This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/02FC3E3C82A511EEA1F2710DC4F9AE02.roa File: 02FC3E3C82A511EEA1F2710DC4F9AE02.roa (raw, json) Hash identifier: etATH7cpBctXxSFj9qh8jaunQqoMoUcK6DY8J7yW9Mc= Subject key identifier: 43:16:12:7D:21:AD:95:0C:41:7D:C8:C1:2E:E6:76:D5:34:98:A9:F9 Certificate issuer: /CN=A91B9EC7/serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Certificate serial: 0178 Authority key identifier: 30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/02FC3E3C82A511EEA1F2710DC4F9AE02.roa Signing time: Tue 11 Nov 2025 01:48:49 +0000 ROA not before: Tue 11 Nov 2025 01:48:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152110 IP address blocks: 27.124.70.0/23 maxlen: 24 2001:df3:23c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EC7, serialNumber=306E34FA84DA090C6001B35464BB8C426357D928 Validity Not Before: Nov 11 01:48:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69129600-4621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:de:1f:ad:90:65:25:59:07:d7:73:cd:94: eb:05:a5:04:ab:4b:07:56:ae:1e:59:e2:05:d5:fa: d5:5d:de:7e:42:7a:b9:cf:5a:c8:01:52:25:3b:6f: b1:69:cc:61:9a:5c:cd:00:07:8a:88:45:d8:1a:48: 38:fb:d4:00:f5:18:c2:df:55:00:94:a4:9c:82:36: c4:59:8e:64:d0:02:65:1b:b0:68:d2:77:e6:68:b7: e3:4e:77:1a:23:8e:68:ec:63:fc:23:1f:13:01:ac: e8:6c:9d:56:c0:af:61:e5:57:dd:e9:1d:43:63:db: 31:ab:92:02:72:e6:48:3f:f6:94:b9:ba:6a:37:6f: 28:34:9b:0f:ea:d1:09:29:d0:a3:da:71:58:c4:0a: 09:62:2a:06:16:e4:6d:bf:8a:04:e0:bd:91:c4:af: 81:c3:69:88:ee:7a:55:76:7a:b4:4b:44:8e:72:79: 94:09:c8:e9:e5:1b:4e:85:47:3c:99:0c:39:cc:ed: 4c:2e:22:e9:f1:e5:b5:39:64:bb:89:c4:d0:8c:b4: 3f:8e:c7:f7:0c:eb:10:a6:70:68:36:b5:3d:3e:d7: 2c:76:a5:01:22:cc:6a:d8:9f:62:ae:94:29:36:10: 54:5c:67:0f:96:e3:d7:63:08:51:33:b2:10:f6:87: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:16:12:7D:21:AD:95:0C:41:7D:C8:C1:2E:E6:76:D5:34:98:A9:F9 X509v3 Authority Key Identifier: keyid:30:6E:34:FA:84:DA:09:0C:60:01:B3:54:64:BB:8C:42:63:57:D9:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/MG40-oTaCQxgAbNUZLuMQmNX2Sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MG40-oTaCQxgAbNUZLuMQmNX2Sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EC7/E63F2F8A82A311EE9B117357C4F9AE02/02FC3E3C82A511EEA1F2710DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.124.70.0/23 IPv6: 2001:df3:23c0::/48 Signature Algorithm: sha256WithRSAEncryption