This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/2DDB3932FF4711EDA9459E3DC4F9AE02.roa File: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (raw, json) Hash identifier: znGYWacCwGwaRyaos7K6AvZznHx5iYA9Iw7SZxronyM= Subject key identifier: 8F:F5:D2:AF:B6:C3:E8:D9:10:E8:84:85:A3:EF:06:B8:4E:F9:B0:17 Certificate issuer: /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8 Certificate serial: 01D5 Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/2DDB3932FF4711EDA9459E3DC4F9AE02.roa Signing time: Tue 11 Nov 2025 01:18:15 +0000 ROA not before: Tue 11 Nov 2025 01:18:15 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 131201 IP address blocks: 202.50.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5EC, serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8 Validity Not Before: Nov 11 01:18:15 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69128ed7-3e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:cb:e7:f7:8c:6d:47:49:a3:d5:bb:f2:6c: 88:75:e5:26:0d:fb:f0:81:77:4e:33:6a:fc:e3:6b: 1a:77:d6:11:ff:da:aa:78:4b:6f:9c:64:b1:31:a0: ef:ac:bc:4d:77:02:1c:c3:ee:84:49:ff:07:fd:02: 2b:33:02:cf:69:17:81:e4:f5:9e:a0:b9:65:f3:81: 85:64:e3:ca:d4:3e:10:05:fc:5d:4d:ca:ff:30:42: e6:a6:7e:5d:95:41:e5:51:85:99:4d:95:21:ad:d1: 4b:05:fc:68:62:01:60:fd:41:79:07:25:8a:50:c2: 47:f4:31:dd:7c:c5:5b:ea:49:2d:71:14:9e:a0:ca: 4d:c2:63:ee:02:38:85:8d:b3:d7:0b:b1:f3:59:91: 7e:81:b4:dc:94:49:7b:4f:83:84:41:1c:0c:cd:2d: 37:ca:08:57:3e:87:a2:a1:9d:b9:9f:ce:f0:0a:46: e7:d6:55:7c:dd:f8:00:46:85:81:bb:ea:d5:a0:bf: e6:36:a5:e5:b1:65:d1:58:ec:29:10:42:2e:f1:da: 5c:4f:56:3c:38:32:03:56:3a:fc:ba:d4:9b:86:52: 23:f8:0e:a9:7b:1c:c3:ee:91:e0:e7:93:5a:4e:0c: 21:e3:e5:f6:28:f6:ec:93:c4:2c:5a:cc:a2:c3:a0: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F5:D2:AF:B6:C3:E8:D9:10:E8:84:85:A3:EF:06:B8:4E:F9:B0:17 X509v3 Authority Key Identifier: keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/2DDB3932FF4711EDA9459E3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.50.117.0/24 Signature Algorithm: sha256WithRSAEncryption a7:c5:6e:e4:a0:82:fe:80:71:fa:06:63:4d:6e:11:66:ff:bb: 6c:79:a0:d5:eb:31:ef:49:d3:d4:98:39:01:83:a5:bc:9d:47: 77:54:01:e3:b7:3d:77:06:63:44:f2:7b:93:5d:1e:bd:ca:c0: f9:2a:12:72:d1:df:d6:b1:ff:12:a3:91:35:55:f0:19:0a:d0: b8:55:9e:89:ed:69:6b:10:40:fd:e4:42:5c:ff:44:6f:95:18: 55:8c:04:7c:8a:7f:50:df:d2:9a:ff:5a:c6:79:ff:f2:5d:c0: 20:48:07:18:32:05:b8:95:f4:fe:14:93:6c:84:88:4a:6b:77: 07:d6:93:97:ad:79:00:12:45:d5:3f:a6:fd:5c:d3:f8:4d:aa: 2a:32:c9:89:46:24:dd:37:73:dd:40:44:97:d2:5a:0e:25:66: 2f:f0:5f:0b:11:52:04:ce:81:da:c4:ce:30:ef:23:7b:16:d5: fc:a3:88:51:2f:19:5d:a3:2f:94:ef:5d:c1:86:28:c5:bb:05: 82:02:41:39:5c:77:51:96:33:7f:0f:f7:69:11:a5:56:e5:a5: 3b:e9:1c:7d:dd:6f:60:f5:56:11:99:e3:e9:b3:a6:74:d2:78: 71:d6:7f:29:30:a9:90:cb:59:5e:29:fb:41:ed:67:bf:44:0c: 39:3f:f9:f6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1RUMxMTAvBgNVBAUTKDI2QjJDODQ2MkZFQTFEQTUxNDE2NkI1QjEzOTBBRDBD QzI3N0E1QTgwHhcNMjUxMTExMDExODE1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTEyOGVkNy0zZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgDL5/eMbUdJo9W78myIdeUmDfvwgXdOM2r842sad9YR/9qqeEtvnGSxMaDv rLxNdwIcw+6ESf8H/QIrMwLPaReB5PWeoLll84GFZOPK1D4QBfxdTcr/MELmpn5d lUHlUYWZTZUhrdFLBfxoYgFg/UF5ByWKUMJH9DHdfMVb6kktcRSeoMpNwmPuAjiF jbPXC7HzWZF+gbTclEl7T4OEQRwMzS03yghXPoeioZ25n87wCkbn1lV83fgARoWB u+rVoL/mNqXlsWXRWOwpEEIu8dpcT1Y8ODIDVjr8utSbhlIj+A6pexzD7pHg55Na Tgwh4+X2KPbsk8QsWsyiw6CgKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI/10q+2 w+jZEOiEhaPvBrhO+bAXMB8GA1UdIwQYMBaAFCayyEYv6h2lFBZrWxOQrQzCd6Wo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDVFQy8wNTMxNURFRUZE REIxMUVEQTAzMkJGNDJDNEY5QUUwMi9KckxJUmlfcUhhVVVGbXRiRTVDdERNSjNw YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pyTElSaV9xSGFVVUZtdGJFNUN0RE1KM3BhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQ1RUMvMDUzMTVERUVGRERCMTFFREEwMzJCRjQyQzRGOUFFMDIvMkREQjM5MzJG RjQ3MTFFREE5NDU5RTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKMnUwDQYJKoZIhvcNAQELBQADggEBAKfFbuSggv6AcfoG Y01uEWb/u2x5oNXrMe9J09SYOQGDpbydR3dUAeO3PXcGY0Tye5NdHr3KwPkqEnLR 39ax/xKjkTVV8BkK0LhVnontaWsQQP3kQlz/RG+VGFWMBHyKf1Df0pr/WsZ5//Jd wCBIBxgyBbiV9P4Uk2yEiEprdwfWk5eteQASRdU/pv1c0/hNqioyyYlGJN03c91A RJfSWg4lZi/wXwsRUgTOgdrEzjDvI3sW1fyjiFEvGV2jL5TvXcGGKMW7BYICQTlc d1GWM38P92kRpVblpTvpHH3db2D1VhGZ4+mzpnTSeHHWfykwqZDLWV4p+0HtZ79E DDk/+fY= -----END CERTIFICATE-----Generated at Sun Dec 7 01:46:25 2025 by rpki-client