This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa File: F4BF2B68721311EFA9D7CA3AC4F9AE02.roa (raw, json) Hash identifier: SR5IpbrWZdxO/V1eekY9sFyHEhD8qqQEDbGI39WDo6o= Subject key identifier: 9B:58:5E:36:88:F2:55:C7:2C:7C:0B:3F:27:52:52:48:08:03:95:75 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01D0 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:44 +0000 ROA not before: Wed 31 Dec 2025 04:24:44 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38589 IP address blocks: 202.28.16.0/24 maxlen: 24 202.29.108.0/24 maxlen: 24 202.29.109.0/24 maxlen: 24 2001:3c8:1601::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:44 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a58c-4971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:ed:cd:eb:59:16:aa:e7:aa:b7:83:48:6d: 1a:6b:60:6d:ea:c3:c7:83:8e:6f:a1:f8:e7:00:96: 7e:df:6f:18:ee:17:9b:06:1b:22:f9:de:a7:19:f7: 00:c1:72:76:4d:ce:15:2f:cd:af:b8:aa:6a:1b:d1: fd:46:97:26:e3:71:5c:6d:82:2b:81:af:99:40:61: e2:6f:9d:93:d5:7f:67:c6:d5:b1:6f:35:d3:62:b5: ee:8f:0a:0d:81:79:2e:d8:08:78:5f:c0:ab:cc:b0: dc:0b:5b:3d:19:32:65:9a:41:e1:20:d5:2e:8f:b6: 6e:39:e9:ac:7e:92:4c:fd:64:e9:6a:a6:bf:d1:56: 5c:19:b1:73:20:3f:8b:82:10:9e:ce:f8:ea:2f:e1: 0a:d3:e6:d3:d0:55:2c:17:f4:18:db:ff:f9:26:cf: c2:d7:6c:70:65:3d:ee:0a:d7:48:95:8d:1a:21:6d: 6c:e8:2d:2e:c3:5c:e5:63:df:cc:fc:03:be:e5:c6: d3:46:c6:3a:34:51:c3:c0:2a:7e:59:aa:ab:9c:96: 9f:34:0f:d3:1e:7d:94:61:80:da:ac:19:bc:8c:4c: 46:fb:af:b1:72:e3:3a:97:6e:2e:cf:fb:47:98:88: f7:fc:32:b9:e4:39:6b:1a:e6:4f:65:57:4a:8d:10: 38:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:58:5E:36:88:F2:55:C7:2C:7C:0B:3F:27:52:52:48:08:03:95:75 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F4BF2B68721311EFA9D7CA3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.16.0/24 202.29.108.0/23 IPv6: 2001:3c8:1601::/48 Signature Algorithm: sha256WithRSAEncryption 66:97:31:89:ba:59:15:92:61:4d:42:6c:86:23:dd:55:0f:45: 4e:04:e2:c7:de:e3:49:1d:d5:b6:66:72:1b:8f:5a:80:39:3c: a8:f5:47:07:87:a4:cb:57:e8:fa:24:ee:8f:02:da:c9:d4:67: 5d:d8:d7:06:cd:46:c2:9c:cd:38:60:ef:26:64:a2:68:e8:66: 8b:b5:1c:5b:4c:40:8f:17:e7:78:87:cf:fa:68:86:5e:79:10: 0f:a0:23:f8:8f:41:43:84:ed:85:fd:f7:2f:0c:02:98:70:b1: dd:87:cf:ea:da:e7:18:ef:cd:0d:16:26:a3:63:0a:f7:38:1c: 8a:d4:f7:f4:7d:03:d6:97:b2:c4:7f:17:22:e8:92:eb:d0:2e: ed:b3:5c:55:86:96:38:38:c7:a3:0a:d0:c5:e5:58:3d:e6:25: 4f:1d:ab:7c:a6:d5:cc:c8:c7:50:2d:bd:fb:aa:ee:77:de:97: 4c:c1:01:5c:20:2f:2a:7f:56:97:d5:04:e7:c8:76:f2:b9:86: e2:cb:02:d0:b0:eb:8a:b8:ad:f1:16:7f:fe:7d:cb:95:be:d3: 5c:39:d1:25:ad:6d:9b:92:13:89:b8:4d:ba:71:5d:99:f6:73: 38:90:ac:a5:07:09:f1:5f:fc:42:ef:68:4f:63:a3:97:05:62: 33:2d:f3:03 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDQ0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU4Yy00OTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8btzetZFqrnqreDSG0aa2Bt6sPHg45vofjnAJZ+328Y7hebBhsi+d6nGfcA wXJ2Tc4VL82vuKpqG9H9Rpcm43FcbYIrga+ZQGHib52T1X9nxtWxbzXTYrXujwoN gXku2Ah4X8CrzLDcC1s9GTJlmkHhINUuj7ZuOemsfpJM/WTpaqa/0VZcGbFzID+L ghCezvjqL+EK0+bT0FUsF/QY2//5Js/C12xwZT3uCtdIlY0aIW1s6C0uw1zlY9/M /AO+5cbTRsY6NFHDwCp+WaqrnJafNA/THn2UYYDarBm8jExG+6+xcuM6l24uz/tH mIj3/DK55DlrGuZPZVdKjRA4CwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJtYXjaI 8lXHLHwLPydSUkgIA5V1MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjRCRjJCNjg3 MjEzMTFFRkE5RDdDQTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBADKHBADBAHKHWwwDwQCAAIwCQMHACABA8gWATANBgkqhkiG 9w0BAQsFAAOCAQEAZpcxibpZFZJhTUJshiPdVQ9FTgTix97jSR3VtmZyG49agDk8 qPVHB4eky1fo+iTujwLaydRnXdjXBs1GwpzNOGDvJmSiaOhmi7UcW0xAjxfneIfP +miGXnkQD6Aj+I9BQ4Tthf33LwwCmHCx3YfP6trnGO/NDRYmo2MK9zgcitT39H0D 1peyxH8XIuiS69Au7bNcVYaWODjHowrQxeVYPeYlTx2rfKbVzMjHUC29+6rud96X TMEBXCAvKn9Wl9UE58h28rmG4ssC0LDririt8RZ//n3Llb7TXDnRJa1tm5ITibhN unFdmfZzOJCspQcJ8V/8Qu9oT2OjlwViMy3zAw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:14:49 2026 by rpki-client