This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa File: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (raw, json) Hash identifier: 9BCurgsmPpYkZs9pPB9R4G/BbkWck+cVJq8Vox5uiKY= Subject key identifier: 43:60:51:D7:33:FF:FC:57:C8:CF:95:48:A2:D2:DF:F7:35:39:8B:EF Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Certificate serial: 0827 Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa Signing time: Fri 14 Nov 2025 20:11:07 +0000 ROA not before: Fri 14 Nov 2025 20:11:07 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 64073 IP address blocks: 118.67.192.0/23 maxlen: 24 118.67.194.0/23 maxlen: 24 118.67.196.0/22 maxlen: 24 202.36.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Validity Not Before: Nov 14 20:11:07 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69178cdb-6c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cf:0d:d1:be:59:b1:e7:28:5b:d9:1d:6f:5e: b3:87:81:52:f1:79:99:47:4d:51:6d:20:ff:c3:11: 51:ea:aa:fb:78:52:27:7c:d4:29:e2:58:34:9b:ef: 52:1d:35:64:e2:3e:27:c2:1e:8f:22:62:38:4a:ec: 90:42:a1:1c:59:54:13:2c:9a:16:87:6f:16:2d:c7: ce:5b:20:76:a3:03:04:97:f7:92:67:d7:a8:0e:4b: 64:a0:6c:d0:f3:4d:04:55:28:14:cb:bd:43:e2:f0: 89:07:33:7e:a0:7a:d6:e3:a7:6b:34:4b:da:a8:11: 9e:88:f5:65:6b:a4:5d:6d:89:ed:ed:f4:b4:49:c8: 3e:9c:29:91:4c:1f:e8:a5:66:e6:c1:51:3e:f4:92: 1a:f2:1d:92:6c:32:e7:4a:b4:45:cd:f9:65:c7:60: ec:a4:7f:57:bd:36:e1:b8:93:f2:6b:6d:de:23:1c: 2f:7a:9b:d7:fe:59:93:fc:49:0f:8c:94:c1:41:60: d2:5c:31:3c:9b:48:cd:27:e7:a9:2e:e5:ad:eb:af: 33:68:9b:d9:64:bb:d3:36:c6:70:87:13:8d:c4:26: 8f:ef:71:a7:a9:b7:89:59:61:20:d6:01:3d:0c:3c: 27:b5:d2:9a:af:25:54:57:02:f1:8e:d1:93:6c:67: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:60:51:D7:33:FF:FC:57:C8:CF:95:48:A2:D2:DF:F7:35:39:8B:EF X509v3 Authority Key Identifier: keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.67.192.0/21 202.36.209.0/24 Signature Algorithm: sha256WithRSAEncryption 88:29:11:d2:93:dc:06:09:74:11:84:b7:fa:a1:19:38:ba:72: b4:be:18:ae:f1:bf:9a:8a:d1:b0:11:e0:78:17:7d:67:2f:ed: bc:f4:50:2a:4d:0c:42:e0:57:10:0d:78:0b:91:f0:73:2d:33: 51:94:7e:6c:9b:cc:2d:a4:9f:d2:05:d4:b6:be:9c:3b:f8:c3: 13:3b:f6:2a:24:67:91:42:e1:d3:a8:a7:99:ee:42:d4:2a:92: 57:c2:db:48:93:cd:95:fc:46:85:f6:58:8a:57:4c:a6:90:70: 35:1a:70:40:41:0a:71:ec:fc:33:c6:07:44:f2:12:21:27:97: c9:dd:4c:52:97:ed:a1:76:99:aa:3e:97:99:36:3a:6e:41:df: 56:f4:3b:9e:30:2b:11:9c:e8:89:48:2e:df:f8:be:da:37:8e: 2b:b4:f4:61:92:0b:7f:ff:a7:bd:b9:22:57:8b:21:a8:e7:03: 08:79:1c:2d:a8:15:e8:ad:8f:b3:a7:cf:3c:51:4f:4c:f6:88: 3c:ed:a9:6d:96:16:64:6a:6a:5e:72:10:a5:4e:fa:ce:79:9c: ba:7f:f9:12:5c:72:18:06:5c:75:f3:de:45:e8:75:47:c3:c7: 3b:b0:04:53:45:5e:58:64:2f:4d:85:0f:e8:d7:2b:ae:83:a7: c2:e6:fe:cf -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw MEZDNTQ5NUUwHhcNMjUxMTE0MjAxMTA3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE3OGNkYi02YzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArc8N0b5ZsecoW9kdb16zh4FS8XmZR01RbSD/wxFR6qr7eFInfNQp4lg0m+9S HTVk4j4nwh6PImI4SuyQQqEcWVQTLJoWh28WLcfOWyB2owMEl/eSZ9eoDktkoGzQ 800EVSgUy71D4vCJBzN+oHrW46drNEvaqBGeiPVla6RdbYnt7fS0Scg+nCmRTB/o pWbmwVE+9JIa8h2SbDLnSrRFzfllx2DspH9XvTbhuJPya23eIxwvepvX/lmT/EkP jJTBQWDSXDE8m0jNJ+epLuWt668zaJvZZLvTNsZwhxONxCaP73GnqbeJWWEg1gE9 DDwntdKaryVUVwLxjtGTbGcOfQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFENgUdcz //xXyM+VSKLS3/c1OYvvMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY4QzMvRDBFMzNGQTQwMkMzMTFFQjhBREMzMjM4QzRGOUFFMDIvMEJEMDREMzAw RjZEMTFFQzhEOUYxRTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAN2Q8ADBADKJNEwDQYJKoZIhvcNAQELBQADggEBAIgpEdKT 3AYJdBGEt/qhGTi6crS+GK7xv5qK0bAR4HgXfWcv7bz0UCpNDELgVxANeAuR8HMt M1GUfmybzC2kn9IF1La+nDv4wxM79iokZ5FC4dOop5nuQtQqklfC20iTzZX8RoX2 WIpXTKaQcDUacEBBCnHs/DPGB0TyEiEnl8ndTFKX7aF2mao+l5k2Om5B31b0O54w KxGc6IlILt/4vto3jiu09GGSC3//p725IleLIajnAwh5HC2oFeitj7OnzzxRT0z2 iDztqW2WFmRqal5yEKVO+s55nLp/+RJcchgGXHXz3kXodUfDxzuwBFNFXlhkL02F D+jXK66Dp8Lm/s8= -----END CERTIFICATE-----Generated at Sun Dec 7 05:09:15 2025 by rpki-client