This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/220E32CEFEA411EDBC673B4BC4F9AE02.roa File: 220E32CEFEA411EDBC673B4BC4F9AE02.roa (raw, json) Hash identifier: amc5JKgDCW0FwP7fqve5MmmvPdX66HObowu8LFy8/hw= Subject key identifier: C3:04:0A:EF:C8:A4:BF:69:40:37:70:71:52:AD:4A:E5:EF:9E:CD:4A Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 34F0 Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/220E32CEFEA411EDBC673B4BC4F9AE02.roa Signing time: Sat 22 Nov 2025 15:00:43 +0000 ROA not before: Sat 22 Nov 2025 15:00:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24299 IP address blocks: 202.43.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Nov 22 15:00:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6921d01a-f7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:13:59:e5:37:89:4f:98:b3:0a:97:00:d5: c0:0f:3b:89:61:c1:67:7f:4f:18:e4:25:85:af:35: 00:f7:fc:1f:6e:ab:12:da:4a:17:81:72:f0:a2:06: 75:03:cd:2e:bb:e4:91:fe:1e:2a:22:d6:7d:67:c3: 65:a6:02:fc:bc:29:32:26:56:50:6c:8e:bb:d9:8a: 73:a0:43:6d:75:74:22:a8:bb:9c:8c:0f:78:6d:70: 1c:10:65:2f:5e:c5:5c:dc:6b:e2:89:db:76:b0:a6: 71:38:30:6e:5b:39:ba:32:16:b9:b6:bd:d3:94:d0: ea:ad:84:d8:42:09:15:e0:e9:95:2f:a0:d8:47:97: 49:0d:81:65:b8:00:7f:be:bf:62:9c:65:29:ca:12: 8b:b1:2a:42:bf:5a:4c:6a:7b:96:e1:7f:aa:af:31: a2:90:79:91:a3:99:52:70:58:c3:8b:52:86:1d:6a: d1:92:4e:c3:51:16:48:50:49:23:a6:8f:27:54:47: f1:b6:dc:61:d5:64:10:43:a9:40:1d:90:bb:0d:97: bc:18:37:35:56:9a:eb:d6:6a:bb:93:f2:4c:6b:09: c8:64:a6:73:b7:41:81:d8:41:19:4d:ec:61:7b:5a: bb:ad:f3:39:94:03:cf:b9:43:18:04:fc:db:cb:5b: e2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:04:0A:EF:C8:A4:BF:69:40:37:70:71:52:AD:4A:E5:EF:9E:CD:4A X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/220E32CEFEA411EDBC673B4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.43.32.0/20 Signature Algorithm: sha256WithRSAEncryption a0:39:4c:36:1a:74:c1:c0:61:26:cf:6d:17:f1:1e:b1:44:e9: ed:33:da:90:76:f8:05:b0:33:2a:06:23:92:17:ac:f6:2b:6c: 5a:83:71:2a:dc:f5:f0:49:39:81:4b:88:dc:39:10:10:f4:6a: 0a:71:7f:f8:96:3d:b8:f1:a4:03:33:b9:bd:c4:f7:e6:f1:53: f2:f3:69:c9:b3:2b:38:71:e4:07:0f:3a:51:8e:53:9a:40:8c: fd:9d:04:ee:aa:61:86:51:32:51:c3:95:5c:15:1f:44:02:3c: fa:38:60:2d:56:ad:c7:1f:8a:15:2f:60:e8:6b:0a:14:3a:87: 2e:79:d9:51:3c:ee:0f:bb:a6:ec:fe:1c:a2:36:f8:62:c0:e7: 73:a7:69:ac:1b:54:7f:18:e9:96:d9:44:fb:8f:99:85:6a:ba: e5:ea:d6:f7:ee:8c:f9:9b:0b:8f:b0:98:d2:c5:f6:58:8a:62: 0c:be:06:04:69:44:d0:32:32:ca:5b:b1:9e:a3:d5:27:46:2a: 4c:e8:a9:68:5d:d2:b3:6e:9e:8d:0f:88:42:92:3d:fd:46:af: 75:d1:da:69:56:88:93:93:96:0c:e4:2a:aa:5e:e8:4e:2d:d5: 95:26:e5:ae:fd:85:78:e0:28:21:ef:bc:6f:62:93:d8:29:ec: 18:a2:81:51 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjUxMTIyMTUwMDQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTIxZDAxYS1mN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/YTWeU3iU+YswqXANXADzuJYcFnf08Y5CWFrzUA9/wfbqsS2koXgXLwogZ1 A80uu+SR/h4qItZ9Z8NlpgL8vCkyJlZQbI672YpzoENtdXQiqLucjA94bXAcEGUv XsVc3Gviidt2sKZxODBuWzm6Mha5tr3TlNDqrYTYQgkV4OmVL6DYR5dJDYFluAB/ vr9inGUpyhKLsSpCv1pManuW4X+qrzGikHmRo5lScFjDi1KGHWrRkk7DURZIUEkj po8nVEfxttxh1WQQQ6lAHZC7DZe8GDc1Vprr1mq7k/JMawnIZKZzt0GB2EEZTexh e1q7rfM5lAPPuUMYBPzby1vi5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMMECu/I pL9pQDdwcVKtSuXvns1KMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDNEQUUvRkVGQkNDOEUxRDhGMTFFMkI1NEE3REVGMDhCMDJDRDIvMjIwRTMyQ0VG RUE0MTFFREJDNjczQjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATKKyAwDQYJKoZIhvcNAQELBQADggEBAKA5TDYadMHAYSbP bRfxHrFE6e0z2pB2+AWwMyoGI5IXrPYrbFqDcSrc9fBJOYFLiNw5EBD0agpxf/iW PbjxpAMzub3E9+bxU/LzacmzKzhx5AcPOlGOU5pAjP2dBO6qYYZRMlHDlVwVH0QC PPo4YC1WrccfihUvYOhrChQ6hy552VE87g+7puz+HKI2+GLA53OnaawbVH8Y6ZbZ RPuPmYVquuXq1vfujPmbC4+wmNLF9liKYgy+BgRpRNAyMspbsZ6j1SdGKkzoqWhd 0rNuno0PiEKSPf1Gr3XR2mlWiJOTlgzkKqpe6E4t1ZUm5a79hXjgKCHvvG9ik9gp 7BiigVE= -----END CERTIFICATE-----Generated at Sun Dec 7 06:09:51 2025 by rpki-client