This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa File: 89A73D46772311EBB972032EC4F9AE02.roa (raw, json) Hash identifier: x4ObJ0WiyB3L1Gxbu271TDNMhdlJGG/Bty+LE9Lf0SI= Subject key identifier: 7A:FB:67:1E:0B:62:21:23:80:D5:65:38:95:AF:F7:2E:5B:73:75:A4 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 36EF Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa Signing time: Tue 30 Dec 2025 15:10:11 +0000 ROA not before: Tue 30 Dec 2025 15:10:11 +0000 ROA not after: Thu 30 Apr 2026 00:00:00 +0000 asID: 135538 IP address blocks: 61.45.253.0/24 maxlen: 24 2401:4601:253::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 14:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14063 (0x36ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Dec 30 15:10:11 2025 GMT Not After : Apr 30 00:00:00 2026 GMT Subject: CN=6953eb53-4dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:01:c4:b4:e7:99:5d:93:66:4d:29:18:e6: 04:a0:e1:2a:66:35:b6:eb:fe:54:41:28:01:37:ab: 3c:a7:1e:c8:ce:32:9f:e7:8f:24:60:5d:71:f1:12: ac:56:db:ff:f7:9e:20:73:6a:6e:0f:90:51:a9:89: 49:94:5f:8c:e5:c0:ef:fb:4d:6d:4a:cc:b3:26:59: 15:49:b5:c7:dc:e1:a1:a0:da:fa:d8:1f:e6:ca:89: 37:b8:b8:be:50:cb:49:60:af:87:c4:29:36:35:fb: 2b:ea:de:7f:59:32:aa:70:77:8e:5c:a9:10:bf:b3: 9f:c3:d2:ed:0d:08:5b:f3:2f:ee:81:0c:f8:55:9e: 93:c3:bf:75:a0:eb:c0:e8:fe:57:42:91:7e:32:75: 8d:3b:42:6f:37:4c:d2:a0:21:9e:4d:cd:f4:49:5d: ca:1d:e0:3a:a5:02:5e:57:6d:37:f9:a5:f9:e7:2c: 55:84:8d:80:27:b5:95:35:1f:8f:0d:2a:e4:fa:40: 80:23:b7:76:29:3f:ab:03:02:ad:f9:e3:30:18:aa: 7d:41:2e:80:d7:59:30:0b:46:df:d1:50:64:1b:55: a1:1e:a1:40:d6:ec:24:11:47:c8:a4:20:50:83:79: e7:05:c7:a2:ba:6d:d9:fb:de:03:1a:51:e2:e7:39: 72:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FB:67:1E:0B:62:21:23:80:D5:65:38:95:AF:F7:2E:5B:73:75:A4 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.45.253.0/24 IPv6: 2401:4601:253::/48 Signature Algorithm: sha256WithRSAEncryption 74:59:e4:28:97:1d:21:32:14:6e:47:0b:88:dd:18:80:c4:0a: 9d:f2:6e:57:3e:83:da:ff:95:bc:61:e9:44:11:22:34:a1:4b: c0:ee:59:af:05:e4:f2:ab:76:75:5e:db:e4:95:17:1d:1e:b5: 08:04:7d:59:61:d2:64:f1:44:e2:4f:2d:91:f9:12:6e:8f:c8: 8d:b8:d6:0a:d6:4d:f2:23:58:89:b0:39:2c:3e:4f:02:c9:5c: 12:b2:15:fa:f4:04:3f:21:db:fa:a9:d1:d4:e8:7f:ea:50:ea: f9:39:72:9e:6d:78:39:59:ef:f5:ac:81:5c:de:4e:ba:19:d0: 10:f3:4a:8c:20:0d:ab:6c:60:3c:22:a3:bf:10:27:33:6b:c7: 09:76:97:46:cb:d4:77:ae:ca:5d:d5:1f:93:d0:86:ea:e2:c0: 37:35:e0:e6:e6:98:8c:10:d5:8f:b1:43:3a:70:fe:b8:b0:fb: 1f:31:70:22:da:fa:dd:93:ef:a4:8e:eb:de:47:49:84:85:b5: ec:54:82:86:9e:53:29:fd:8c:5c:2d:45:cb:e5:20:bd:e2:41: f9:53:30:24:01:ec:f4:0e:2b:82:45:29:95:c8:aa:d2:fa:da: f0:27:1c:5a:a1:af:6f:28:22:fb:f0:ba:21:48:ee:7c:24:71: fb:10:2a:55 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjUxMjMwMTUxMDExWhcNMjYwNDMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUzZWI1My00ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLYBxLTnmV2TZk0pGOYEoOEqZjW26/5UQSgBN6s8px7IzjKf548kYF1x8RKs Vtv/954gc2puD5BRqYlJlF+M5cDv+01tSsyzJlkVSbXH3OGhoNr62B/myok3uLi+ UMtJYK+HxCk2Nfsr6t5/WTKqcHeOXKkQv7Ofw9LtDQhb8y/ugQz4VZ6Tw791oOvA 6P5XQpF+MnWNO0JvN0zSoCGeTc30SV3KHeA6pQJeV203+aX55yxVhI2AJ7WVNR+P DSrk+kCAI7d2KT+rAwKt+eMwGKp9QS6A11kwC0bf0VBkG1WhHqFA1uwkEUfIpCBQ g3nnBceium3Z+94DGlHi5zlyHQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHr7Zx4L YiEjgNVlOJWv9y5bc3WkMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvODlBNzNENDY3 NzIzMTFFQkI5NzIwMzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAA9Lf0wDwQCAAIwCQMHACQBRgECUzANBgkqhkiG9w0BAQsF AAOCAQEAdFnkKJcdITIUbkcLiN0YgMQKnfJuVz6D2v+VvGHpRBEiNKFLwO5ZrwXk 8qt2dV7b5JUXHR61CAR9WWHSZPFE4k8tkfkSbo/IjbjWCtZN8iNYibA5LD5PAslc ErIV+vQEPyHb+qnR1Oh/6lDq+Tlynm14OVnv9ayBXN5OuhnQEPNKjCANq2xgPCKj vxAnM2vHCXaXRsvUd67KXdUfk9CG6uLANzXg5uaYjBDVj7FDOnD+uLD7HzFwItr6 3ZPvpI7r3kdJhIW17FSChp5TKf2MXC1Fy+UgveJB+VMwJAHs9A4rgkUplciq0vra 8CccWqGvbygi+/C6IUjufCRx+xAqVQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:40 2026 by rpki-client