This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/233533AABAE011F09A0D810BC4F9AE02.roa File: 233533AABAE011F09A0D810BC4F9AE02.roa (raw, json) Hash identifier: tvFbBzaDYUotRjgEHrDkKjONeDoR4INE8M3QZSE99/U= Subject key identifier: E0:7E:F3:4D:19:AA:91:00:54:5C:A0:7D:CC:3B:D0:DF:77:04:1B:05 Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 22E2 Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/233533AABAE011F09A0D810BC4F9AE02.roa Signing time: Thu 06 Nov 2025 07:14:25 +0000 ROA not before: Thu 06 Nov 2025 07:14:25 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 63980 IP address blocks: 59.153.200.0/23 maxlen: 24 103.57.20.0/22 maxlen: 24 2402:5380::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8930 (0x22e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: Nov 6 07:14:25 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=690c4ad1-2007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:6b:98:68:0d:8e:cf:78:a5:59:89:01:88: d0:75:e5:f1:05:a9:8f:c1:57:49:db:be:5c:80:52: ce:cf:ca:e3:91:4d:1b:51:8c:32:42:60:31:3a:51: 8e:15:16:db:dd:35:92:5d:3b:93:eb:28:91:2c:65: b8:d4:ae:64:81:06:16:34:20:62:56:45:3d:47:3c: ce:11:50:30:39:19:4c:83:e3:1f:c2:30:76:eb:0c: f6:c3:8a:9c:f7:d1:76:24:86:b5:17:4c:03:fa:af: 4f:40:31:0c:55:62:d3:0f:ea:0e:08:25:6b:5b:5b: 60:75:f9:df:78:42:b6:21:69:ef:c9:f8:c6:9d:c2: 36:89:d0:1f:8a:85:5c:83:92:12:36:62:ea:07:54: 5f:48:83:78:52:f7:ac:50:6d:79:45:2a:13:36:83: f9:93:d6:d4:dd:cb:83:ca:38:cb:75:6a:d6:5d:1f: 9d:00:23:be:3a:07:88:0e:59:a8:7b:3a:30:d8:45: cb:55:1a:66:19:90:6a:c1:b2:2b:df:b5:d9:d3:04: 1f:9a:03:6c:ee:c4:b5:74:24:89:0a:ae:81:03:4b: a9:b3:b3:49:31:d3:56:43:a2:89:bb:f5:ab:c0:0e: d7:1f:73:d5:64:56:75:a1:16:71:d8:f5:99:20:86: 36:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:F3:4D:19:AA:91:00:54:5C:A0:7D:CC:3B:D0:DF:77:04:1B:05 X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/233533AABAE011F09A0D810BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.200.0/23 103.57.20.0/22 IPv6: 2402:5380::/32 Signature Algorithm: sha256WithRSAEncryption 42:8b:2f:f9:e2:77:8f:c9:d7:96:47:fe:37:f9:05:e5:e5:bb: a2:3e:c8:8f:4b:cb:7a:e3:5c:bd:85:96:9b:82:7b:a3:44:87: 9d:9c:56:09:ad:2f:1e:9f:51:ed:76:20:77:01:ec:83:06:6f: 83:fa:c0:0d:f7:b2:d1:67:f9:50:1e:2b:63:b6:d2:91:0f:7c: be:d6:36:45:35:98:0a:80:57:57:d8:16:0d:03:5b:6d:e8:13: 9b:26:cb:19:36:4d:c7:d7:33:2f:43:eb:42:d9:ed:36:d8:38: d6:d5:2c:24:4c:6d:e5:2c:c1:57:dd:56:f3:09:d9:37:7a:72: 82:91:8b:b7:7e:33:a6:7b:93:57:80:64:8d:7f:85:4c:15:f0: 60:ff:a9:56:f9:a9:0f:b5:6f:b7:72:08:d5:db:e0:11:fa:5c: d2:6e:ba:fb:32:87:99:da:0d:3a:64:e3:44:5d:32:ab:50:ad: 7b:d8:fd:1e:49:7a:7d:ea:2a:8e:1e:e6:c9:7c:25:cb:af:bc: e5:77:03:b3:71:cd:35:4e:81:86:dd:c2:88:a9:9c:fb:0a:4f: 4b:67:e5:92:43:e4:64:0a:28:0b:c9:24:3f:76:9c:d2:d5:ed: 0a:0c:24:66:32:e9:88:9a:22:cf:18:c9:eb:e4:4c:fa:fc:9b: 61:fc:a8:2c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICIuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjUxMTA2MDcxNDI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBjNGFkMS0yMDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj1rmGgNjs94pVmJAYjQdeXxBamPwVdJ275cgFLOz8rjkU0bUYwyQmAxOlGO FRbb3TWSXTuT6yiRLGW41K5kgQYWNCBiVkU9RzzOEVAwORlMg+MfwjB26wz2w4qc 99F2JIa1F0wD+q9PQDEMVWLTD+oOCCVrW1tgdfnfeEK2IWnvyfjGncI2idAfioVc g5ISNmLqB1RfSIN4UvesUG15RSoTNoP5k9bU3cuDyjjLdWrWXR+dACO+OgeIDlmo ezow2EXLVRpmGZBqwbIr37XZ0wQfmgNs7sS1dCSJCq6BA0ups7NJMdNWQ6KJu/Wr wA7XH3PVZFZ1oRZx2PWZIIY2WwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOB+800Z qpEAVFygfcw70N93BBsFMB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJBMUMvNjNCMjE0QTJDODE1MTFFNTgxRDIwODg0QzRGOUFFMDIvMjMzNTMzQUFC QUUwMTFGMDlBMEQ4MTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAE7mcgDBAJnORQwDQQCAAIwBwMFACQCU4AwDQYJKoZIhvcN AQELBQADggEBAEKLL/nid4/J15ZH/jf5BeXlu6I+yI9Ly3rjXL2FlpuCe6NEh52c VgmtLx6fUe12IHcB7IMGb4P6wA33stFn+VAeK2O20pEPfL7WNkU1mAqAV1fYFg0D W23oE5smyxk2TcfXMy9D60LZ7TbYONbVLCRMbeUswVfdVvMJ2Td6coKRi7d+M6Z7 k1eAZI1/hUwV8GD/qVb5qQ+1b7dyCNXb4BH6XNJuuvsyh5naDTpk40RdMqtQrXvY /R5Jen3qKo4e5sl8JcuvvOV3A7NxzTVOgYbdwoipnPsKT0tn5ZJD5GQKKAvJJD92 nNLV7QoMJGYy6YiaIs8YyevkTPr8m2H8qCw= -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:02 2025 by rpki-client