This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ECF72566721311EFA9D7CA3AC4F9AE02.roa File: ECF72566721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: 1ds2HsS26IHlnEm5h83qcYlefWacNHHvPrx9YlP0jgE= Subject key identifier: 82:26:D3:47:77:27:2A:75:74:6E:06:FC:CA:F5:E1:81:CE:FF:8E:E3 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01B1 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ECF72566721311EFA9D7CA3AC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:15 +0000 ROA not before: Wed 31 Dec 2025 04:24:15 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 135616 IP address blocks: 202.28.64.0/24 maxlen: 24 202.28.66.0/24 maxlen: 24 202.28.67.0/24 maxlen: 24 2001:3c8:9006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:15 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a56f-7672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:47:e7:7a:b6:67:7a:b9:3f:29:24:c3:62: 52:71:26:ea:d0:8d:8e:9f:c5:43:9b:10:8f:eb:20: 1a:79:86:3f:bf:d5:9b:6b:b7:7d:2c:02:e1:6d:57: 9f:7d:c8:e8:3c:42:41:7e:72:77:48:0b:a4:24:6b: 1c:fd:b5:58:26:ca:6b:8c:60:55:d7:aa:06:44:31: 17:95:7a:0d:21:9d:af:98:9a:c2:ab:24:2b:9e:22: c9:c2:ea:eb:ba:85:63:5f:15:87:02:29:c7:79:ba: 9c:fa:fb:6a:23:7a:25:52:c7:43:be:44:bc:67:20: 16:86:96:59:99:67:d6:f6:4f:ce:1b:ee:c7:dc:00: c4:86:a6:14:ad:ca:3b:96:98:bb:1c:52:f7:e4:01: f6:08:74:5e:05:41:4d:bc:92:f8:bf:1b:bf:89:25: 15:4a:9a:51:94:38:3e:ae:3b:43:89:8b:d3:dc:f1: 11:64:23:1a:cc:11:af:41:f7:c6:d6:2c:bb:8f:47: b8:fa:2a:37:37:05:3d:e5:15:32:5b:d6:a0:59:6f: e4:cd:d2:56:e1:52:f6:32:f0:41:67:cf:f5:ea:4c: 9b:38:db:95:92:54:dd:52:3a:8f:e8:43:64:6f:32: e7:da:6d:ba:fd:dd:4d:1a:00:48:a4:6c:18:6d:a8: 9b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:26:D3:47:77:27:2A:75:74:6E:06:FC:CA:F5:E1:81:CE:FF:8E:E3 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ECF72566721311EFA9D7CA3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.64.0/24 202.28.66.0/23 IPv6: 2001:3c8:9006::/48 Signature Algorithm: sha256WithRSAEncryption 72:5e:a9:cc:63:de:ef:74:66:b5:9f:55:80:58:85:74:dd:bc: 7a:40:bc:a6:2d:d4:70:17:d3:0e:9e:b4:f8:b8:72:32:0f:49: e6:da:ff:3c:95:63:68:c8:16:3f:ff:dc:b7:7d:0c:d7:6f:1a: 02:62:63:5b:de:1b:a8:33:49:0c:4a:8f:2f:25:8a:ce:e3:cc: 96:dc:6c:e4:aa:39:f2:1f:81:40:d4:85:cb:50:34:e5:96:6b: f6:fc:a7:ce:99:01:64:4d:0a:2b:a0:b2:b2:57:49:af:00:b7: 31:52:cc:9b:c1:65:f0:cd:40:9e:45:1c:0c:c9:25:07:9f:d9: 1b:52:2f:63:d0:6e:4e:4a:79:66:d7:fc:80:78:d9:99:fe:51: 3d:f7:4f:70:55:65:a0:0c:f4:ae:f5:37:9a:59:d9:12:9a:9a: c5:46:c4:64:5e:07:2b:de:6c:6a:8a:92:54:43:ed:4f:57:08: 0f:fb:45:3d:2a:d7:f6:ff:69:7c:79:e7:7d:de:f1:c6:6e:20: b9:7d:d7:00:e2:fb:2e:da:63:91:7f:9d:a7:f2:2d:7a:a5:06: 6b:b8:b9:e6:02:33:df:35:56:7e:43:59:08:be:f4:5d:d7:9e: 03:e6:3a:02:6e:92:4a:1c:bf:c6:87:ec:b7:b0:29:ed:58:22: 32:41:5e:57 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDE1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU2Zi03NjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR5H53q2Z3q5Pykkw2JScSbq0I2On8VDmxCP6yAaeYY/v9Wba7d9LALhbVef fcjoPEJBfnJ3SAukJGsc/bVYJsprjGBV16oGRDEXlXoNIZ2vmJrCqyQrniLJwurr uoVjXxWHAinHebqc+vtqI3olUsdDvkS8ZyAWhpZZmWfW9k/OG+7H3ADEhqYUrco7 lpi7HFL35AH2CHReBUFNvJL4vxu/iSUVSppRlDg+rjtDiYvT3PERZCMazBGvQffG 1iy7j0e4+io3NwU95RUyW9agWW/kzdJW4VL2MvBBZ8/16kybONuVklTdUjqP6ENk bzLn2m26/d1NGgBIpGwYbaibaQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFIIm00d3 Jyp1dG4G/Mr14YHO/47jMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRUNGNzI1NjY3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBADKHEADBAHKHEIwDwQCAAIwCQMHACABA8iQBjANBgkqhkiG 9w0BAQsFAAOCAQEAcl6pzGPe73RmtZ9VgFiFdN28ekC8pi3UcBfTDp60+LhyMg9J 5tr/PJVjaMgWP//ct30M128aAmJjW94bqDNJDEqPLyWKzuPMltxs5Ko58h+BQNSF y1A05ZZr9vynzpkBZE0KK6CysldJrwC3MVLMm8Fl8M1AnkUcDMklB5/ZG1IvY9Bu Tkp5Ztf8gHjZmf5RPfdPcFVloAz0rvU3mlnZEpqaxUbEZF4HK95saoqSVEPtT1cI D/tFPSrX9v9pfHnnfd7xxm4guX3XAOL7LtpjkX+dp/IteqUGa7i55gIz3zVWfkNZ CL70XdeeA+Y6Am6SShy/xofst7Ap7VgiMkFeVw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:14:54 2026 by rpki-client