This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49567968D07011F0A2852929C4F9AE02.roa File: 49567968D07011F0A2852929C4F9AE02.roa (raw, json) Hash identifier: PF1d1ziol4FXUWz4ISGS+v7Olmqbj3/UyDns6YPBaT0= Subject key identifier: 98:C6:64:64:E0:5E:C5:A3:C8:86:14:FD:16:D3:58:34:DC:4C:AA:66 Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 21F5 Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49567968D07011F0A2852929C4F9AE02.roa Signing time: Wed 03 Dec 2025 18:07:22 +0000 ROA not before: Wed 03 Dec 2025 18:07:22 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 198949 IP address blocks: 43.245.52.0/22 maxlen: 24 203.17.36.0/24 maxlen: 24 203.170.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8693 (0x21f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Dec 3 18:07:22 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69307c59-db28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:96:d3:02:8b:0e:8c:fd:e8:59:bc:38:0b: 99:71:33:4e:d9:25:fa:6a:78:80:40:ed:7e:95:3a: 87:d3:62:8f:ae:f3:98:64:1a:f2:07:32:e4:91:25: e8:ef:20:f3:82:ea:5d:a9:71:76:0a:3a:3b:3a:c5: 06:09:36:0e:4b:96:16:a0:6a:85:08:c8:e4:18:27: 24:4d:8f:e4:27:3d:9e:6b:32:b6:c1:b1:b4:ee:1f: 56:14:1a:94:86:83:55:42:a6:0e:44:a1:01:49:0a: be:0d:e3:e3:d2:55:35:fa:8b:6e:27:76:8b:28:14: 93:37:b6:b3:34:9d:12:c8:c4:25:0c:b3:8d:13:8e: 0b:98:bc:15:16:94:e8:00:9b:a9:a1:05:28:b9:b4: 6f:fb:65:0b:68:2c:96:8b:a2:cb:7d:27:a5:0c:08: 85:3a:0b:c6:7f:c5:95:6d:05:ec:60:28:69:1a:eb: a7:de:ba:45:a1:7a:e5:fc:90:7d:89:6c:29:2f:2b: 1a:f3:10:e9:41:89:6b:3d:68:c8:4c:ba:6a:3e:48: bb:31:ab:60:21:a3:23:95:51:49:4f:4a:91:41:40: da:b1:66:73:a1:2e:3c:58:30:67:61:7d:72:f9:c2: 6a:41:55:a0:94:da:52:cb:c0:5c:e3:03:bd:16:dc: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C6:64:64:E0:5E:C5:A3:C8:86:14:FD:16:D3:58:34:DC:4C:AA:66 X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/49567968D07011F0A2852929C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.52.0/22 203.17.36.0/24 203.170.80.0/21 Signature Algorithm: sha256WithRSAEncryption 31:1d:9e:52:e3:c9:34:f9:23:d2:ce:35:1b:33:6d:8f:c6:a2: 42:8f:83:3a:7b:58:63:c3:1a:67:17:2b:26:69:e2:60:72:0b: c9:25:cf:ba:72:82:12:2c:3e:9a:af:98:b3:6e:c6:f8:ee:0d: 8f:d1:31:4d:77:6d:3e:a0:92:82:58:71:26:a1:62:c1:3a:b8: db:7c:0f:a0:65:70:03:01:1d:f3:a4:d2:78:53:51:02:89:37: 75:f0:4c:22:f8:8d:56:27:6c:36:3c:f2:14:5f:8a:bf:24:50: ff:2c:c5:f4:21:92:cc:6e:a4:d2:79:4a:30:da:4e:35:b8:3c: d9:09:7e:b5:92:20:11:bd:a7:7d:28:76:da:32:d3:21:84:0d: a1:c2:81:29:bd:1a:57:0f:72:52:df:a8:63:27:e8:31:2a:f7: 27:28:2f:46:2e:51:cd:1f:d7:6d:87:08:ac:2a:5c:97:bb:c6: b0:4c:0b:05:f6:c3:0b:51:15:c4:87:f2:d7:2c:24:ea:3e:69: 9c:dc:51:bb:16:42:89:d3:0b:bf:6b:33:e2:cc:de:16:88:fc: fb:eb:96:c4:6c:45:71:ec:d4:f4:16:98:df:2a:4b:1b:08:91: cd:7f:52:66:d9:fc:4f:14:6d:16:51:ff:d2:20:8d:3e:c9:ad: 00:62:2f:54 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICIfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjUxMjAzMTgwNzIyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMwN2M1OS1kYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CmW0wKLDoz96Fm8OAuZcTNO2SX6aniAQO1+lTqH02KPrvOYZBryBzLkkSXo 7yDzgupdqXF2Cjo7OsUGCTYOS5YWoGqFCMjkGCckTY/kJz2eazK2wbG07h9WFBqU hoNVQqYORKEBSQq+DePj0lU1+otuJ3aLKBSTN7azNJ0SyMQlDLONE44LmLwVFpTo AJupoQUoubRv+2ULaCyWi6LLfSelDAiFOgvGf8WVbQXsYChpGuun3rpFoXrl/JB9 iWwpLysa8xDpQYlrPWjITLpqPki7MatgIaMjlVFJT0qRQUDasWZzoS48WDBnYX1y +cJqQVWglNpSy8Bc4wO9Ftyi3QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJjGZGTg XsWjyIYU/RbTWDTcTKpmMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM3OTQvMjBGRTU2MTZFOThGMTFFNUEzREREQzY2QzRGOUFFMDIvNDk1Njc5NjhE MDcwMTFGMEEyODUyOTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr9TQDBADLESQDBAPLqlAwDQYJKoZIhvcNAQELBQADggEB ADEdnlLjyTT5I9LONRszbY/GokKPgzp7WGPDGmcXKyZp4mByC8klz7pyghIsPpqv mLNuxvjuDY/RMU13bT6gkoJYcSahYsE6uNt8D6BlcAMBHfOk0nhTUQKJN3XwTCL4 jVYnbDY88hRfir8kUP8sxfQhksxupNJ5SjDaTjW4PNkJfrWSIBG9p30odtoy0yGE DaHCgSm9GlcPclLfqGMn6DEq9ycoL0YuUc0f122HCKwqXJe7xrBMCwX2wwtRFcSH 8tcsJOo+aZzcUbsWQonTC79rM+LM3haI/PvrlsRsRXHs1PQWmN8qSxsIkc1/UmbZ /E8UbRZR/9IgjT7JrQBiL1Q= -----END CERTIFICATE-----Generated at Sat Dec 6 19:51:17 2025 by rpki-client