This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa File: F0ED627A721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: CXh/17gzmBQIO6ckWAjU+U12jAQ9k4ksZQorPwXfozs= Subject key identifier: 62:6D:A1:05:FF:06:DC:7F:F6:0E:2C:22:80:F9:D8:3E:B9:C2:90:1A Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01BF Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:28 +0000 ROA not before: Wed 31 Dec 2025 04:24:28 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141714 IP address blocks: 202.29.8.0/24 maxlen: 24 202.29.9.0/24 maxlen: 24 202.29.10.0/24 maxlen: 24 202.29.11.0/24 maxlen: 24 2001:3c8:2808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:28 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a57c-4f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:37:5a:4c:0c:49:e5:e7:55:4b:28:07:dd: 90:88:3a:8e:e1:76:0c:6d:a1:38:6f:17:24:aa:ec: 4b:98:70:42:15:2a:13:2e:6d:60:29:9d:32:25:55: 3e:f9:3e:06:17:51:55:16:f0:68:30:25:18:28:bd: 7b:d4:1e:8a:86:3b:46:bf:96:3b:79:7a:8a:12:13: 02:ce:3f:22:dd:29:41:cd:c6:c7:fd:9a:d0:f9:9b: f7:6d:08:43:2a:5d:89:d5:43:b7:f9:34:77:d8:98: b9:cb:47:f6:45:a7:42:45:33:70:67:aa:48:26:35: 46:8a:3d:a2:cb:58:94:28:21:ea:8f:a8:4c:76:2b: 10:6e:1e:e8:55:f1:ae:ec:d5:06:e0:30:39:de:78: cd:c1:8c:f1:5c:55:7b:fb:7c:9d:d4:a4:53:53:07: 2d:55:78:02:8b:de:ca:f8:ba:15:98:65:47:92:a1: 20:92:81:20:b3:ec:71:ab:f9:5e:55:08:9c:dd:65: 02:4f:8b:36:e2:30:6b:7b:81:5b:87:15:70:b6:da: 80:9c:d1:3c:49:f4:46:14:8d:8e:45:d0:e0:71:68: 5b:03:7d:81:2d:e9:30:dd:1e:3e:1f:2d:1b:bf:f4: 80:e7:b5:13:b2:e1:80:83:51:57:8e:3b:13:1b:af: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6D:A1:05:FF:06:DC:7F:F6:0E:2C:22:80:F9:D8:3E:B9:C2:90:1A X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F0ED627A721311EFA9D7CA3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.8.0/22 IPv6: 2001:3c8:2808::/48 Signature Algorithm: sha256WithRSAEncryption 62:11:7e:ac:0c:ee:67:c2:24:6a:a4:e7:f9:aa:9d:cd:26:2d: aa:40:90:f7:87:8e:39:76:57:f4:a1:cb:97:c7:17:30:cf:79: 34:75:71:02:1a:e6:86:17:d1:af:51:d8:c2:93:ab:92:f2:34: 06:ac:0f:36:11:4e:42:a1:6c:22:d1:82:b3:c1:8c:36:3b:1c: 85:62:b6:db:c8:aa:3c:75:81:f1:a1:da:f4:b6:38:9b:c4:ab: bf:eb:6c:55:87:28:fe:3c:64:53:b0:83:63:63:f1:69:1c:6f: 13:28:15:91:df:6b:ca:f8:91:2e:1e:94:ca:a8:f7:6f:4d:f4: 1f:5e:cf:44:9e:89:82:df:67:6f:87:39:77:d7:ec:24:d0:52: 9e:5e:50:50:23:e7:26:4b:b1:28:b9:bc:76:af:75:64:2b:27: 41:27:13:8a:94:be:1f:bf:7c:a2:39:b7:90:4a:47:89:79:6e: 51:cb:a3:45:fd:2b:32:59:97:0b:74:92:2c:21:e4:a0:5b:51: 6c:f0:eb:66:25:71:06:27:59:8f:d0:37:a4:fe:97:a7:a3:e3: 77:de:e4:c3:ac:97:a4:66:d5:86:f8:0c:1c:ce:cc:86:6f:02: 35:a8:ce:21:b8:a5:9c:a2:6c:21:21:e5:03:d0:72:1d:1a:4e: 6d:eb:01:59 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDI4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU3Yy00ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7w3WkwMSeXnVUsoB92QiDqO4XYMbaE4bxckquxLmHBCFSoTLm1gKZ0yJVU+ +T4GF1FVFvBoMCUYKL171B6KhjtGv5Y7eXqKEhMCzj8i3SlBzcbH/ZrQ+Zv3bQhD Kl2J1UO3+TR32Ji5y0f2RadCRTNwZ6pIJjVGij2iy1iUKCHqj6hMdisQbh7oVfGu 7NUG4DA53njNwYzxXFV7+3yd1KRTUwctVXgCi97K+LoVmGVHkqEgkoEgs+xxq/le VQic3WUCT4s24jBre4FbhxVwttqAnNE8SfRGFI2ORdDgcWhbA32BLekw3R4+Hy0b v/SA57UTsuGAg1FXjjsTG68SewIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGJtoQX/ Btx/9g4sIoD52D65wpAaMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjBFRDYyN0E3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBALKHQgwDwQCAAIwCQMHACABA8goCDANBgkqhkiG9w0BAQsF AAOCAQEAYhF+rAzuZ8IkaqTn+aqdzSYtqkCQ94eOOXZX9KHLl8cXMM95NHVxAhrm hhfRr1HYwpOrkvI0BqwPNhFOQqFsItGCs8GMNjschWK228iqPHWB8aHa9LY4m8Sr v+tsVYco/jxkU7CDY2PxaRxvEygVkd9ryviRLh6Uyqj3b030H17PRJ6Jgt9nb4c5 d9fsJNBSnl5QUCPnJkuxKLm8dq91ZCsnQScTipS+H798ojm3kEpHiXluUcujRf0r MlmXC3SSLCHkoFtRbPDrZiVxBidZj9A3pP6Xp6Pjd97kw6yXpGbVhvgMHM7Mhm8C NajOIbilnKJsISHlA9ByHRpObesBWQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:13:56 2026 by rpki-client