This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/AFB65238AFDC11EAB3910C71C4F9AE02.roa File: AFB65238AFDC11EAB3910C71C4F9AE02.roa (raw, json) Hash identifier: iZrS1s3zKi3WPbeCDiFNxotK29OIUocoDpBkJ3wbMfE= Subject key identifier: CC:56:FF:46:DA:2A:EF:20:A7:E3:F6:7D:40:D0:E1:FB:DE:8C:18:D3 Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Certificate serial: 2585 Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/AFB65238AFDC11EAB3910C71C4F9AE02.roa Signing time: Sun 30 Nov 2025 15:43:04 +0000 ROA not before: Sun 30 Nov 2025 15:43:04 +0000 ROA not after: Mon 30 Mar 2026 00:00:00 +0000 asID: 23657 IP address blocks: 202.4.44.0/24 maxlen: 24 202.4.45.0/24 maxlen: 24 202.4.46.0/24 maxlen: 24 202.4.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9605 (0x2585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Validity Not Before: Nov 30 15:43:04 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=692c6608-d57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:0d:05:ec:47:ea:69:44:fd:da:4f:d5:a8: 0f:89:db:ff:6d:6e:78:ee:fb:b1:20:db:2d:fd:99: 0c:2c:7d:de:b1:61:7a:f6:8b:ef:8d:a5:4c:cb:45: aa:eb:8c:58:f0:2f:67:70:27:9f:b8:bf:bb:ae:a4: 33:2f:1c:b7:63:12:d8:a3:ce:04:a8:12:18:09:c7: 14:3e:83:52:ef:44:83:62:05:3b:72:ee:07:f8:df: 19:41:b1:c0:73:08:6b:01:b8:10:4c:20:6e:2b:19: ea:61:cc:42:87:c8:0e:17:8d:73:0c:8e:3d:46:47: 0e:50:1e:47:9d:0f:7d:12:20:e4:53:60:8e:f0:08: 95:c7:5d:d4:51:c2:54:c9:c2:58:6a:70:48:ab:a9: 1c:ab:0d:c0:dd:b5:ac:85:03:bc:5c:6c:2f:41:25: 57:d0:bd:a3:41:fd:ad:fd:64:cf:a0:23:6d:f8:f2: 65:ab:4e:ea:e3:86:74:31:e6:fd:66:d1:39:0f:0c: de:d4:85:cf:b9:04:99:2c:21:d7:d8:50:1f:0a:22: 92:e4:e6:2b:b2:1e:d1:ed:4d:f0:c8:3a:0b:d2:ce: f9:0d:3c:c3:f3:93:9f:af:76:07:19:85:81:51:b6: 52:8c:d4:e8:34:c9:dc:0e:b4:fd:0a:1f:12:86:24: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:56:FF:46:DA:2A:EF:20:A7:E3:F6:7D:40:D0:E1:FB:DE:8C:18:D3 X509v3 Authority Key Identifier: keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/AFB65238AFDC11EAB3910C71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.4.44.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:60:92:dd:db:22:33:5d:45:ad:f2:18:8b:05:2d:38:05:6f: 98:01:c8:80:d9:64:70:88:46:95:43:9b:b9:ec:6c:d1:75:13: 09:39:a6:41:97:8b:8e:d7:19:6c:09:2a:f1:97:95:de:51:f0: c6:25:7c:57:cd:9c:22:39:38:d6:e1:6e:d0:9f:4f:41:48:f0: c2:55:f2:30:36:8a:d6:2b:4c:7b:96:b7:65:b5:d7:e5:92:8c: 81:0f:1f:7d:02:15:b3:dc:54:53:ec:70:9c:d7:14:89:2b:b9: 1c:da:31:04:bd:5b:08:ed:94:2e:6e:b9:b1:0c:37:fa:d6:33: 23:90:54:d4:2e:97:3b:4f:6d:3e:b9:11:3e:a2:2d:54:b4:08: 5a:82:8e:cc:e5:f0:48:1b:d6:dc:9e:1f:46:11:f8:86:ca:93: 5e:48:77:77:57:63:7a:61:8c:b5:31:c2:96:10:3b:64:87:d1: 43:1f:2d:3c:c9:b4:e5:cc:7d:96:9c:2b:a7:78:af:fe:46:84: 39:0d:9b:f4:bb:b5:d6:46:20:a8:c1:e8:f8:41:99:1a:bc:5b: 4f:5d:52:f0:0e:e8:81:d6:33:d3:60:b9:9a:44:33:99:12:d1: 7f:6b:47:60:fb:67:c3:bd:45:ae:d9:7a:fe:fa:c6:73:f0:e6: e9:40:d4:7f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzM0ExMTAvBgNVBAUTKDZFOEVBMUUzMjQwQzBCQjNEMTNCNEQyNzVDNkMwMzI2 QTU2OEVDODcwHhcNMjUxMTMwMTU0MzA0WhcNMjYwMzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJjNjYwOC1kNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWQNBexH6mlE/dpP1agPidv/bW547vuxINst/ZkMLH3esWF69ovvjaVMy0Wq 64xY8C9ncCefuL+7rqQzLxy3YxLYo84EqBIYCccUPoNS70SDYgU7cu4H+N8ZQbHA cwhrAbgQTCBuKxnqYcxCh8gOF41zDI49RkcOUB5HnQ99EiDkU2CO8AiVx13UUcJU ycJYanBIq6kcqw3A3bWshQO8XGwvQSVX0L2jQf2t/WTPoCNt+PJlq07q44Z0Meb9 ZtE5Dwze1IXPuQSZLCHX2FAfCiKS5OYrsh7R7U3wyDoL0s75DTzD85Ofr3YHGYWB UbZSjNToNMncDrT9Ch8ShiTn2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMxW/0ba Ku8gp+P2fUDQ4fvejBjTMB8GA1UdIwQYMBaAFG6OoeMkDAuz0TtNJ1xsAyalaOyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTMzQS81M0ZFMUVGQTJC NjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3UFJPMDBuWEd3REpxVm83 SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JvNmg0eVFNQzdQUk8wMG5YR3dESnFWbzdJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjkzM0EvNTNGRTFFRkEyQjY0MTFFNThBMkYwNzU0QzRGOUFFMDIvQUZCNjUyMzhB RkRDMTFFQUIzOTEwQzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKBCwwDQYJKoZIhvcNAQELBQADggEBAH1gkt3bIjNdRa3y GIsFLTgFb5gByIDZZHCIRpVDm7nsbNF1Ewk5pkGXi47XGWwJKvGXld5R8MYlfFfN nCI5ONbhbtCfT0FI8MJV8jA2itYrTHuWt2W11+WSjIEPH30CFbPcVFPscJzXFIkr uRzaMQS9WwjtlC5uubEMN/rWMyOQVNQulztPbT65ET6iLVS0CFqCjszl8Egb1tye H0YR+IbKk15Id3dXY3phjLUxwpYQO2SH0UMfLTzJtOXMfZacK6d4r/5GhDkNm/S7 tdZGIKjB6PhBmRq8W09dUvAO6IHWM9NguZpEM5kS0X9rR2D7Z8O9Ra7Zev76xnPw 5ulA1H8= -----END CERTIFICATE-----Generated at Mon Dec 8 08:27:03 2025 by rpki-client