This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/420E09ACCC1D11F08826FE2FC4F9AE02.roa File: 420E09ACCC1D11F08826FE2FC4F9AE02.roa (raw, json) Hash identifier: 0Vj5t03R/1dHwLsHcQykQimFMT6RWGW/MsCL/wik32k= Subject key identifier: 2D:12:4D:B8:F1:5A:17:DC:EF:EB:6E:6E:74:4D:AF:38:9B:B2:CA:D8 Certificate issuer: /CN=A91C3B4D/serialNumber=AAF19433070FC676FAD61206B2719A085AB38BE5 Certificate serial: 02 Authority key identifier: AA:F1:94:33:07:0F:C6:76:FA:D6:12:06:B2:71:9A:08:5A:B3:8B:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvGUMwcPxnb61hIGsnGaCFqzi-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/420E09ACCC1D11F08826FE2FC4F9AE02.roa Signing time: Fri 28 Nov 2025 05:44:08 +0000 ROA not before: Fri 28 Nov 2025 05:44:08 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 38471 IP address blocks: 123.136.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.crl rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvGUMwcPxnb61hIGsnGaCFqzi-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B4D, serialNumber=AAF19433070FC676FAD61206B2719A085AB38BE5 Validity Not Before: Nov 28 05:44:08 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=692936a8-79ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:0c:26:31:c8:42:ff:7a:e2:5e:27:92:e7: 51:19:18:5d:71:01:1c:c8:b5:78:4b:3b:98:e0:df: c0:46:6d:fb:b1:99:fc:ea:24:79:cf:72:02:41:13: 1b:94:a5:57:63:9b:35:32:8c:e4:20:7d:cf:3f:15: f4:fb:2b:ac:77:61:09:27:94:08:9e:a7:74:ea:76: 79:26:7e:c4:60:7c:95:00:ea:f0:53:1b:47:d9:dc: c4:bd:a1:17:e0:a6:27:97:10:99:57:16:97:5c:b3: 63:08:2f:35:05:30:10:a4:03:2b:ed:57:c7:05:9a: ab:43:26:12:3f:ed:1c:0b:83:96:b8:86:89:f5:9d: 5d:0c:54:76:c7:40:ec:87:3d:f3:f0:d7:e3:fa:bd: db:c0:80:40:20:fe:db:47:61:68:f8:9a:37:fa:17: d2:a2:ab:25:01:b1:ba:e6:8b:a5:a8:11:5f:8e:dd: 91:a8:5c:87:f3:02:35:3d:6c:92:a9:fe:57:7a:fa: 62:eb:56:15:7d:20:21:34:6b:a4:e7:4c:9c:51:98: a1:55:04:92:90:b0:a8:db:c8:ba:7f:1d:61:60:60: 9e:80:58:07:40:af:74:ed:d5:a2:a8:7d:91:1f:54: 97:49:0d:76:c5:bb:f6:b2:87:4f:d4:12:55:02:97: da:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:12:4D:B8:F1:5A:17:DC:EF:EB:6E:6E:74:4D:AF:38:9B:B2:CA:D8 X509v3 Authority Key Identifier: keyid:AA:F1:94:33:07:0F:C6:76:FA:D6:12:06:B2:71:9A:08:5A:B3:8B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvGUMwcPxnb61hIGsnGaCFqzi-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/420E09ACCC1D11F08826FE2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.136.72.0/21 