This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa File: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (raw, json) Hash identifier: ZKTM4IqqHXDwYNaYKhi6qetROiIF+dziZqdqeG6Vrkw= Subject key identifier: 45:F8:22:96:A0:E7:1F:0E:18:D8:2B:A3:C9:7A:AF:0D:BE:4C:C8:78 Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 21F7 Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa Signing time: Wed 03 Dec 2025 18:07:23 +0000 ROA not before: Wed 03 Dec 2025 18:07:23 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 31898 IP address blocks: 27.111.92.0/22 maxlen: 24 43.245.52.0/22 maxlen: 24 203.17.36.0/24 maxlen: 24 203.170.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8695 (0x21f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Dec 3 18:07:23 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69307c5b-38ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:1d:6a:eb:2a:f5:f0:23:c1:fe:80:3f:fb: b7:72:30:2c:c4:26:e7:19:7f:0e:11:a9:60:d8:cd: bf:20:86:6e:ed:4d:d5:d1:65:78:d4:da:d6:5a:ff: bd:b0:29:9b:08:bd:09:3e:83:d8:1c:bd:b5:ed:3b: 6a:18:fc:a6:8c:c6:a7:30:3e:58:95:6f:0c:76:46: 0f:b4:c7:7d:74:bb:f6:7b:52:43:4e:8e:ea:0e:cd: bb:c3:05:d1:05:a5:9c:19:f1:2b:d4:74:40:0e:48: c2:4a:3f:eb:ba:c7:34:b5:a3:f8:e8:41:cf:a3:0f: c9:84:ac:ec:5e:45:ed:54:27:80:2d:16:8e:50:c2: 67:ec:ab:eb:07:bc:ad:85:2b:b6:37:1f:81:a0:e6: 3c:b0:4b:61:f1:ae:97:25:9a:f8:1e:61:f3:aa:41: c8:92:c3:a7:f4:5d:30:71:8f:50:de:c6:de:dd:34: 13:f5:91:8b:79:0c:92:3e:24:28:9f:07:bb:f9:85: 5a:a9:51:9b:17:6e:a5:37:57:98:d9:db:20:87:d4: 7b:ec:5e:87:ab:b4:87:42:c1:54:f3:a8:eb:0d:98: a2:98:8d:f1:24:d3:41:8a:a5:4f:64:5b:56:49:77: bc:5f:51:2a:bb:3c:19:0e:2b:64:32:65:19:83:69: d1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F8:22:96:A0:E7:1F:0E:18:D8:2B:A3:C9:7A:AF:0D:BE:4C:C8:78 X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.92.0/22 43.245.52.0/22 203.17.36.0/24 203.170.80.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:41:4e:7b:bf:4e:82:d3:ea:65:61:68:64:91:c7:5b:89:bf: e5:60:ed:88:a3:6b:e0:3b:99:f8:91:05:a1:04:fe:72:b5:99: c6:cd:50:c0:76:06:d4:38:d4:be:b9:2f:cb:27:dc:74:3b:46: 62:3a:d7:4e:71:df:d8:28:20:4f:a3:f9:1f:5a:69:64:86:75: f2:ae:39:e8:2c:8f:4e:6e:e0:be:18:23:ce:b1:79:f5:c2:cb: 5f:64:8c:2f:13:47:1e:da:3f:a5:f4:f3:0f:e2:c0:55:30:11: 87:60:b1:8a:f6:13:d8:e7:d7:57:64:9b:09:ed:08:f5:11:ca: d8:49:22:36:b3:5e:34:e9:78:6e:9d:28:96:70:49:5b:6f:4c: ab:8a:47:fc:b7:89:60:ef:d6:d6:4a:77:01:22:9c:af:db:09: 1b:e2:48:96:0d:64:44:16:a3:80:57:32:94:8a:92:e8:30:34: 98:8c:50:b5:8e:d7:58:a3:fe:6c:52:83:0c:7f:c7:3e:91:c9: 9d:1e:66:6f:74:6a:ba:c1:99:8d:28:3c:54:16:62:e5:2f:7d: a9:f1:c4:79:2e:21:2a:33:c2:c6:f3:50:23:7b:c0:f1:b6:41: 5b:06:21:45:bd:e1:3f:bf:b7:cb:ab:5e:52:0d:47:b1:1b:1f: fd:a6:9d:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICIfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjUxMjAzMTgwNzIzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMwN2M1Yi0zOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5Udausq9fAjwf6AP/u3cjAsxCbnGX8OEalg2M2/IIZu7U3V0WV41NrWWv+9 sCmbCL0JPoPYHL217TtqGPymjManMD5YlW8MdkYPtMd9dLv2e1JDTo7qDs27wwXR BaWcGfEr1HRADkjCSj/rusc0taP46EHPow/JhKzsXkXtVCeALRaOUMJn7KvrB7yt hSu2Nx+BoOY8sEth8a6XJZr4HmHzqkHIksOn9F0wcY9Q3sbe3TQT9ZGLeQySPiQo nwe7+YVaqVGbF26lN1eY2dsgh9R77F6Hq7SHQsFU86jrDZiimI3xJNNBiqVPZFtW SXe8X1EquzwZDitkMmUZg2nRWwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFEX4Ipag 5x8OGNgro8l6rw2+TMh4MB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM3OTQvMjBGRTU2MTZFOThGMTFFNUEzREREQzY2QzRGOUFFMDIvRkVEQUVCRDg5 MzI3MTFGMEI5MzA1QzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIbb1wDBAIr9TQDBADLESQDBAPLqlAwDQYJKoZIhvcNAQEL BQADggEBAB5BTnu/ToLT6mVhaGSRx1uJv+Vg7Yija+A7mfiRBaEE/nK1mcbNUMB2 BtQ41L65L8sn3HQ7RmI6105x39goIE+j+R9aaWSGdfKuOegsj05u4L4YI86xefXC y19kjC8TRx7aP6X08w/iwFUwEYdgsYr2E9jn11dkmwntCPURythJIjazXjTpeG6d KJZwSVtvTKuKR/y3iWDv1tZKdwEinK/bCRviSJYNZEQWo4BXMpSKkugwNJiMULWO 11ij/mxSgwx/xz6RyZ0eZm90arrBmY0oPFQWYuUvfanxxHkuISozwsbzUCN7wPG2 QVsGIUW94T+/t8urXlINR7EbH/2mnS0= -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:13 2025 by rpki-client