This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EF9FF2AC721311EFA9D7CA3AC4F9AE02.roa File: EF9FF2AC721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: 7Zw6/PlaGLXK7VJdc3ylDoLi6t0x448hKBq2hqCcLv4= Subject key identifier: 51:F0:5B:91:24:2F:ED:10:9F:72:72:CB:5C:C4:5E:18:ED:AB:91:E8 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01BA Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EF9FF2AC721311EFA9D7CA3AC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:24 +0000 ROA not before: Wed 31 Dec 2025 04:24:24 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138547 IP address blocks: 202.29.20.0/24 maxlen: 24 2001:3c8:d109::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:24 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a578-ba8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:08:14:db:c2:be:ca:cd:ed:32:3f:a3:97: f8:41:e1:11:7b:05:e9:4c:e4:fa:35:4f:70:85:91: 6d:07:ef:3c:c4:c7:9b:a3:fb:19:ea:ee:c0:4e:df: 89:2a:da:66:6d:97:aa:da:64:93:af:13:1a:7a:27: f6:be:d4:af:0e:ad:aa:c7:28:5f:75:39:a1:34:df: 22:fd:7b:fe:6f:90:84:c7:f5:11:d8:a4:a0:04:d4: 37:cb:83:9c:02:0e:4b:ef:aa:70:4a:7e:d3:48:33: 8c:18:d3:66:d5:e2:64:9a:2c:23:65:c7:0c:94:be: 36:76:01:a1:69:1d:a9:91:be:bd:35:5e:c6:37:19: c6:b4:ae:a1:0f:cf:66:29:72:34:ce:db:a6:d4:5b: 09:cf:75:da:dd:1a:51:8c:2c:02:27:aa:f8:f2:9b: cd:18:0f:17:53:78:a7:fb:1e:22:f0:b6:e9:8c:93: 49:47:e0:7e:7d:ec:19:2e:52:73:8c:6a:ad:dd:ef: 51:65:6f:be:9d:bb:6e:1c:51:28:db:8e:f2:7c:3d: 7f:2f:ab:ed:c2:f0:bf:1b:8e:03:28:89:40:67:38: 9f:55:80:0e:df:90:9a:7e:80:b7:42:15:fb:f2:f3: 19:e4:43:7a:44:f5:ef:41:82:7c:0b:b7:dd:ac:e7: ac:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F0:5B:91:24:2F:ED:10:9F:72:72:CB:5C:C4:5E:18:ED:AB:91:E8 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EF9FF2AC721311EFA9D7CA3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.20.0/24 IPv6: 2001:3c8:d109::/48 Signature Algorithm: sha256WithRSAEncryption 5c:df:84:20:29:96:01:13:0c:9b:26:7b:ee:92:5e:4d:4d:c7: a8:b7:33:08:8c:2f:fe:6a:c5:e1:4d:fb:51:ed:69:85:5d:53: e4:bc:0f:9d:7c:27:87:0a:ee:60:c6:31:76:a8:46:d2:b7:fb: bf:44:53:e8:dc:e4:bb:71:18:5a:4c:0a:4b:4c:c9:29:d5:4a: 12:b3:63:54:26:e1:41:b9:5a:f4:52:0d:14:ee:b9:e6:33:a8: 77:1f:1b:02:ed:f9:6c:e4:cd:b7:6a:be:4d:60:8c:3c:41:47: d4:29:a5:8b:e7:1d:87:9d:15:70:88:2d:a4:d0:bc:71:ae:2a: d3:06:1a:30:09:b6:fe:c1:32:54:d5:ed:cd:a4:ac:60:bb:12: 03:7a:1a:71:46:24:9e:a3:53:69:20:21:c7:0f:3a:de:cf:d4: ae:8b:7d:8d:dc:f8:1f:1b:4e:c1:c9:21:9d:2a:cf:53:69:13: 5f:72:23:f6:9f:fd:45:94:20:8b:dc:3f:14:7e:a8:a3:7c:98: 34:25:42:6e:29:1d:da:2c:ac:df:2c:d9:42:69:83:12:92:f8: 35:ae:2a:61:b3:12:e4:68:2a:f3:5a:cd:34:f1:dd:06:cd:14: 35:c2:88:13:8f:99:65:a0:d9:66:b5:c6:ef:9d:bd:16:0c:28: 76:30:d4:b6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDI0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU3OC1iYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9oIFNvCvsrN7TI/o5f4QeERewXpTOT6NU9whZFtB+88xMebo/sZ6u7ATt+J KtpmbZeq2mSTrxMaeif2vtSvDq2qxyhfdTmhNN8i/Xv+b5CEx/UR2KSgBNQ3y4Oc Ag5L76pwSn7TSDOMGNNm1eJkmiwjZccMlL42dgGhaR2pkb69NV7GNxnGtK6hD89m KXI0ztum1FsJz3Xa3RpRjCwCJ6r48pvNGA8XU3in+x4i8LbpjJNJR+B+fewZLlJz jGqt3e9RZW++nbtuHFEo247yfD1/L6vtwvC/G44DKIlAZzifVYAO35CafoC3QhX7 8vMZ5EN6RPXvQYJ8C7fdrOes4QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFHwW5Ek L+0Qn3Jyy1zEXhjtq5HoMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRUY5RkYyQUM3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKHRQwDwQCAAIwCQMHACABA8jRCTANBgkqhkiG9w0BAQsF AAOCAQEAXN+EICmWARMMmyZ77pJeTU3HqLczCIwv/mrF4U37Ue1phV1T5LwPnXwn hwruYMYxdqhG0rf7v0RT6Nzku3EYWkwKS0zJKdVKErNjVCbhQbla9FINFO655jOo dx8bAu35bOTNt2q+TWCMPEFH1Cmli+cdh50VcIgtpNC8ca4q0wYaMAm2/sEyVNXt zaSsYLsSA3oacUYknqNTaSAhxw863s/Urot9jdz4HxtOwckhnSrPU2kTX3Ij9p/9 RZQgi9w/FH6oo3yYNCVCbikd2iys3yzZQmmDEpL4Na4qYbMS5Ggq81rNNPHdBs0U NcKIE4+ZZaDZZrXG7529FgwodjDUtg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:10 2026 by rpki-client