Signature Algorithm: sha256WithRSAEncryption a4:6e:30:0f:a8:1e:e6:c4:5b:2c:60:76:cd:22:e7:17:85:e5: 69:7a:a6:ff:1a:6f:17:65:7c:82:00:ca:07:36:ab:f0:0b:17: ab:10:fe:ce:a6:ad:39:7b:53:22:21:1f:62:69:b6:11:6a:c7: b3:52:a2:27:ec:30:f1:c0:64:54:8b:97:52:e1:9c:95:b4:9a: e3:f6:84:4d:5f:6d:e7:36:5e:40:65:50:75:06:e2:8d:a5:70: c7:18:6a:1c:c6:2f:31:12:2e:7e:74:fc:f9:21:a1:8d:bb:26: af:21:15:be:83:f4:8b:eb:b4:72:f2:d3:2b:56:7e:36:a1:3f: 77:b5:1d:45:df:a2:3a:54:61:a4:80:df:20:de:84:89:58:60: 4d:7b:fd:3d:aa:3d:8c:d5:e7:a2:5a:f3:56:a0:c1:6b:6a:a6: 61:58:98:9e:b9:b9:8d:65:34:28:d0:5b:21:b9:08:96:01:4c: ac:0d:cf:37:cf:95:e6:48:33:1c:89:fb:79:97:43:7f:4f:00: 45:f2:66:e7:14:10:48:9f:68:f2:76:a4:e1:07:84:e0:4f:83: b9:cd:dd:16:43:d5:ee:1e:ab:c0:eb:08:3f:6d:2b:63:b6:08: e0:3d:1d:9d:ec:68:bd:a8:cd:bd:8a:19:e2:9e:4c:31:49:eb: 0c:50:9e:11 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD M0I0RDExMC8GA1UEBRMoQUFGMTk0MzMwNzBGQzY3NkZBRDYxMjA2QjI3MTlBMDg1 QUIzOEJFNTAeFw0yNTExMjgwNTQ0MDhaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjkzNmE4LTc5ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+WwwmMchC/3riXieS51EZGF1xARzItXhLO5jg38BGbfuxmfzqJHnPcgJBExuU pVdjmzUyjOQgfc8/FfT7K6x3YQknlAiep3TqdnkmfsRgfJUA6vBTG0fZ3MS9oRfg pieXEJlXFpdcs2MILzUFMBCkAyvtV8cFmqtDJhI/7RwLg5a4hon1nV0MVHbHQOyH PfPw1+P6vdvAgEAg/ttHYWj4mjf6F9KiqyUBsbrmi6WoEV+O3ZGoXIfzAjU9bJKp /ld6+mLrVhV9ICE0a6TnTJxRmKFVBJKQsKjbyLp/HWFgYJ6AWAdAr3Tt1aKofZEf VJdJDXbFu/ayh0/UElUCl9otAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULRJNuPFa F9zv625udE2vOJuyytgwHwYDVR0jBBgwFoAUqvGUMwcPxnb61hIGsnGaCFqzi+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzQjREL0QyRDgyQkZFQ0Mx QjExRjA5NTIyNEEyQ0M0RjlBRTAyL3F2R1VNd2NQeG5iNjFoSUdzbkdhQ0Zxemkt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXZHVU13Y1B4bmI2MWhJR3NuR2FDRnF6aS1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I0RC9EMkQ4MkJGRUNDMUIxMUYwOTUyMjRBMkNDNEY5QUUwMi80MjBFMDlBQ0ND MUQxMUYwODgyNkZFMkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA3uISDANBgkqhkiG9w0BAQsFAAOCAQEApG4wD6ge5sRbLGB2 zSLnF4XlaXqm/xpvF2V8ggDKBzar8AsXqxD+zqatOXtTIiEfYmm2EWrHs1KiJ+ww 8cBkVIuXUuGclbSa4/aETV9t5zZeQGVQdQbijaVwxxhqHMYvMRIufnT8+SGhjbsm ryEVvoP0i+u0cvLTK1Z+NqE/d7UdRd+iOlRhpIDfIN6EiVhgTXv9Pao9jNXnolrz VqDBa2qmYViYnrm5jWU0KNBbIbkIlgFMrA3PN8+V5kgzHIn7eZdDf08ARfJm5xQQ SJ9o8nak4QeE4E+Duc3dFkPV7h6rwOsIP20rY7YI4D0dnexovajNvYoZ4p5MMUnr DFCeEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:24:17 2025 by rpki-client