This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa File: 5480D316764D11EA8CB5C039C4F9AE02.roa (raw, json) Hash identifier: pHTu337dbSxJnT3CyDhgI/d9oBjNP9lN6T+b/cHszRk= Subject key identifier: 49:00:42:7E:89:1D:44:BD:7F:9F:12:BF:C1:80:F8:4D:E0:F3:8B:F9 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 223B Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa Signing time: Sun 16 Nov 2025 05:58:17 +0000 ROA not before: Sun 16 Nov 2025 05:58:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 56308 IP address blocks: 43.255.124.0/22 maxlen: 22 45.125.196.0/22 maxlen: 22 103.16.19.0/24 maxlen: 24 2407:8100:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8763 (0x223b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Nov 16 05:58:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=691967f9-e04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:34:f3:1f:ca:10:40:1f:c3:c2:ce:9e:2a: 0c:5b:23:2b:a0:88:8e:19:77:f6:3b:44:d9:c7:db: e4:69:8c:f6:b0:d3:d2:71:8b:5f:46:dc:c3:c0:76: eb:54:d8:f8:ea:2b:59:be:ee:2b:c9:44:8a:0a:04: 4c:03:fc:e5:c3:21:d7:4e:0b:84:8f:b7:95:ac:9c: 2c:a8:fd:aa:ba:5d:19:e0:c2:59:42:47:02:2f:57: 6f:fc:d3:60:4c:83:71:14:5b:22:0c:7e:49:02:20: ea:0c:98:79:cd:ac:c0:47:a6:70:a4:24:bc:ba:c8: e3:ff:32:32:dd:fb:65:69:23:33:fc:58:39:99:7b: 41:e5:b0:a8:5a:0b:f7:c1:de:ad:bf:c8:58:34:08: 60:10:ba:f7:69:6a:a1:d0:6b:8f:ec:1c:cb:e9:d9: de:9d:91:fb:49:7e:b4:ed:35:38:a1:4b:f3:24:cc: 52:10:df:3a:4c:16:17:cb:00:d1:44:4b:4d:e2:cd: ec:05:23:8d:b1:6d:99:ae:22:0a:07:6a:e4:95:72: 63:8e:5e:ae:5e:38:88:b2:d0:b9:38:f1:af:48:60: d7:58:30:75:3d:45:84:c5:69:9f:d8:df:c8:59:63: 55:1a:85:2e:09:0c:f4:e6:8e:03:41:04:14:c3:c7: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:00:42:7E:89:1D:44:BD:7F:9F:12:BF:C1:80:F8:4D:E0:F3:8B:F9 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.124.0/22 45.125.196.0/22 103.16.19.0/24 IPv6: 2407:8100:5::/48 Signature Algorithm: sha256WithRSAEncryption 27:ed:c5:6d:6c:5b:76:46:4c:c3:ff:34:bd:aa:3a:3d:f5:52: 6c:4b:a5:c7:84:18:1f:40:00:49:a0:0f:ed:8b:c2:4d:b9:c3: af:35:eb:58:0d:bf:08:89:5e:13:fb:0b:a5:7d:87:b7:35:42: af:53:d5:bd:94:f7:e2:58:8d:6e:ca:78:af:c3:f0:13:69:be: 01:ee:99:78:f8:7e:be:08:76:92:c9:c2:09:f3:69:0e:90:be: b8:ee:17:c8:14:39:57:cf:55:58:03:17:63:eb:cc:fd:4f:7c: 2a:ab:bb:d0:09:12:53:65:70:b0:98:85:2f:ef:97:e8:10:63: 40:f8:cb:b1:36:7a:67:7e:b5:b3:8b:ae:af:29:84:5f:c0:2f: f4:4b:5f:e4:75:2c:5b:c4:7f:48:64:ef:51:56:42:24:c7:10: cd:87:aa:a3:5d:7f:de:0d:5d:cc:4b:39:08:03:42:82:f0:4b: 9b:12:69:f0:87:bd:3f:af:b1:ac:c8:2e:9c:db:f7:6c:c1:03: c8:51:e8:06:ea:d5:5f:c1:c0:4c:03:6a:d8:17:a9:46:8d:47: 62:80:af:ac:a5:92:88:b9:09:71:16:e3:2a:c9:7d:ce:71:af: b6:ea:fb:ab:4a:14:ad:49:a4:35:f6:c2:28:e7:5b:ad:87:87: 2c:ba:90:d0 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICIjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjUxMTE2MDU1ODE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTE5NjdmOS1lMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o408x/KEEAfw8LOnioMWyMroIiOGXf2O0TZx9vkaYz2sNPScYtfRtzDwHbr VNj46itZvu4ryUSKCgRMA/zlwyHXTguEj7eVrJwsqP2qul0Z4MJZQkcCL1dv/NNg TINxFFsiDH5JAiDqDJh5zazAR6ZwpCS8usjj/zIy3ftlaSMz/Fg5mXtB5bCoWgv3 wd6tv8hYNAhgELr3aWqh0GuP7BzL6dnenZH7SX607TU4oUvzJMxSEN86TBYXywDR REtN4s3sBSONsW2ZriIKB2rklXJjjl6uXjiIstC5OPGvSGDXWDB1PUWExWmf2N/I WWNVGoUuCQz05o4DQQQUw8egqQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEkAQn6J HUS9f58Sv8GA+E3g84v5MB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNTQ4MEQzMTY3 NjREMTFFQThDQjVDMDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAIr/3wDBAItfcQDBABnEBMwDwQCAAIwCQMHACQHgQAABTAN BgkqhkiG9w0BAQsFAAOCAQEAJ+3FbWxbdkZMw/80vao6PfVSbEulx4QYH0AASaAP 7YvCTbnDrzXrWA2/CIleE/sLpX2HtzVCr1PVvZT34liNbsp4r8PwE2m+Ae6ZePh+ vgh2ksnCCfNpDpC+uO4XyBQ5V89VWAMXY+vM/U98Kqu70AkSU2VwsJiFL++X6BBj QPjLsTZ6Z361s4uurymEX8Av9Etf5HUsW8R/SGTvUVZCJMcQzYeqo11/3g1dzEs5 CANCgvBLmxJp8Ie9P6+xrMgunNv3bMEDyFHoBurVX8HATANq2BepRo1HYoCvrKWS iLkJcRbjKsl9znGvtur7q0oUrUmkNfbCKOdbrYeHLLqQ0A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:58 2025 by rpki-client