This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa File: A3E08ED6825711EFB7585B6FC4F9AE02.roa (raw, json) Hash identifier: 1Bxl9vHMR4K0dXCavsLXW0UxkDhTA+3Edc4fDYeGeeM= Subject key identifier: DB:42:63:BF:D7:5E:11:EB:F7:2E:71:6A:55:D1:9D:14:9A:CB:6E:C6 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 01D2 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa Signing time: Fri 19 Dec 2025 03:23:01 +0000 ROA not before: Fri 19 Dec 2025 03:23:01 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151987 IP address blocks: 203.99.144.0/24 maxlen: 24 2001:df3:18c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Dec 19 03:23:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6944c515-a84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:8e:74:28:1f:ae:70:55:db:b7:ce:53:dd: 84:83:1c:6e:d1:dc:33:2c:69:dc:3e:82:c3:14:97: 7e:49:ac:c1:33:f5:b0:d1:47:02:a8:2e:fe:bc:42: ce:31:7f:81:b1:50:6a:45:7f:d4:47:5b:4a:40:b0: 95:57:a5:33:0b:0e:ac:66:25:8b:db:16:0d:ee:92: 5d:08:fe:34:79:41:d4:14:90:45:76:05:73:41:5a: e9:86:a6:2b:37:71:08:39:07:2a:44:35:5a:4d:ac: 5c:ac:d3:27:88:01:87:a1:1e:62:88:7b:fb:ab:7e: 5f:44:63:4a:38:97:c9:0c:40:89:9c:ec:f8:e7:d3: 1d:90:01:ad:41:76:1c:ca:a9:71:d0:2e:0a:ee:6f: be:74:4f:45:fc:5d:c4:8d:8d:e9:0e:e3:aa:66:e9: 34:27:16:5c:95:d6:21:79:cf:b0:95:6e:5b:b6:06: f5:79:58:e5:35:4b:23:66:d3:b2:c7:19:b6:86:4e: b2:64:93:96:55:1e:9f:3f:60:2d:dc:5e:a6:92:e1: 01:76:ae:2b:37:52:f4:36:ce:4d:b4:6e:18:78:60: 0a:87:6a:1a:3a:59:b0:26:f0:56:9c:9c:90:50:23: 2e:f8:d9:54:a2:63:9d:96:63:f7:c5:0d:57:b7:06: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:42:63:BF:D7:5E:11:EB:F7:2E:71:6A:55:D1:9D:14:9A:CB:6E:C6 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/A3E08ED6825711EFB7585B6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.99.144.0/24 IPv6: 2001:df3:18c0::/48 Signature Algorithm: sha256WithRSAEncryption 00:62:1e:15:ef:54:df:27:65:76:89:49:ef:81:e5:46:f7:bd: a1:c2:ea:2b:1a:73:a7:e1:7f:81:87:56:ea:62:20:69:fb:59: 3a:dc:eb:4b:92:49:05:04:d7:61:f2:0c:eb:a1:ef:ad:bb:b0: 62:2f:a8:70:cf:e5:4b:35:28:e5:0d:bf:2d:fc:f7:69:fb:e9: a6:e2:48:48:7b:4e:26:4d:8e:2c:36:32:17:94:bb:f6:4e:53: 19:ae:e8:31:9d:88:31:45:3e:0c:b8:68:d3:03:56:5d:be:14: a1:7b:6b:00:08:18:6f:df:22:ec:97:13:02:9c:b7:a2:da:6a: f3:9d:53:76:2a:12:4f:f6:cf:01:85:b2:1d:a1:ae:ad:cd:79: 3e:d3:7e:a5:ac:48:25:cb:63:e0:a0:3e:f1:79:f8:19:0e:01: 24:9d:e9:f9:0b:95:3c:cf:4e:07:0d:e7:1d:00:ed:d2:26:23: 10:5c:c4:0e:1e:aa:4d:57:5d:08:33:cd:ee:9c:df:43:ca:a5: 6b:1e:e1:16:15:20:71:34:a1:fc:5c:a8:a0:d0:7d:9e:a6:84: 3e:7f:7d:d4:43:1b:b7:98:4e:43:b6:08:7c:b4:d6:0f:f5:fa: d3:cf:56:9b:0e:31:d9:58:4d:79:25:8f:33:8e:2c:d8:51:c9: 0f:91:0b:06 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUxMjE5MDMyMzAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ0YzUxNS1hODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlKOdCgfrnBV27fOU92Egxxu0dwzLGncPoLDFJd+SazBM/Ww0UcCqC7+vELO MX+BsVBqRX/UR1tKQLCVV6UzCw6sZiWL2xYN7pJdCP40eUHUFJBFdgVzQVrphqYr N3EIOQcqRDVaTaxcrNMniAGHoR5iiHv7q35fRGNKOJfJDECJnOz459MdkAGtQXYc yqlx0C4K7m++dE9F/F3EjY3pDuOqZuk0JxZcldYhec+wlW5btgb1eVjlNUsjZtOy xxm2hk6yZJOWVR6fP2At3F6mkuEBdq4rN1L0Ns5NtG4YeGAKh2oaOlmwJvBWnJyQ UCMu+NlUomOdlmP3xQ1XtwZYqwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNtCY7/X XhHr9y5xalXRnRSay27GMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwOUMvRUVGNzYyQzA5MDc1MTFFRTg3RDI2NjgwQzRGOUFFMDIvQTNFMDhFRDY4 MjU3MTFFRkI3NTg1QjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLY5AwDwQCAAIwCQMHACABDfMYwDANBgkqhkiG9w0BAQsF AAOCAQEAAGIeFe9U3ydldolJ74HlRve9ocLqKxpzp+F/gYdW6mIgaftZOtzrS5JJ BQTXYfIM66HvrbuwYi+ocM/lSzUo5Q2/Lfz3afvppuJISHtOJk2OLDYyF5S79k5T Ga7oMZ2IMUU+DLho0wNWXb4UoXtrAAgYb98i7JcTApy3otpq851TdioST/bPAYWy HaGurc15PtN+paxIJctj4KA+8Xn4GQ4BJJ3p+QuVPM9OBw3nHQDt0iYjEFzEDh6q TVddCDPN7pzfQ8qlax7hFhUgcTSh/FyooNB9nqaEPn991EMbt5hOQ7YIfLTWD/X6 089Wmw4x2VhNeSWPM44s2FHJD5ELBg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:22:11 2025 by rpki-client