This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C56AA228721511EF9D7B9F3DC4F9AE02.roa File: C56AA228721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: Z79CGwilw69CqaF3nTePX9cMknqfEXFfZujybGqzgEc= Subject key identifier: D4:33:40:88:BA:72:CA:61:5C:96:33:05:E3:77:97:A7:F0:7C:56:DC Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01D4 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C56AA228721511EF9D7B9F3DC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:48 +0000 ROA not before: Wed 31 Dec 2025 04:24:48 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 4762 IP address blocks: 202.28.128.0/18 maxlen: 18 202.28.128.0/20 maxlen: 20 202.28.128.0/24 maxlen: 24 202.28.129.0/24 maxlen: 24 202.28.130.0/24 maxlen: 24 202.28.131.0/24 maxlen: 24 202.28.132.0/24 maxlen: 24 202.28.133.0/24 maxlen: 24 202.28.134.0/24 maxlen: 24 202.28.135.0/24 maxlen: 24 202.28.136.0/22 maxlen: 22 202.28.136.0/24 maxlen: 24 202.28.137.0/24 maxlen: 24 202.28.138.0/23 maxlen: 24 202.28.140.0/24 maxlen: 24 202.28.141.0/24 maxlen: 24 202.28.142.0/24 maxlen: 24 202.28.143.0/24 maxlen: 24 202.28.144.0/20 maxlen: 20 202.28.144.0/22 maxlen: 22 202.28.144.0/24 maxlen: 24 202.28.145.0/24 maxlen: 24 202.28.146.0/24 maxlen: 24 202.28.147.0/24 maxlen: 24 202.28.148.0/22 maxlen: 22 202.28.148.0/24 maxlen: 24 202.28.149.0/24 maxlen: 24 202.28.150.0/23 maxlen: 24 202.28.152.0/21 maxlen: 21 202.28.152.0/24 maxlen: 24 202.28.153.0/24 maxlen: 24 202.28.154.0/24 maxlen: 24 202.28.155.0/24 maxlen: 24 202.28.156.0/24 maxlen: 24 202.28.157.0/24 maxlen: 24 202.28.158.0/24 maxlen: 24 202.28.159.0/24 maxlen: 24 202.28.160.0/20 maxlen: 20 202.28.160.0/24 maxlen: 24 202.28.161.0/24 maxlen: 24 202.28.162.0/24 maxlen: 24 202.28.163.0/24 maxlen: 24 202.28.164.0/24 maxlen: 24 202.28.165.0/24 maxlen: 24 202.28.166.0/24 maxlen: 24 202.28.167.0/24 maxlen: 24 202.28.168.0/24 maxlen: 24 202.28.169.0/24 maxlen: 24 202.28.170.0/24 maxlen: 24 202.28.171.0/24 maxlen: 24 202.28.172.0/24 maxlen: 24 202.28.173.0/24 maxlen: 24 202.28.174.0/24 maxlen: 24 202.28.175.0/24 maxlen: 24 202.28.176.0/20 maxlen: 20 202.28.176.0/24 maxlen: 24 202.28.177.0/24 maxlen: 24 202.28.178.0/24 maxlen: 24 202.28.179.0/24 maxlen: 24 202.28.180.0/24 maxlen: 24 202.28.181.0/24 maxlen: 24 202.28.182.0/24 maxlen: 24 202.28.183.0/24 maxlen: 24 202.28.184.0/24 maxlen: 24 202.28.185.0/24 maxlen: 24 202.28.186.0/24 maxlen: 24 202.28.187.0/24 maxlen: 24 202.28.188.0/24 maxlen: 24 202.28.189.0/24 maxlen: 24 202.28.190.0/24 maxlen: 24 202.28.191.0/24 maxlen: 24 2001:3c8:1202::/48 maxlen: 48 2001:3c8:1606::/48 maxlen: 48 2001:3c8:2707::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:48 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a590-25bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:65:59:c1:00:cf:a1:7f:66:b1:2c:cf:70:bf: a3:df:72:c2:b6:e2:43:92:31:14:da:29:06:65:6a: a3:8a:ef:f6:aa:fb:1d:02:34:3a:cc:ed:ef:e9:71: 58:fa:7e:fd:94:2d:18:d3:6b:2e:03:1e:3c:7f:02: