This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/8F35765ACF5811F085DD836EC4F9AE02.roa File: 8F35765ACF5811F085DD836EC4F9AE02.roa (raw, json) Hash identifier: Tw5k9/cuQwB71OFXRXiv/bwE46v5T5qgIQMcMfV+JV4= Subject key identifier: 57:EF:C1:8D:F2:07:C9:9A:E0:5A:BC:1E:ED:CD:4F:E0:D5:CA:41:A5 Certificate issuer: /CN=A91B3087/serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Certificate serial: 37 Authority key identifier: 85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/8F35765ACF5811F085DD836EC4F9AE02.roa Signing time: Tue 02 Dec 2025 08:26:12 +0000 ROA not before: Tue 02 Dec 2025 08:26:12 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 151786 IP address blocks: 202.136.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3087, serialNumber=85100E5A1FBAE5FE1A65CBF15734130A8E541BB2 Validity Not Before: Dec 2 08:26:12 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=692ea2a3-998c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:90:e1:64:e7:17:e7:dc:85:f8:62:39:9b: 11:9e:64:bc:35:a9:f1:e0:45:c6:bb:a5:1b:aa:7a: 93:a0:9c:2f:08:01:be:7c:ae:43:a6:63:ae:78:bd: 3f:d1:2c:7d:45:d0:f8:f9:8d:17:2b:6d:0d:3e:8d: 4a:35:ea:bc:9d:cb:3f:37:22:77:4c:9f:95:ec:b3: ea:dc:a9:e9:4d:b1:ab:49:d6:c3:da:d6:d4:20:03: 88:8e:91:2e:85:83:c1:bf:0a:db:8c:8e:98:7f:73: 87:f7:e6:8d:dd:a1:78:83:76:30:ca:66:d5:40:5e: 44:86:99:85:a7:c9:ba:56:58:81:e7:c0:36:18:94: 13:ad:63:53:0f:1a:e9:3f:86:19:29:e4:12:93:1d: af:8e:63:51:23:81:d8:49:44:85:f1:30:0c:de:59: 90:dd:02:b8:00:0b:18:75:8c:c1:17:4c:eb:bf:8c: d3:35:08:81:b1:c3:25:da:ad:95:2d:7c:0c:e1:85: 9f:e6:19:ad:29:b9:48:6e:3b:f4:4f:31:57:21:9c: 48:cd:10:ed:e2:9e:9c:bb:63:93:dd:86:f4:37:f9: 05:35:5b:cd:d0:74:f6:27:15:f6:7c:c1:f2:4a:3e: d0:7a:c5:7a:60:be:8b:53:1d:c2:48:dc:f5:84:f8: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EF:C1:8D:F2:07:C9:9A:E0:5A:BC:1E:ED:CD:4F:E0:D5:CA:41:A5 X509v3 Authority Key Identifier: keyid:85:10:0E:5A:1F:BA:E5:FE:1A:65:CB:F1:57:34:13:0A:8E:54:1B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/hRAOWh-65f4aZcvxVzQTCo5UG7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRAOWh-65f4aZcvxVzQTCo5UG7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3087/488831328EAA11F0B8352949C4F9AE02/8F35765ACF5811F085DD836EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.136.75.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:f3:68:9d:4d:ae:b8:79:83:c5:a0:12:52:08:91:43:41:25: fc:06:b5:a3:c1:78:13:98:29:36:fd:f6:2b:49:43:3b:a4:f6: 05:83:9f:22:f9:e4:19:06:fa:a7:57:c8:c5:1e:24:df:1d:38: d1:9b:91:3c:76:14:02:95:b2:d6:24:bd:98:90:de:4a:e4:0f: 83:e4:9a:5c:cf:5a:74:8d:cd:b4:d1:1d:42:5a:2e:51:9a:14: 6a:e4:86:23:b4:fa:25:91:5d:c5:a6:a7:7c:1f:f5:42:14:ba: b6:32:3f:96:c6:ec:70:81:9c:48:d6:a7:04:86:db:be:21:04: 9f:0c:25:f9:0f:08:b4:9f:e4:f4:15:ac:88:b9:53:15:8b:a2: f1:04:52:ff:71:2b:08:97:87:78:12:ab:9b:7d:0b:c6:b9:c8: cc:b9:23:bb:40:33:80:dc:bb:01:ee:9c:54:23:41:f0:77:e6: d7:c5:63:a9:fd:19:2b:96:c8:a4:7b:fc:7d:1e:02:58:81:d7: 1f:a7:3f:e3:be:9b:9b:9c:30:f2:c6:21:6e:93:d6:92:40:fd: 59:b2:fa:93:8e:fe:78:da:4e:e9:23:c6:dd:b1:15:33:9c:68: 8b:6b:f2:ef:b4:ca:51:e5:47:87:19:9a:af:46:9b:9a:39:aa: 10:5f:ba:81 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzA4NzExMC8GA1UEBRMoODUxMDBFNUExRkJBRTVGRTFBNjVDQkYxNTczNDEzMEE4 RTU0MUJCMjAeFw0yNTEyMDIwODI2MTJaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MmVhMmEzLTk5OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkNZDhZOcX59yF+GI5mxGeZLw1qfHgRca7pRuqepOgnC8IAb58rkOmY654vT/R LH1F0Pj5jRcrbQ0+jUo16rydyz83IndMn5Xss+rcqelNsatJ1sPa1tQgA4iOkS6F g8G/CtuMjph/c4f35o3doXiDdjDKZtVAXkSGmYWnybpWWIHnwDYYlBOtY1MPGuk/ hhkp5BKTHa+OY1EjgdhJRIXxMAzeWZDdArgACxh1jMEXTOu/jNM1CIGxwyXarZUt fAzhhZ/mGa0puUhuO/RPMVchnEjNEO3inpy7Y5PdhvQ3+QU1W83QdPYnFfZ8wfJK PtB6xXpgvotTHcJI3PWE+D1tAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUV+/BjfIH yZrgWrwe7c1P4NXKQaUwHwYDVR0jBBgwFoAUhRAOWh+65f4aZcvxVzQTCo5UG7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMDg3LzQ4ODgzMTMyOEVB QTExRjBCODM1Mjk0OUM0RjlBRTAyL2hSQU9XaC02NWY0YVpjdnhWelFUQ281VUc3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFJBT1doLTY1ZjRhWmN2eFZ6UVRDbzVVRzdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA4Ny80ODg4MzEzMjhFQUExMUYwQjgzNTI5NDlDNEY5QUUwMi84RjM1NzY1QUNG NTgxMUYwODVERDgzNkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMqISzANBgkqhkiG9w0BAQsFAAOCAQEAffNonU2uuHmDxaAS UgiRQ0El/Aa1o8F4E5gpNv32K0lDO6T2BYOfIvnkGQb6p1fIxR4k3x040ZuRPHYU ApWy1iS9mJDeSuQPg+SaXM9adI3NtNEdQlouUZoUauSGI7T6JZFdxaanfB/1QhS6 tjI/lsbscIGcSNanBIbbviEEnwwl+Q8ItJ/k9BWsiLlTFYui8QRS/3ErCJeHeBKr m30LxrnIzLkju0AzgNy7Ae6cVCNB8Hfm18Vjqf0ZK5bIpHv8fR4CWIHXH6c/476b m5ww8sYhbpPWkkD9WbL6k47+eNpO6SPG3bEVM5xoi2vy77TKUeVHhxmar0abmjmq EF+6gQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:35:41 2025 by rpki-client