This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa File: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (raw, json) Hash identifier: ZHT+WKdbyoyvvNK63J4HSeMmgsfLogIRNaDhpA8GNbE= Subject key identifier: 50:23:19:2F:8F:84:B6:00:BD:1E:2F:BA:82:25:40:19:14:B5:0A:BB Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 090E Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa Signing time: Wed 31 Dec 2025 20:16:53 +0000 ROA not before: Wed 31 Dec 2025 20:16:53 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 24320 IP address blocks: 202.72.240.0/24 maxlen: 24 202.72.241.0/24 maxlen: 24 202.72.242.0/24 maxlen: 24 202.72.243.0/24 maxlen: 24 202.72.244.0/24 maxlen: 24 202.72.245.0/24 maxlen: 24 202.72.246.0/24 maxlen: 24 202.72.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2318 (0x90e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: Dec 31 20:16:53 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=695584b5-76d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:32:bd:a9:a0:87:19:aa:fd:ad:3b:80:00: a2:2b:8c:da:75:fb:1f:35:30:95:8b:24:4a:1a:e4: ae:18:b0:5f:f6:11:64:28:d1:4e:87:cb:1d:c5:e2: f5:1f:99:e5:dd:29:fd:3c:12:65:3b:9e:82:88:20: 73:ea:04:34:90:45:16:96:89:dc:cb:ca:bb:2a:8a: 27:82:2e:16:26:18:6f:aa:fd:94:e9:96:0b:16:66: b7:43:cc:71:c6:7c:60:d0:41:12:58:4a:a2:52:33: 29:39:34:09:f9:78:29:61:82:89:b9:4d:3c:3e:1d: ea:78:1e:fd:3a:7c:af:c2:74:ca:33:eb:9c:02:4e: 92:cb:48:64:86:01:93:43:01:87:f2:c1:09:9e:f1: ec:bb:35:32:28:94:c4:50:61:3d:8e:32:79:f9:ef: 71:a8:9c:22:57:86:04:df:33:b8:ce:4c:1f:13:83: fe:02:b1:81:a5:33:24:6b:71:7e:6b:4c:14:54:92: cb:b4:41:b2:42:bb:74:24:cf:16:34:c5:b4:22:c1: 1b:33:e4:d1:52:17:8d:01:20:a2:9e:a3:c7:35:35: 76:a4:83:44:3c:74:7f:71:c4:67:c0:ae:de:1e:0f: ff:f4:9d:6d:23:8c:53:ef:b8:90:a7:e1:ff:72:cc: 05:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:23:19:2F:8F:84:B6:00:BD:1E:2F:BA:82:25:40:19:14:B5:0A:BB X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.72.240.0/21 Signature Algorithm: sha256WithRSAEncryption 47:62:d2:44:a4:e0:49:21:06:2c:8b:c7:2d:d1:d0:a8:f5:19: 7d:d3:db:c5:bb:3e:1e:4c:bc:13:c9:af:f4:57:08:35:0f:ce: 57:6e:bc:18:76:29:57:46:03:3c:0e:85:58:c9:6e:3b:26:dd: 83:a9:60:9d:a7:52:e3:bc:30:83:31:b6:3c:c0:6f:ee:c3:55: db:c5:00:b6:11:07:1f:30:84:f4:d7:9d:73:25:f7:13:48:9f: 73:94:a0:93:a3:4b:86:1c:a7:76:45:b7:70:ae:1f:ca:ed:ee: 42:cd:d7:b2:6f:42:df:2d:32:81:f4:71:67:1f:5c:43:43:fb: 0d:0a:2e:8e:c1:bd:40:c5:1a:d4:bc:36:c9:e4:d5:78:13:5e: 9d:58:97:4f:f2:39:e2:ae:ab:a9:ae:55:76:f6:ab:9c:cb:c1: 4f:f7:f4:e0:4c:d5:0c:a2:47:2d:75:05:4a:57:8f:08:0e:66: 87:1e:0a:ce:99:32:71:1a:e8:7f:ff:0b:b1:e3:3d:2e:3f:aa: 3c:85:a7:13:1e:d3:30:fd:cf:b3:e2:00:5f:e1:60:5f:14:d1: 77:3e:6a:0c:62:ba:19:51:80:9a:5e:27:c8:e9:2c:04:9b:1a: b1:e8:51:70:5f:68:26:d4:65:15:db:03:8b:ba:42:bf:eb:7e: c3:39:df:bc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjUxMjMxMjAxNjUzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1ODRiNS03NmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrkyvamghxmq/a07gACiK4zadfsfNTCViyRKGuSuGLBf9hFkKNFOh8sdxeL1 H5nl3Sn9PBJlO56CiCBz6gQ0kEUWloncy8q7Koongi4WJhhvqv2U6ZYLFma3Q8xx xnxg0EESWEqiUjMpOTQJ+XgpYYKJuU08Ph3qeB79OnyvwnTKM+ucAk6Sy0hkhgGT QwGH8sEJnvHsuzUyKJTEUGE9jjJ5+e9xqJwiV4YE3zO4zkwfE4P+ArGBpTMka3F+ a0wUVJLLtEGyQrt0JM8WNMW0IsEbM+TRUheNASCinqPHNTV2pINEPHR/ccRnwK7e Hg//9J1tI4xT77iQp+H/cswFgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFAjGS+P hLYAvR4vuoIlQBkUtQq7MB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg3MDQvNTY1NUFDOThCQzBDMTFFQTkxRTA5QjY4QzRGOUFFMDIvQjFBQUM1QjJC QzQxMTFFQTlBNUIyNzg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPKSPAwDQYJKoZIhvcNAQELBQADggEBAEdi0kSk4EkhBiyL xy3R0Kj1GX3T28W7Ph5MvBPJr/RXCDUPzlduvBh2KVdGAzwOhVjJbjsm3YOpYJ2n UuO8MIMxtjzAb+7DVdvFALYRBx8whPTXnXMl9xNIn3OUoJOjS4Ycp3ZFt3CuH8rt 7kLN17JvQt8tMoH0cWcfXEND+w0KLo7BvUDFGtS8Nsnk1XgTXp1Yl0/yOeKuq6mu VXb2q5zLwU/39OBM1QyiRy11BUpXjwgOZoceCs6ZMnEa6H//C7HjPS4/qjyFpxMe 0zD9z7PiAF/hYF8U0Xc+agxiuhlRgJpeJ8jpLASbGrHoUXBfaCbUZRXbA4u6Qr/r fsM537w= -----END CERTIFICATE-----Generated at Sun Jan 25 18:45:44 2026 by rpki-client