This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa File: F73A83F4721511EFA7D82D3EC4F9AE02.roa (raw, json) Hash identifier: oSrcYXzJ6J/xZIiwXuHMPjG803ndX6eKWWLsGzphXuk= Subject key identifier: 2B:CC:D5:4E:72:16:5E:E8:BD:3E:BA:03:A8:0F:8C:26:A2:EC:E3:0A Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01D8 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:52 +0000 ROA not before: Wed 31 Dec 2025 04:24:52 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9464 IP address blocks: 202.29.144.0/21 maxlen: 21 2001:3c8:9007::/48 maxlen: 48 2001:3c8:9009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:52 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a593-eca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8c:44:90:ea:fb:14:ba:e5:a0:1d:18:50:2d: 21:05:dc:69:ec:d4:3e:31:60:d2:ae:7c:86:11:60: c5:a6:3c:80:80:f5:e6:fc:fc:e5:2e:a9:f4:ac:f6: 0b:51:b5:c5:cb:76:17:c5:eb:b6:7a:10:cd:ac:95: 7b:71:4f:47:ea:40:e1:a2:66:bc:b1:4f:e1:2a:39: c0:f9:4e:5c:08:d9:32:38:eb:c9:44:7a:b9:1c:84: 8c:40:c5:5b:0e:4a:f0:e7:c9:d7:c8:9f:30:93:bf: 3c:2d:62:6d:11:d3:68:2b:91:d5:2d:19:12:74:26: ef:ec:6c:33:85:c6:5c:3e:c2:0c:54:94:f2:12:0e: e8:dc:15:e0:7d:0d:7c:28:a5:b1:7d:80:70:51:a2: f1:20:9f:ea:d3:00:06:bf:73:65:41:03:c8:69:65: a1:47:77:42:20:ce:fc:1b:bd:03:35:e6:92:32:2f: fb:77:17:fb:09:ca:db:3c:48:11:ff:b9:8f:bb:18: 88:93:ab:33:3a:1c:7f:7c:0e:23:27:7b:45:ab:62: 38:2b:63:06:d0:7c:f1:fc:20:08:80:4b:aa:ea:a9: 8d:63:de:02:ac:d6:03:79:91:19:f8:59:e4:3e:1c: d5:09:18:0f:1f:ce:77:ba:a6:75:2d:97:bd:a5:87: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CC:D5:4E:72:16:5E:E8:BD:3E:BA:03:A8:0F:8C:26:A2:EC:E3:0A X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F73A83F4721511EFA7D82D3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.144.0/21 IPv6: 2001:3c8:9007::/48 2001:3c8:9009::/48 Signature Algorithm: sha256WithRSAEncryption 46:66:5f:f5:c5:4e:59:f5:a4:de:9f:33:4b:bf:81:7b:21:22: ef:cf:35:00:96:c3:95:a9:32:f2:c1:2f:b2:18:0f:b0:c8:ce: 83:59:e4:b1:2a:f2:61:5d:55:a3:61:45:21:3f:21:7b:de:7f: c1:ac:4a:4a:26:6d:3a:24:26:d2:20:4c:2e:34:60:af:c0:8d: 3b:2a:d8:e5:b1:8a:4b:36:2d:e0:d2:ba:ee:74:f6:65:05:dc: d9:f7:ed:4f:0a:36:34:18:69:2c:f1:63:db:4a:89:67:6c:dc: e0:2c:d7:77:fe:02:a9:25:0a:69:7b:60:a2:f8:20:f5:bc:83: 2d:e7:fd:1a:df:e2:3c:31:00:5d:37:ce:25:7e:18:a9:da:9b: f3:f0:02:e8:b9:8f:a4:5c:10:1e:33:90:57:53:0f:d2:26:a3: ce:b7:38:04:d2:aa:ac:b0:91:19:4b:ac:f4:d3:75:c9:91:1c: b6:9e:14:6c:5c:ec:70:35:1b:14:ab:24:e8:62:b6:3e:03:1d: 79:3b:43:66:6f:d0:d6:c7:0a:ad:4b:77:7d:d3:96:62:a0:ff: 15:ec:63:3e:32:ae:e7:2f:6f:4d:b1:88:83:e6:5c:f0:8a:ff: 11:ed:95:9d:8a:e4:e5:75:c9:df:c8:26:85:3d:f9:d4:80:c0: 5b:85:6e:80 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDUyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU5My1lY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IxEkOr7FLrloB0YUC0hBdxp7NQ+MWDSrnyGEWDFpjyAgPXm/PzlLqn0rPYL UbXFy3YXxeu2ehDNrJV7cU9H6kDhoma8sU/hKjnA+U5cCNkyOOvJRHq5HISMQMVb Dkrw58nXyJ8wk788LWJtEdNoK5HVLRkSdCbv7GwzhcZcPsIMVJTyEg7o3BXgfQ18 KKWxfYBwUaLxIJ/q0wAGv3NlQQPIaWWhR3dCIM78G70DNeaSMi/7dxf7CcrbPEgR /7mPuxiIk6szOhx/fA4jJ3tFq2I4K2MG0Hzx/CAIgEuq6qmNY94CrNYDeZEZ+Fnk PhzVCRgPH853uqZ1LZe9pYd7EwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFCvM1U5y Fl7ovT66A6gPjCai7OMKMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjczQTgzRjQ3 MjE1MTFFRkE3RDgyRDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBAPKHZAwGAQCAAIwEgMHACABA8iQBwMHACABA8iQCTANBgkq hkiG9w0BAQsFAAOCAQEARmZf9cVOWfWk3p8zS7+BeyEi7881AJbDlaky8sEvshgP sMjOg1nksSryYV1Vo2FFIT8he95/waxKSiZtOiQm0iBMLjRgr8CNOyrY5bGKSzYt 4NK67nT2ZQXc2fftTwo2NBhpLPFj20qJZ2zc4CzXd/4CqSUKaXtgovgg9byDLef9 Gt/iPDEAXTfOJX4Yqdqb8/AC6LmPpFwQHjOQV1MP0iajzrc4BNKqrLCRGUus9NN1 yZEctp4UbFzscDUbFKsk6GK2PgMdeTtDZm/Q1scKrUt3fdOWYqD/FexjPjKu5y9v TbGIg+Zc8Ir/Ee2VnYrk5XXJ38gmhT351IDAW4VugA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:07:57 2026 by rpki-client