This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE4C9E82721311EFA9D7CA3AC4F9AE02.roa File: EE4C9E82721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: bVTzTADfhMTyy/FO133jW73qC2H9iNWPjSK8lBjATZw= Subject key identifier: 58:0E:91:EE:DE:96:13:C2:37:93:C1:7D:03:BA:4B:65:5A:79:E3:9F Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01B8 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE4C9E82721311EFA9D7CA3AC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:22 +0000 ROA not before: Wed 31 Dec 2025 04:24:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137850 IP address blocks: 202.28.44.0/24 maxlen: 24 202.28.45.0/24 maxlen: 24 202.28.46.0/24 maxlen: 24 202.28.47.0/24 maxlen: 24 2001:3c8:5505::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a576-5fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:a2:28:22:dd:2a:b4:6f:3c:14:9e:e0:b5: 86:58:58:ae:bb:7d:a7:bd:83:64:b5:d7:6e:ee:e6: 44:44:20:ed:55:aa:f5:45:a1:9b:93:02:10:86:29: 40:ef:b9:21:44:8f:9a:ac:3d:10:a0:46:27:ac:cd: 10:54:bd:f5:74:4e:e0:dc:fb:dd:7c:07:34:76:ca: 0c:5e:bf:b6:f4:29:62:fd:9f:ab:77:a7:95:b1:fb: 49:b7:f5:fd:39:bd:91:c7:e6:c3:a7:52:b2:91:9f: be:a9:52:88:cd:7f:df:3f:77:ed:47:45:99:12:6e: ae:ec:5d:c7:7e:25:4b:05:15:d8:96:ae:ad:a4:a6: 08:a1:72:7a:1e:b8:59:c7:e5:a5:55:da:6c:62:4f: 57:cd:d5:bd:94:2a:70:58:bb:0e:aa:fc:e0:c0:b5: b5:94:87:df:c7:0e:20:62:ea:7e:d0:3f:cc:b3:8d: 81:60:bf:99:6d:d3:3c:ef:61:4d:66:e3:94:26:9d: da:36:58:a0:3b:ee:a8:79:98:65:cf:9c:00:35:00: 66:60:9d:9c:7d:e5:8e:ee:01:89:b2:8d:ce:16:9b: 00:0e:31:14:1f:eb:09:fc:c1:34:3e:ca:0f:45:90: 54:5e:4f:cb:26:7d:42:89:77:cb:25:1a:9b:a0:da: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0E:91:EE:DE:96:13:C2:37:93:C1:7D:03:BA:4B:65:5A:79:E3:9F X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EE4C9E82721311EFA9D7CA3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.44.0/22 IPv6: 2001:3c8:5505::/48 Signature Algorithm: sha256WithRSAEncryption 51:62:9e:56:13:61:25:cf:cc:ad:d1:08:3e:ce:ad:d1:21:f4: 71:47:78:8a:de:f7:73:50:3c:36:7c:cb:f9:9c:e9:36:b7:5d: 05:3d:dc:74:62:e5:bc:52:c0:ad:52:5d:c3:fa:0b:9a:33:95: 33:cc:8c:7d:f7:d9:3f:f8:d2:65:3f:b6:d9:e9:e0:26:03:f0: 32:a1:07:d0:25:04:d6:e0:70:2a:70:fc:4c:60:7f:e7:e7:b5: d5:34:45:0e:7d:96:aa:d0:75:28:a5:42:30:92:48:42:d3:63: 70:9d:52:f2:79:b2:47:2b:f4:68:c0:5b:fe:11:11:31:df:2e: 49:e8:f5:a6:03:49:3c:ed:24:c4:da:58:69:d3:3d:6b:d9:a3: 9e:0d:31:b6:ea:8f:d8:1e:bc:ff:f7:bd:c9:95:c6:00:16:05: 4c:b3:a6:d6:54:f2:87:b9:95:2b:19:f9:cb:54:57:77:f8:be: 30:cb:52:11:dd:fb:ca:d1:40:08:91:4e:27:56:b4:80:84:19: d0:8a:f3:7d:6c:b3:92:2f:02:d3:a7:8d:5d:eb:f8:2b:09:97: c1:0d:d9:9c:0e:53:f3:59:37:6f:76:dd:50:8b:26:67:fc:87: 72:0c:5e:41:68:6b:40:9b:b5:20:6c:c1:6f:0a:50:ab:3c:e0: 0f:ac:81:4b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU3Ni01ZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwayiKCLdKrRvPBSe4LWGWFiuu32nvYNktddu7uZERCDtVar1RaGbkwIQhilA 77khRI+arD0QoEYnrM0QVL31dE7g3PvdfAc0dsoMXr+29Cli/Z+rd6eVsftJt/X9 Ob2Rx+bDp1KykZ++qVKIzX/fP3ftR0WZEm6u7F3HfiVLBRXYlq6tpKYIoXJ6HrhZ x+WlVdpsYk9XzdW9lCpwWLsOqvzgwLW1lIffxw4gYup+0D/Ms42BYL+ZbdM872FN ZuOUJp3aNligO+6oeZhlz5wANQBmYJ2cfeWO7gGJso3OFpsADjEUH+sJ/ME0PsoP RZBUXk/LJn1CiXfLJRqboNp/mwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFgOke7e lhPCN5PBfQO6S2VaeeOfMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRUU0QzlFODI3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBALKHCwwDwQCAAIwCQMHACABA8hVBTANBgkqhkiG9w0BAQsF AAOCAQEAUWKeVhNhJc/MrdEIPs6t0SH0cUd4it73c1A8NnzL+ZzpNrddBT3cdGLl vFLArVJdw/oLmjOVM8yMfffZP/jSZT+22engJgPwMqEH0CUE1uBwKnD8TGB/5+e1 1TRFDn2WqtB1KKVCMJJIQtNjcJ1S8nmyRyv0aMBb/hERMd8uSej1pgNJPO0kxNpY adM9a9mjng0xtuqP2B68//e9yZXGABYFTLOm1lTyh7mVKxn5y1RXd/i+MMtSEd37 ytFACJFOJ1a0gIQZ0IrzfWyzki8C06eNXev4KwmXwQ3ZnA5T81k3b3bdUIsmZ/yH cgxeQWhrQJu1IGzBbwpQqzzgD6yBSw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:51 2026 by rpki-client