This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/3AE27D1ACEAD11F0AD3AAB23C4F9AE02.roa File: 3AE27D1ACEAD11F0AD3AAB23C4F9AE02.roa (raw, json) Hash identifier: wKDfKWnAUSKFfJ5WZ6cJ4y7gKPKXQZBNObDI0iCga0k= Subject key identifier: 22:8E:FF:68:79:8D:8A:72:A0:E9:B8:0E:6D:1F:9A:96:FF:A3:3C:B4 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 3688 Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/3AE27D1ACEAD11F0AD3AAB23C4F9AE02.roa Signing time: Mon 01 Dec 2025 11:59:46 +0000 ROA not before: Mon 01 Dec 2025 11:59:46 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 141215 IP address blocks: 116.90.119.0/24 maxlen: 24 202.142.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13960 (0x3688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Dec 1 11:59:46 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=692d8332-48b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:38:98:2c:dd:e1:db:29:84:e5:38:78:bf: 0a:d3:9f:bc:34:44:15:90:1a:83:64:e5:d8:e8:7b: 05:7c:8f:72:0a:9f:bc:7c:f2:6b:3b:39:43:36:ad: 0c:b8:48:9a:7d:a4:c1:f8:87:28:4e:50:ff:6b:0b: d2:6d:85:8a:fd:2c:92:43:b5:3b:f6:5a:43:78:25: b0:24:f4:01:4b:65:da:34:ce:13:32:aa:eb:66:9a: b6:ca:4c:2d:41:50:4a:1d:8d:37:eb:39:0d:b7:fb: 19:c5:d5:59:3b:6a:df:e6:e5:b2:73:f7:2b:00:97: 31:20:76:7d:c8:f6:3b:11:e2:b6:51:9c:8b:7d:bc: e0:2e:93:d7:ee:aa:29:59:3e:8c:f1:7c:a8:73:4d: e8:fb:00:9c:36:db:38:b9:30:33:de:85:96:c1:fe: 14:e7:af:da:53:5a:51:1d:26:c1:09:e6:ca:15:1a: 4d:b3:ae:01:c7:ab:be:b1:49:68:e6:5b:99:2e:e7: 1f:66:c2:8b:82:60:3f:e6:95:39:eb:39:7e:40:0a: c8:37:85:59:62:04:cf:d8:94:fc:e0:56:c2:40:a2: 11:e0:02:a2:60:4a:ff:db:01:93:da:fb:e4:57:a7: 3c:70:30:79:a1:0c:f8:05:b0:ed:6d:23:39:dc:81: bd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8E:FF:68:79:8D:8A:72:A0:E9:B8:0E:6D:1F:9A:96:FF:A3:3C:B4 X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/3AE27D1ACEAD11F0AD3AAB23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.90.119.0/24 202.142.155.0/24 Signature Algorithm: sha256WithRSAEncryption 02:b0:03:02:79:74:6f:dc:2f:35:fb:21:1e:31:94:24:4b:8f: 9a:f8:c5:e4:e4:2a:1e:2d:e5:45:e7:1c:b9:50:d2:70:bf:97: a7:9e:cb:ce:57:a6:90:9f:8f:16:76:9b:5a:0b:09:61:bb:18: d4:85:6d:2c:8b:61:c8:4f:dd:77:91:5c:19:5a:0f:fc:cc:86: f7:94:b8:8a:ba:f0:76:cd:8c:93:63:c1:4d:34:de:c7:da:03: 35:b0:c1:d7:0d:05:d4:3f:7e:d7:32:4d:88:05:6c:4c:52:81: ea:71:a6:97:3e:8f:f7:71:18:a3:c1:fb:03:ff:f3:1a:e1:82: 5d:ae:ee:a9:98:b3:ee:e4:da:41:f4:7a:f1:cc:4d:e7:54:a3: f2:e5:0e:a3:69:f6:fb:9e:70:95:8e:96:58:a5:fc:2f:b8:6f: f1:55:a1:5e:96:2b:41:a1:a0:a0:6b:33:ae:95:53:90:6a:6a: d9:67:c1:63:d8:1b:80:cc:f4:f3:93:10:a7:39:3d:e5:e4:f3: 73:d3:6c:b3:22:9d:e1:76:9b:a4:5a:fc:b1:b0:b5:5e:04:14: 04:a4:f1:0d:94:96:ec:15:41:3c:33:52:04:60:87:cf:21:db: 10:a8:ce:fb:56:ca:64:4d:ad:e1:a0:0e:93:22:62:59:43:42: b9:d1:a0:43 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjUxMjAxMTE1OTQ2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJkODMzMi00OGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGw4mCzd4dsphOU4eL8K05+8NEQVkBqDZOXY6HsFfI9yCp+8fPJrOzlDNq0M uEiafaTB+IcoTlD/awvSbYWK/SySQ7U79lpDeCWwJPQBS2XaNM4TMqrrZpq2ykwt QVBKHY036zkNt/sZxdVZO2rf5uWyc/crAJcxIHZ9yPY7EeK2UZyLfbzgLpPX7qop WT6M8Xyoc03o+wCcNts4uTAz3oWWwf4U56/aU1pRHSbBCebKFRpNs64Bx6u+sUlo 5luZLucfZsKLgmA/5pU56zl+QArIN4VZYgTP2JT84FbCQKIR4AKiYEr/2wGT2vvk V6c8cDB5oQz4BbDtbSM53IG9jQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCKO/2h5 jYpyoOm4Dm0fmpb/ozy0MB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvM0FFMjdEMUFD RUFEMTFGMEFEM0FBQjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB0WncDBADKjpswDQYJKoZIhvcNAQELBQADggEBAAKwAwJ5 dG/cLzX7IR4xlCRLj5r4xeTkKh4t5UXnHLlQ0nC/l6eey85XppCfjxZ2m1oLCWG7 GNSFbSyLYchP3XeRXBlaD/zMhveUuIq68HbNjJNjwU003sfaAzWwwdcNBdQ/ftcy TYgFbExSgepxppc+j/dxGKPB+wP/8xrhgl2u7qmYs+7k2kH0evHMTedUo/LlDqNp 9vuecJWOllil/C+4b/FVoV6WK0GhoKBrM66VU5BqatlnwWPYG4DM9POTEKc5PeXk 83PTbLMineF2m6Ra/LGwtV4EFASk8Q2UluwVQTwzUgRgh88h2xCozvtWymRNreGg DpMiYllDQrnRoEM= -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:18 2025 by rpki-client