This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/5A69D6D4824811EC9AAB122AC4F9AE02.roa File: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (raw, json) Hash identifier: n4j2eKeESEfWf/zMIdNj+Wzi/ZRE3w4VQfBC7jUS+Mk= Subject key identifier: DE:7F:A1:61:55:6C:54:18:E3:6E:49:3E:92:5F:43:A1:EC:A5:90:89 Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0CFE Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/5A69D6D4824811EC9AAB122AC4F9AE02.roa Signing time: Fri 28 Nov 2025 17:50:24 +0000 ROA not before: Fri 28 Nov 2025 17:50:24 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38600 IP address blocks: 202.56.0.0/22 maxlen: 24 203.18.216.0/21 maxlen: 21 203.18.216.0/24 maxlen: 24 203.18.217.0/24 maxlen: 24 203.18.218.0/24 maxlen: 24 203.18.219.0/24 maxlen: 24 203.18.220.0/24 maxlen: 24 203.18.221.0/24 maxlen: 24 203.18.222.0/24 maxlen: 24 203.18.223.0/24 maxlen: 24 2401:9700:d000::/36 maxlen: 36 2401:9700:d000::/40 maxlen: 48 2401:9700:e000::/36 maxlen: 36 2401:9700:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3326 (0xcfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Nov 28 17:50:24 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6929e0e0-f36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:1e:65:54:bb:b3:49:73:c1:09:07:6c:9c: f9:09:a1:2e:1a:ff:1c:5a:30:0e:c7:7f:54:68:e9: 4e:18:7e:4a:a4:64:42:2a:3f:b2:4b:67:ac:a9:15: 9f:c5:42:46:26:8a:87:0a:f6:48:78:2c:5e:47:b1: 8c:a4:d9:9d:ec:68:18:3d:c7:d0:48:68:73:cc:98: 64:3b:32:51:d8:5d:c5:7d:cb:e9:f1:dc:34:bd:d0: 40:a2:b0:80:d1:ed:f3:8e:19:48:83:42:a5:b3:8f: 7d:eb:4b:4a:93:d2:f9:9f:66:03:3c:86:ef:d1:57: a5:a9:f7:63:e1:0b:e8:1b:19:0a:a8:68:88:86:66: e7:b8:18:65:54:51:43:4b:eb:46:50:44:13:44:12: 2d:29:71:28:d0:a5:70:5e:77:c2:e8:45:26:03:c8: 6e:2b:65:e9:3f:6e:ff:4e:35:74:a1:d1:97:ca:fa: 2d:41:2d:4b:d9:76:9c:c0:33:be:1d:8f:ad:3e:47: 27:d3:a8:b7:ae:34:b7:d6:e3:87:65:29:63:5d:d5: 4f:70:d8:30:a8:ab:96:30:e1:2a:d8:f8:6c:80:2c: db:9b:50:4e:7e:88:e9:02:7f:1c:94:7a:0e:ba:68: b4:aa:7f:10:38:c9:6c:c5:88:27:b6:5c:15:4e:e8: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7F:A1:61:55:6C:54:18:E3:6E:49:3E:92:5F:43:A1:EC:A5:90:89 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/5A69D6D4824811EC9AAB122AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.56.0.0/22 203.18.216.0/21 IPv6: 2401:9700:d000::-2401:9700:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 80:05:bc:30:f6:5e:fc:aa:41:dc:e2:c1:bc:aa:c6:43:96:e6: ee:27:0a:d7:cc:2e:b0:ec:47:39:1f:22:f3:d0:58:26:24:22: a2:f1:5f:77:fd:a1:46:95:81:70:eb:fd:a2:31:e3:0b:73:9c: f5:f5:55:8b:8b:90:fa:b4:f2:89:93:77:be:61:d4:02:17:50: a2:00:02:20:ee:3b:29:9c:06:87:97:91:12:f8:a5:e0:d8:d6: 06:7f:67:0f:d8:0e:4c:6d:00:b5:44:7c:26:71:21:60:30:3c: e0:d9:5f:c2:bd:10:cd:58:3a:3c:02:b4:eb:f6:c3:dd:a6:b2: 08:1b:f3:4b:34:93:f3:5a:91:82:9d:8b:e2:a4:d3:56:12:bf: 85:58:6f:03:d7:43:33:47:d3:0a:99:9f:6b:53:2b:fd:3c:34: 31:29:ef:ce:28:1b:ff:b5:81:b6:b5:83:81:2d:df:53:67:8b: dc:85:9e:d2:d5:02:e4:57:6a:a4:fc:63:26:c1:3d:af:d5:4e: dc:cd:42:e8:a6:3c:e4:89:28:a6:5c:95:ea:ac:cb:95:42:0d: c6:e6:3e:a2:ef:0e:6b:ae:15:3c:2f:9a:08:ab:e6:39:4c:fc: ae:7c:98:57:df:c6:5f:40:90:c3:ee:14:ae:3a:18:82:66:2f: 37:d2:6c:1a -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICDP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjUxMTI4MTc1MDI0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5ZTBlMC1mMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmageZVS7s0lzwQkHbJz5CaEuGv8cWjAOx39UaOlOGH5KpGRCKj+yS2esqRWf xUJGJoqHCvZIeCxeR7GMpNmd7GgYPcfQSGhzzJhkOzJR2F3Ffcvp8dw0vdBAorCA 0e3zjhlIg0Kls49960tKk9L5n2YDPIbv0Velqfdj4QvoGxkKqGiIhmbnuBhlVFFD S+tGUEQTRBItKXEo0KVwXnfC6EUmA8huK2XpP27/TjV0odGXyvotQS1L2XacwDO+ HY+tPkcn06i3rjS31uOHZSljXdVPcNgwqKuWMOEq2PhsgCzbm1BOfojpAn8clHoO umi0qn8QOMlsxYgntlwVTuhipQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFN5/oWFV bFQY425JPpJfQ6HspZCJMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTIzNjQvOEZFNzE3ODZGRjlCMTFFOUI3RjRBNzcyQzRGOUFFMDIvNUE2OUQ2RDQ4 MjQ4MTFFQzlBQUIxMjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPgYIKwYBBQUHAQcBAf8E LzAtMBIEAgABMAwDBALKOAADBAPLEtgwFwQCAAIwETAPAwYEJAGXANADBQAkAZcA MA0GCSqGSIb3DQEBCwUAA4IBAQCABbww9l78qkHc4sG8qsZDlubuJwrXzC6w7Ec5 HyLz0FgmJCKi8V93/aFGlYFw6/2iMeMLc5z19VWLi5D6tPKJk3e+YdQCF1CiAAIg 7jspnAaHl5ES+KXg2NYGf2cP2A5MbQC1RHwmcSFgMDzg2V/CvRDNWDo8ArTr9sPd prIIG/NLNJPzWpGCnYvipNNWEr+FWG8D10MzR9MKmZ9rUyv9PDQxKe/OKBv/tYG2 tYOBLd9TZ4vchZ7S1QLkV2qk/GMmwT2v1U7czULopjzkiSimXJXqrMuVQg3G5j6i 7w5rrhU8L5oIq+Y5TPyufJhX38ZfQJDD7hSuOhiCZi830mwa -----END CERTIFICATE-----Generated at Sun Dec 7 03:39:52 2025 by rpki-client