This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/229F27ACFEA411EDBC673B4BC4F9AE02.roa File: 229F27ACFEA411EDBC673B4BC4F9AE02.roa (raw, json) Hash identifier: XxjtUd/hL+kIKHkOi4rgqBJdsfuyYhtMzuXgGEu/n3U= Subject key identifier: 5A:89:03:A3:57:75:0B:9D:02:BD:E2:AF:86:CD:AD:45:B5:21:ED:D4 Certificate issuer: /CN=A91D3DAE/serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Certificate serial: 34F1 Authority key identifier: 1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/229F27ACFEA411EDBC673B4BC4F9AE02.roa Signing time: Sat 22 Nov 2025 15:00:43 +0000 ROA not before: Sat 22 Nov 2025 15:00:43 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45254 IP address blocks: 203.153.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13553 (0x34f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3DAE, serialNumber=1AEFB51DEC8EB07962A75E459CE210A7400104FB Validity Not Before: Nov 22 15:00:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6921d01b-84ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8a:c5:0c:c7:6c:43:03:d3:03:c4:2c:12:fa: be:9e:81:ed:cd:45:6e:d5:4f:53:8a:d8:95:5f:81: 10:ee:01:ee:b3:dd:af:b5:6f:45:26:6a:65:ec:e6: 45:b3:46:63:92:ba:6f:8f:94:ba:71:e7:04:63:95: 0c:aa:1a:9a:f6:c8:a6:69:39:51:35:7e:7b:6b:1d: 66:fd:55:84:c4:5d:f2:c1:11:6e:2d:47:63:bb:17: 9d:41:04:6b:22:93:63:39:1d:74:82:8c:ad:95:54: 91:1c:5b:46:79:45:9f:83:71:24:0b:0a:69:6e:20: 35:9b:a5:75:61:d6:69:1e:72:72:19:72:de:9b:53: d8:4c:fc:d0:5b:32:d7:79:b3:3f:c8:80:e2:00:ff: 63:2e:76:1f:63:5b:d1:ff:bc:89:b7:80:76:7e:f6: 8b:b2:9d:ae:bc:80:0b:99:ed:d8:dc:f5:c7:c5:a7: 9b:3e:06:b7:88:48:44:cc:f3:08:a3:99:a2:cf:3a: 57:8a:b0:bb:4d:6a:90:41:90:51:f9:f8:2f:3a:65: 72:2f:98:82:12:d9:a3:33:78:bf:98:1a:0a:14:55: d8:78:44:ae:32:1a:06:fe:33:a9:08:fa:02:7a:51: 1d:e5:3d:24:8b:f8:43:a9:11:e3:4c:c8:fe:f6:2d: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:89:03:A3:57:75:0B:9D:02:BD:E2:AF:86:CD:AD:45:B5:21:ED:D4 X509v3 Authority Key Identifier: keyid:1A:EF:B5:1D:EC:8E:B0:79:62:A7:5E:45:9C:E2:10:A7:40:01:04:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/Gu-1HeyOsHlip15FnOIQp0ABBPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gu-1HeyOsHlip15FnOIQp0ABBPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3DAE/FEFBCC8E1D8F11E2B54A7DEF08B02CD2/229F27ACFEA411EDBC673B4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.153.187.0/24 Signature Algorithm: sha256WithRSAEncryption 