This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F8C77948721511EFA7D82D3EC4F9AE02.roa File: F8C77948721511EFA7D82D3EC4F9AE02.roa (raw, json) Hash identifier: TJYM/lFW+u0/pxCC7kp4IlgatDveVNcygKHXdGhw+2I= Subject key identifier: 43:94:B8:C7:41:EC:9B:6F:D9:EF:35:63:EE:80:8C:E0:37:11:A1:EE Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01DC Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F8C77948721511EFA7D82D3EC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:56 +0000 ROA not before: Wed 31 Dec 2025 04:24:56 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9551 IP address blocks: 202.28.4.0/24 maxlen: 24 202.28.5.0/24 maxlen: 24 202.28.6.0/24 maxlen: 24 202.28.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:56 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a598-5a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:85:5a:cd:92:cd:d1:04:5d:cc:80:06:e2: d2:90:b3:5a:47:6e:8e:fa:5e:7f:d6:36:12:09:1f: 94:cc:53:ef:80:38:3c:99:16:fb:c1:64:c2:27:11: 88:39:f7:12:86:9c:c2:9c:cc:cb:b4:c2:ab:04:95: 6c:76:c8:57:63:24:f3:b2:88:9b:21:2f:01:b8:87: 0f:e3:e9:d3:30:82:e7:f7:69:d0:87:82:fd:87:e4: 87:5c:26:43:8a:cb:8c:8b:a2:f1:f7:fc:5d:a8:71: 29:fb:b4:b6:a8:86:b0:63:fb:d6:4f:99:43:0e:66: 37:6d:ec:9b:4c:50:c3:3f:43:5a:5a:8a:e9:e8:2c: b9:af:8e:89:3a:9c:57:68:99:c2:b2:c8:cf:d3:f9: 5d:26:73:54:2e:04:47:ce:0d:f0:22:bf:0a:71:be: d3:41:e8:3c:c9:21:4f:86:a4:31:95:ea:10:8a:12: dc:97:d7:24:e0:5c:a0:dd:d6:3c:f8:97:28:e8:5e: 11:6d:54:25:57:4c:69:e4:94:0c:66:51:8a:52:bf: c9:30:cc:92:8e:7f:53:31:ce:c1:4a:25:a1:0f:43: 0f:41:77:a9:fc:b3:dd:64:70:e2:05:df:c1:69:02: 80:fb:0b:ed:3d:27:97:50:b7:d2:f6:9d:35:35:8f: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:94:B8:C7:41:EC:9B:6F:D9:EF:35:63:EE:80:8C:E0:37:11:A1:EE X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F8C77948721511EFA7D82D3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.4.0/22 Signature Algorithm: sha256WithRSAEncryption 69:3b:94:17:6a:02:73:91:d4:4e:bc:24:af:ff:e9:4b:24:e8: 82:eb:61:09:ea:a3:8d:94:f3:0f:19:ca:81:6d:74:44:64:bf: 6f:ef:cd:0c:92:68:d0:af:c6:76:a3:7e:4e:7a:79:0d:a3:37: 6a:81:b3:e3:1d:e8:5d:82:b2:ba:b9:5a:aa:74:fd:bf:96:ad: 55:dc:95:5a:b7:a7:e2:1c:d9:86:d7:8c:55:85:41:1a:ff:69: e0:74:9b:13:b2:37:ce:40:be:ae:09:06:cf:fb:cd:da:0c:03: ef:cf:92:87:98:67:cf:4d:e2:99:1a:93:70:d7:a6:1a:5c:f1: 99:e9:8f:64:44:32:a4:58:a5:f9:63:f4:a2:30:ed:f6:47:33: c4:9a:8d:6c:45:51:d9:97:b6:36:39:76:fa:f8:49:d3:b3:61: 7b:50:04:4a:b7:96:07:83:3d:f4:35:d3:42:01:e6:57:75:f0: b3:c7:22:99:ff:90:d7:7a:56:e4:4e:05:fb:f7:6d:da:c6:bb: 63:84:fd:26:0b:db:5e:50:35:2f:66:75:14:18:19:c0:7f:ab: 07:d3:b7:5a:c1:05:22:c0:5b:9f:6a:af:d4:8f:30:f0:56:dd: 19:84:35:fb:d9:9d:c5:16:44:8c:98:f2:21:8f:21:c9:8b:db: 65:5a:91:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDU2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU5OC01YTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0umFWs2SzdEEXcyABuLSkLNaR26O+l5/1jYSCR+UzFPvgDg8mRb7wWTCJxGI OfcShpzCnMzLtMKrBJVsdshXYyTzsoibIS8BuIcP4+nTMILn92nQh4L9h+SHXCZD isuMi6Lx9/xdqHEp+7S2qIawY/vWT5lDDmY3beybTFDDP0NaWorp6Cy5r46JOpxX aJnCssjP0/ldJnNULgRHzg3wIr8Kcb7TQeg8ySFPhqQxleoQihLcl9ck4Fyg3dY8 +Jco6F4RbVQlV0xp5JQMZlGKUr/JMMySjn9TMc7BSiWhD0MPQXep/LPdZHDiBd/B aQKA+wvtPSeXULfS9p01NY/MtQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEOUuMdB 7Jtv2e81Y+6AjOA3EaHuMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjhDNzc5NDg3 MjE1MTFFRkE3RDgyRDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKHAQwDQYJKoZIhvcNAQELBQADggEBAGk7lBdqAnOR1E68 JK//6Usk6ILrYQnqo42U8w8ZyoFtdERkv2/vzQySaNCvxnajfk56eQ2jN2qBs+Md 6F2Csrq5Wqp0/b+WrVXclVq3p+Ic2YbXjFWFQRr/aeB0mxOyN85Avq4JBs/7zdoM A+/PkoeYZ89N4pkak3DXphpc8Znpj2REMqRYpflj9KIw7fZHM8SajWxFUdmXtjY5 dvr4SdOzYXtQBEq3lgeDPfQ100IB5ld18LPHIpn/kNd6VuROBfv3bdrGu2OE/SYL 215QNS9mdRQYGcB/qwfTt1rBBSLAW59qr9SPMPBW3RmENfvZncUWRIyY8iGPIcmL 22VakUY= -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:50 2026 by rpki-client