f6:87:06:17:de:15:a8:4d:36:d1:10:d5:89:9b:dc:7d:7b:2c: 84:0c:b9:5b:3e:c6:26:d1:4f:94:4c:aa:dc:58:92:0f:84:90: 3d:49:7b:99:3a:7c:fb:ae:fe:31:2a:e6:3a:4a:e6:86:f3:96: 7f:34:81:7e:a7:85:6b:aa:db:ca:69:cc:a6:7d:57:4b:4b:d4: 2e:76:5f:3b:66:4b:d7:e9:6e:e3:f6:11:77:fc:d8:91:52:e7: 1c:0a:6d:26:df:af:ae:db:c1:2e:e1:81:60:0f:51:c3:39:e2: f2:fb:be:5d:eb:6f:ed:02:d5:86:fe:e5:85:d8:08:0b:22:25: cb:5b:13:76:b9:bf:27:03:3b:22:e5:9d:c6:1d:8b:ee:f6:c0: e1:05:26:38 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDE4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU3Mi0xZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj5S7QKsE8Ow/3Urp8Z1Xbnd0WZxg0FIT/Nt4OoyeXu2b2Bw/Z4FR7aIrH1x yKljxyaHRAcEQY3saU2KBdupXJ5n8rCRRVY/+0Lndpel+roq4YbPmmEMjonCcPCl CsHpMZjlv9mAKyQI8BQcyAHjDQqijXS729LRqMW6CM4XCri2+KKHPuUjxqwIGWSp hlobF3SBC378N6/boW38lW6mqhdRQoTkH3haWA41udYiu9dHaAJYaHpf+xHqiZ25 +0q+Id/Z8VCuB60pQ1Q9BlyJvp+QTxKNEizMlZ/FIrBPXYH7DgavuUszacly+tRu TkVl1hFWy2MBq7MIZw59VZOPnQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEG6jK3p AGLpGH3dn5xFsocDYT6FMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQzMwNEYxMjg3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHKHVAwDwQCAAIwCQMHACABA8hABzANBgkqhkiG9w0BAQsF AAOCAQEAmlWzMUr9UdFymiLAbDm8p3qpoBNQ7suZm0RcAe+qI2gL9DmMB2Db2lW0 tRjpMslEDhONLSBeGUl/Ye/U2X7Rht3OeQ/g99ksmz3oufg8uBgTDYeR/w60UKYL hhRglLbkt25N0bBsOqTzmdOW9ocGF94VqE020RDViZvcfXsshAy5Wz7GJtFPlEyq 3FiSD4SQPUl7mTp8+67+MSrmOkrmhvOWfzSBfqeFa6rbymnMpn1XS0vULnZfO2ZL 1+lu4/YRd/zYkVLnHAptJt+vrtvBLuGBYA9Rwzni8vu+Xetv7QLVhv7lhdgICyIl y1sTdrm/JwM7IuWdxh2L7vbA4QUmOA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:42:55 2026 by rpki-client