19:25:d6:e0:b5:c4:89:67:e8:d8:c8:20:2a:3a:f9:a6:4f:80: 77:65:d6:bc:f3:c7:24:20:81:45:8c:be:25:77:28:f8:7d:34: 9e:d1:ee:59:68:ac:e5:1d:f6:85:29:6d:8a:22:ae:85:bf:33: 3a:6f:fd:ca:0c:7b:f0:e9:ef:1b:9c:44:79:69:44:6d:da:82: 94:45:9b:b5:34:33:fa:3a:7c:af:b4:7a:c9:88:f6:fe:0b:b3: 08:f1:f5:c9:4d:0a:83:fc:a7:89:c7:85:46:95:18:9d:ac:cd: 84:7e:71:a4:76:24:0a:c5:26:8c:30:f9:54:81:29:09:bc:65: 6c:c6:f3:bc:5d:bc:b5:9f:2a:22:13:e1:17:26:b5:03:77:65: 38:58:c0:fa:cc:7f:ff:b2:6f:c3:df:8d:72:04:d9:43:87:e6: 01:cc:4c:0b:9a:f8:c9:b1:c5:69:fc:89:2c:85:d0:11:4a:b1: fe:1e:03:e3:2c:5d:87:8c:63:af:ec:4a:d0:53:a6:56:1d:6f: 38:a2:6b:54:48:1b:c4:b5:73:da:cf:24:5f:29:9c:95:24:86: f6:0a:c1:e5:7e:99:12:13:b1:6d:59:25:58:b8:ab:d7:d1:6b: 05:0c:89:28:1f:5e:07:10:af:90:6d:07:91:a8:bf:b9:e1:97: 5c:41:b5:65 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEQUUxMTAvBgNVBAUTKDFBRUZCNTFERUM4RUIwNzk2MkE3NUU0NTlDRTIxMEE3 NDAwMTA0RkIwHhcNMjUxMTIyMTUwMDQzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTIxZDAxYi04NGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2orFDMdsQwPTA8QsEvq+noHtzUVu1U9TitiVX4EQ7gHus92vtW9FJmpl7OZF s0Zjkrpvj5S6cecEY5UMqhqa9simaTlRNX57ax1m/VWExF3ywRFuLUdjuxedQQRr IpNjOR10goytlVSRHFtGeUWfg3EkCwppbiA1m6V1YdZpHnJyGXLem1PYTPzQWzLX ebM/yIDiAP9jLnYfY1vR/7yJt4B2fvaLsp2uvIALme3Y3PXHxaebPga3iEhEzPMI o5mizzpXirC7TWqQQZBR+fgvOmVyL5iCEtmjM3i/mBoKFFXYeESuMhoG/jOpCPoC elEd5T0ki/hDqRHjTMj+9i34ZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFqJA6NX dQudAr3ir4bNrUW1Ie3UMB8GA1UdIwQYMBaAFBrvtR3sjrB5YqdeRZziEKdAAQT7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0RBRS9GRUZCQ0M4RTFE OEYxMUUyQjU0QTdERUYwOEIwMkNEMi9HdS0xSGV5T3NIbGlwMTVGbk9JUXAwQUJC UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1LTFIZXlPc0hsaXAxNUZuT0lRcDBBQkJQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDNEQUUvRkVGQkNDOEUxRDhGMTFFMkI1NEE3REVGMDhCMDJDRDIvMjI5RjI3QUNG RUE0MTFFREJDNjczQjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLmbswDQYJKoZIhvcNAQELBQADggEBABkl1uC1xIln6NjI ICo6+aZPgHdl1rzzxyQggUWMviV3KPh9NJ7R7llorOUd9oUpbYoiroW/Mzpv/coM e/Dp7xucRHlpRG3agpRFm7U0M/o6fK+0esmI9v4Lswjx9clNCoP8p4nHhUaVGJ2s zYR+caR2JArFJoww+VSBKQm8ZWzG87xdvLWfKiIT4RcmtQN3ZThYwPrMf/+yb8Pf jXIE2UOH5gHMTAua+MmxxWn8iSyF0BFKsf4eA+MsXYeMY6/sStBTplYdbziia1RI G8S1c9rPJF8pnJUkhvYKweV+mRITsW1ZJVi4q9fRawUMiSgfXgcQr5BtB5Gov7nh l1xBtWU= -----END CERTIFICATE-----Generated at Sun Dec 7 02:47:52 2025 by rpki-client