b3:75:1a:a9:1a:b5:35:ae:2c:40:00:71:f6:d3:6e:8a:dd:14: 7c:ce:80:96:13:2e:21:6e:7f:7f:15:d9:ec:f0:4b:2d:13:9e: 3d:8a:8a:fc:be:9d:e1:b4:6a:e1:ed:09:42:9e:65:76:eb:d2: 23:f2:a1:c8:f0:1a:50:fa:70:13:7a:18:99:a6:f4:08:f4:b0: ba:49:72:bb:f9:9e:25:5a:19:85:8a:d6:0f:72:a2:00:21:c4: 3c:66:0f:a5:a2:6e:74:cd:ed:08:dc:ed:d0:ab:a2:73:30:1b: 7b:5f:9c:81:c0:a8:3a:18:ce:8f:9a:6a:c3:04:a0:4f:cb:7d: 4b:2c:38:47:0e:fa:dc:12:d4:6d:cf:31:fc:a4:27:bc:df:0a: 96:94:ba:ea:2e:d5:24:16:f4:e2:e2:f3:fc:ae:26:70:f1:97: cd:ac:ed:4b:64:98:d5:5e:a5:a7:26:f6:a2:59:6f:b8:a5:bc: 1c:4d:3e:fc:22:63:87:23:0b:c4:cb:e4:21:0a:9e:a5:34:09: 45:5d:50:69:1e:d9:78:2e:65:3c:31:13:2b:f8:af:ce:fb:78: 76:d7:ea:e3:91:34:c8:c9:ff:30:33:21:80:4b:22:03:43:df: 90:84:ef:d2:e8:93:74:ab:e1:00:e6:f7:88:ff:bf:b2:48:c0: 47:c6:5e:da -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQzcxMTAvBgNVBAUTKDMwNkUzNEZBODREQTA5MEM2MDAxQjM1NDY0QkI4QzQy NjM1N0Q5MjgwHhcNMjUxMTExMDE0ODQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTEyOTYwMC00NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaveH62QZSVZB9dzzZTrBaUEq0sHVq4eWeIF1frVXd5+Qnq5z1rIAVIlO2+x acxhmlzNAAeKiEXYGkg4+9QA9RjC31UAlKScgjbEWY5k0AJlG7Bo0nfmaLfjTnca I45o7GP8Ix8TAazobJ1WwK9h5Vfd6R1DY9sxq5ICcuZIP/aUubpqN28oNJsP6tEJ KdCj2nFYxAoJYioGFuRtv4oE4L2RxK+Bw2mI7npVdnq0S0SOcnmUCcjp5RtOhUc8 mQw5zO1MLiLp8eW1OWS7icTQjLQ/jsf3DOsQpnBoNrU9PtcsdqUBIsxq2J9irpQp NhBUXGcPluPXYwhRM7IQ9oeSYwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEMWEn0h rZUMQX3IwS7mdtU0mKn5MB8GA1UdIwQYMBaAFDBuNPqE2gkMYAGzVGS7jEJjV9ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVDNy9FNjNGMkY4QTgy QTMxMUVFOUIxMTczNTdDNEY5QUUwMi9NRzQwLW9UYUNReGdBYk5VWkx1TVFtTlgy U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01HNDAtb1RhQ1F4Z0FiTlVaTHVNUW1OWDJTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjlFQzcvRTYzRjJGOEE4MkEzMTFFRTlCMTE3MzU3QzRGOUFFMDIvMDJGQzNFM0M4 MkE1MTFFRUExRjI3MTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAEbfEYwDwQCAAIwCQMHACABDfMjwDANBgkqhkiG9w0BAQsF AAOCAQEAs3UaqRq1Na4sQABx9tNuit0UfM6AlhMuIW5/fxXZ7PBLLROePYqK/L6d 4bRq4e0JQp5lduvSI/KhyPAaUPpwE3oYmab0CPSwuklyu/meJVoZhYrWD3KiACHE PGYPpaJudM3tCNzt0KuiczAbe1+cgcCoOhjOj5pqwwSgT8t9Syw4Rw763BLUbc8x /KQnvN8KlpS66i7VJBb04uLz/K4mcPGXzaztS2SY1V6lpyb2ollvuKW8HE0+/CJj hyMLxMvkIQqepTQJRV1QaR7ZeC5lPDETK/ivzvt4dtfq45E0yMn/MDMhgEsiA0Pf kITv0uiTdKvhAOb3iP+/skjAR8Ze2g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:40 2025 by rpki-client