df:aa:a9:df:1f:63:58:cb:3d:33:47:00:75:c7:a6: d8:43:0d:f4:69:1c:b3:46:39:f0:69:30:38:ee:a8: c8:68:63:65:be:10:ab:7f:7d:1d:95:8a:d3:d4:d2: de:78:8f:53:73:ae:77:7b:9a:10:f6:b8:6f:05:9d: fb:f0:9a:a0:c7:ce:a4:4c:52:81:7d:25:73:04:ed: 05:48:9f:2a:86:25:6f:26:cd:03:33:92:21:dd:e6: 80:ba:67:e1:ca:fb:23:6d:0e:c4:10:98:6d:0c:68: ae:08:73:0f:f0:76:85:7b:29:03:13:d0:f9:5e:0f: 02:98:dc:40:8d:c3:ed:cf:e0:46:22:90:96:59:5d: 6a:b4:08:83:c3:5e:0b:f4:ed:e2:51:84:37:9c:d1: 62:44:3d:63:ca:a5:e1:79:80:2b:98:43:89:5c:33: 14:32:b1:28:b9:56:a1:97:96:68:e8:7b:e2:22:b7: 80:22:8a:87:ac:ed:24:4f:8c:15:6c:13:c8:c0:33: b9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:33:40:88:BA:72:CA:61:5C:96:33:05:E3:77:97:A7:F0:7C:56:DC X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C56AA228721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.128.0/18 IPv6: 2001:3c8:1202::/48 2001:3c8:1606::/48 2001:3c8:2707::/48 Signature Algorithm: sha256WithRSAEncryption 63:bc:d4:a2:ac:c6:2d:ad:0d:a9:10:72:cf:92:5f:82:a3:75: b6:66:e8:25:a0:01:47:6f:84:27:87:aa:47:95:1c:14:5c:01: 0e:18:e2:1d:05:18:db:6b:3d:19:6b:6f:df:69:3c:34:1a:59: 5b:45:cf:f3:80:f1:e7:c2:e1:71:7a:4f:fa:2c:a6:3b:93:83: 07:ce:1c:4c:3b:c2:f5:42:f3:0c:4e:b1:66:98:c1:21:b1:70: 53:47:2b:1b:6f:61:ff:ed:d7:f8:09:16:bb:ac:98:7f:ff:c7: 76:5b:b7:e8:62:5a:5b:98:67:d7:53:10:e6:02:a1:86:02:e0: dd:68:60:2c:bb:11:db:96:af:65:5b:3d:e6:7a:76:b6:7a:ef: 28:f3:7e:84:0d:84:32:f6:ff:b9:67:d7:12:19:6f:91:db:c6: 8d:b8:18:ba:fb:08:2c:05:f8:56:99:1c:2d:cf:b8:65:62:93: ee:f0:94:3c:c5:b8:d3:ad:a3:52:02:8e:b6:9c:1e:52:56:3e: 7f:f2:ee:65:23:ef:ae:d8:96:00:77:95:58:bb:eb:e0:c9:fe: 0b:6a:39:19:13:59:64:06:b8:a8:be:b6:ef:6f:2a:ef:a6:d9: 64:c0:5d:0e:b8:93:16:aa:f9:a8:2a:01:64:8f:f6:c3:29:49: ee:af:18:cb -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDQ4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU5MC0yNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WVZwQDPoX9msSzPcL+j33LCtuJDkjEU2ikGZWqjiu/2qvsdAjQ6zO3v6XFY +n79lC0Y02suAx48fwLfqqnfH2NYyz0zRwB1x6bYQw30aRyzRjnwaTA47qjIaGNl vhCrf30dlYrT1NLeeI9Tc653e5oQ9rhvBZ378Jqgx86kTFKBfSVzBO0FSJ8qhiVv Js0DM5Ih3eaAumfhyvsjbQ7EEJhtDGiuCHMP8HaFeykDE9D5Xg8CmNxAjcPtz+BG IpCWWV1qtAiDw14L9O3iUYQ3nNFiRD1jyqXheYArmEOJXDMUMrEouVahl5Zo6Hvi IreAIoqHrO0kT4wVbBPIwDO5AwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFNQzQIi6 csphXJYzBeN3l6fwfFbcMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQzU2QUEyMjg3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMAwEAgABMAYDBAbKHIAwIQQCAAIwGwMHACABA8gSAgMHACABA8gWBgMHACAB A8gnBzANBgkqhkiG9w0BAQsFAAOCAQEAY7zUoqzGLa0NqRByz5JfgqN1tmboJaAB R2+EJ4eqR5UcFFwBDhjiHQUY22s9GWtv32k8NBpZW0XP84Dx58LhcXpP+iymO5OD B84cTDvC9ULzDE6xZpjBIbFwU0crG29h/+3X+AkWu6yYf//Hdlu36GJaW5hn11MQ 5gKhhgLg3WhgLLsR25avZVs95np2tnrvKPN+hA2EMvb/uWfXEhlvkdvGjbgYuvsI LAX4VpkcLc+4ZWKT7vCUPMW4062jUgKOtpweUlY+f/LuZSPvrtiWAHeVWLvr4Mn+ C2o5GRNZZAa4qL62728q76bZZMBdDriTFqr5qCoBZI/2wylJ7q8Yyw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:02:30 2026 by rpki-client