This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F000862E721A11EFBDE87567C4F9AE02.roa File: F000862E721A11EFBDE87567C4F9AE02.roa (raw, json) Hash identifier: sQZHJbtmkuWVWgkCHMJ+jIRrSPcp39jXEUnxOnsAbko= Subject key identifier: 8B:54:35:F3:29:EB:FA:C7:EF:98:4A:D2:6A:A1:96:1B:7A:B8:7B:15 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01D6 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F000862E721A11EFBDE87567C4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:50 +0000 ROA not before: Wed 31 Dec 2025 04:24:50 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 55545 IP address blocks: 202.28.40.0/24 maxlen: 24 202.28.41.0/24 maxlen: 24 202.28.42.0/24 maxlen: 24 202.28.43.0/24 maxlen: 24 2001:3c8:c301::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:50 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a592-c01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bd:78:f8:ac:f4:10:12:c1:2d:69:72:ef:44: 68:a2:4f:e2:70:e4:b5:56:a3:32:8a:04:82:c1:b5: e2:d5:df:c2:4c:1f:79:1f:ec:da:a9:90:75:ec:9f: 16:f4:6b:e0:5f:bb:7c:c5:1a:bf:22:d8:b0:52:59: f6:00:6a:9f:54:0b:3d:35:8c:ee:1e:f6:cf:3e:fc: 58:d9:d1:62:5c:44:89:e3:37:e3:bd:fe:eb:69:e6: db:cd:3d:a8:ac:c5:2f:32:83:5a:cd:67:9d:a2:26: 74:63:f2:24:7f:3d:f5:8e:95:e2:31:d7:c5:0f:6c: d5:69:ca:76:f2:25:2c:10:76:e6:42:50:0b:61:58: ff:a0:43:69:15:b9:51:3a:ac:5e:ce:e7:ca:69:88: 6b:86:15:18:bb:49:d7:05:19:da:a1:ff:72:c1:8b: a1:94:60:61:fa:de:8f:86:43:2e:b5:dd:d3:53:56: b6:d8:a4:d3:1d:5a:27:cd:b5:9b:00:72:1e:00:80: e8:f7:aa:d5:83:26:0f:50:fe:03:6c:a7:c8:db:ee: e4:cc:a7:15:69:10:af:e5:87:a1:17:33:ce:8d:4f: 54:10:bb:99:4b:cf:de:82:bc:b5:27:ec:22:1b:56: 14:46:36:72:20:2f:c0:5a:ae:f0:f8:4b:4b:63:65: 85:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:54:35:F3:29:EB:FA:C7:EF:98:4A:D2:6A:A1:96:1B:7A:B8:7B:15 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F000862E721A11EFBDE87567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.40.0/22 IPv6: 2001:3c8:c301::/48 Signature Algorithm: sha256WithRSAEncryption 58:d1:8d:99:dc:9d:4e:b6:cb:c1:9f:75:06:e9:e4:b1:32:aa: 1b:11:20:54:cb:89:49:f7:e3:e5:8a:75:8a:fe:80:8d:fd:c4: 9d:b9:25:b1:1c:0f:ec:e3:26:1f:e1:34:64:69:20:bf:ea:cd: a6:17:9d:06:f9:26:e9:d4:73:c7:c4:0c:cb:d7:cb:9f:e6:63: c8:37:7c:ba:b4:8f:21:4c:88:d9:07:cc:65:2e:24:d6:a6:0c: 8c:be:6c:4d:d1:54:f3:b6:60:d8:72:22:66:ea:7b:a5:2a:f8: c5:63:ea:44:a0:5a:49:04:82:fe:2f:27:4b:f6:76:45:59:a6: cd:4b:f2:bc:7d:7c:31:0d:e1:a0:86:12:3f:49:62:bc:0e:b2: 47:0c:21:b2:6b:5e:71:c3:22:df:10:74:4d:b1:95:43:ec:f3: 3b:3e:33:02:86:6f:f0:5e:a2:8b:a3:c7:8a:6a:b5:9f:64:73: 9c:fd:4d:63:92:4b:7a:b1:18:ec:70:62:06:e7:a5:9e:3e:33: cf:ed:32:f1:c5:03:34:a4:a7:f7:49:e6:61:14:89:44:38:76: f0:04:33:a4:d4:a5:eb:cb:68:af:59:ef:fc:f0:4d:ed:5e:b9: da:2a:19:8c:69:c7:56:fd:f6:5f:fd:b0:76:62:ae:00:ba:24: 48:2d:87:95 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDUwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU5Mi1jMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4714+Kz0EBLBLWly70Rook/icOS1VqMyigSCwbXi1d/CTB95H+zaqZB17J8W 9GvgX7t8xRq/ItiwUln2AGqfVAs9NYzuHvbPPvxY2dFiXESJ4zfjvf7raebbzT2o rMUvMoNazWedoiZ0Y/Ikfz31jpXiMdfFD2zVacp28iUsEHbmQlALYVj/oENpFblR OqxezufKaYhrhhUYu0nXBRnaof9ywYuhlGBh+t6PhkMutd3TU1a22KTTHVonzbWb AHIeAIDo96rVgyYPUP4DbKfI2+7kzKcVaRCv5YehFzPOjU9UELuZS8/egry1J+wi G1YURjZyIC/AWq7w+EtLY2WFYwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFItUNfMp 6/rH75hK0mqhlht6uHsVMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjAwMDg2MkU3 MjFBMTFFRkJERTg3NTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBALKHCgwDwQCAAIwCQMHACABA8jDATANBgkqhkiG9w0BAQsF AAOCAQEAWNGNmdydTrbLwZ91BunksTKqGxEgVMuJSffj5Yp1iv6Ajf3EnbklsRwP 7OMmH+E0ZGkgv+rNphedBvkm6dRzx8QMy9fLn+ZjyDd8urSPIUyI2QfMZS4k1qYM jL5sTdFU87Zg2HIiZup7pSr4xWPqRKBaSQSC/i8nS/Z2RVmmzUvyvH18MQ3hoIYS P0livA6yRwwhsmteccMi3xB0TbGVQ+zzOz4zAoZv8F6ii6PHimq1n2RznP1NY5JL erEY7HBiBuelnj4zz+0y8cUDNKSn90nmYRSJRDh28AQzpNSl68tor1nv/PBN7V65 2ioZjGnHVv32X/2wdmKuALokSC2HlQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:29:58 2026 by rpki-client