This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/08FDDCFC407111EFB0944C40C4F9AE02.roa File: 08FDDCFC407111EFB0944C40C4F9AE02.roa (raw, json) Hash identifier: qmdWFHQgb/FyavVks32QvCevHJqLrQOjarXrPqP1+5k= Subject key identifier: 65:AE:D8:55:D9:42:6B:4F:37:33:F3:6A:21:71:42:4C:3D:5E:97:ED Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: 010D Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/08FDDCFC407111EFB0944C40C4F9AE02.roa Signing time: Fri 05 Dec 2025 03:13:14 +0000 ROA not before: Fri 05 Dec 2025 03:13:14 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 56067 IP address blocks: 116.89.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Dec 5 03:13:14 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69324dc9-50e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:17:bb:43:93:f8:16:af:42:44:79:9a:f8: 5f:cf:3d:31:24:f6:85:c7:ba:15:f7:75:21:e0:e6: 6e:51:94:02:55:5c:bd:6f:95:b9:cf:f1:63:3f:59: e1:99:84:bf:e3:74:f4:bb:bd:cf:d3:35:d2:df:7a: 85:4e:92:73:3b:11:72:60:22:7e:dc:30:5c:5a:03: cf:9a:fa:8d:e7:eb:a7:8e:e2:11:26:d0:20:f5:ff: f8:da:cf:0e:0b:cf:17:d3:36:59:b6:95:80:c5:66: 72:fd:3e:7d:85:f3:b6:12:7b:37:63:21:57:4a:1e: 54:d6:c7:ad:d5:fd:75:d6:4e:bc:ae:2e:7c:39:7d: 35:99:0f:92:5c:88:27:e6:cf:c7:fd:4b:2b:30:c7: f3:95:f6:64:3b:9a:33:02:e6:be:15:64:e6:e7:09: a2:e4:80:62:f2:53:59:ae:03:fa:4f:0a:68:d8:8e: ee:2e:b9:19:42:d5:a3:23:59:ba:98:be:a1:15:f9: 17:3c:d4:69:18:da:5c:86:d6:67:b5:6c:82:58:1f: 5d:5d:de:56:dc:33:ab:4f:b1:cb:8e:c7:8d:c9:7c: 61:93:19:45:55:5f:26:df:1b:82:ec:3f:62:8f:50: 27:53:85:e6:4a:d0:b3:b9:00:f1:82:94:13:4f:f3: 65:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AE:D8:55:D9:42:6B:4F:37:33:F3:6A:21:71:42:4C:3D:5E:97:ED X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/08FDDCFC407111EFB0944C40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.89.252.0/22 Signature Algorithm: sha256WithRSAEncryption d3:b3:22:ed:f4:f3:c4:2d:98:8e:48:13:26:d6:a9:db:54:6e: cd:43:88:c6:b0:f3:1b:d2:de:fe:6f:87:99:91:1b:b8:b6:81: fb:54:aa:7f:0b:e6:fe:f2:7f:66:68:bb:54:bf:13:17:a6:5b: 50:52:d1:16:70:34:28:fc:a5:fa:2e:f7:5d:d8:6a:7d:59:75: 72:77:4f:9b:2a:6f:05:4d:6d:ee:32:59:0f:41:11:92:b5:de: 42:75:c4:c8:e7:c3:80:52:f9:0c:8c:e0:bf:53:be:7e:d5:87: a9:0b:82:74:fb:65:2f:49:6b:ff:0e:3c:64:88:59:f3:b0:9f: 30:1e:de:45:70:71:f3:e9:40:41:ed:67:82:b6:a4:07:9e:08: 1b:d4:d1:34:80:06:1c:cd:89:50:b1:a3:fb:46:5b:f4:65:1e: 64:1a:f1:20:98:97:5e:24:1c:42:72:c6:96:c7:4c:18:fe:8e: bb:69:ca:5e:62:3a:92:cc:7d:50:cf:8e:e5:0b:54:64:3c:46: a9:40:e8:b1:98:79:c6:da:f5:98:b8:b3:ca:a4:09:41:6c:fe: 74:b3:2d:a7:89:0f:6e:d6:3d:dc:81:ec:5e:0f:80:8b:1f:3f: fc:fe:3a:41:f2:22:3c:a9:b3:52:f6:7d:9b:1c:88:18:20:2e: 87:ac:08:aa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUxMjA1MDMxMzE0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMyNGRjOS01MGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2l8Xu0OT+BavQkR5mvhfzz0xJPaFx7oV93Uh4OZuUZQCVVy9b5W5z/FjP1nh mYS/43T0u73P0zXS33qFTpJzOxFyYCJ+3DBcWgPPmvqN5+unjuIRJtAg9f/42s8O C88X0zZZtpWAxWZy/T59hfO2Ens3YyFXSh5U1set1f111k68ri58OX01mQ+SXIgn 5s/H/UsrMMfzlfZkO5ozAua+FWTm5wmi5IBi8lNZrgP6Twpo2I7uLrkZQtWjI1m6 mL6hFfkXPNRpGNpchtZntWyCWB9dXd5W3DOrT7HLjseNyXxhkxlFVV8m3xuC7D9i j1AnU4XmStCzuQDxgpQTT/NlWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGWu2FXZ QmtPNzPzaiFxQkw9XpftMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQ5NUMvNUJDNjNFRjQ0MDY1MTFFRjg1NkM5RTI5QzRGOUFFMDIvMDhGRERDRkM0 MDcxMTFFRkIwOTQ0QzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ0WfwwDQYJKoZIhvcNAQELBQADggEBANOzIu3088QtmI5I EybWqdtUbs1DiMaw8xvS3v5vh5mRG7i2gftUqn8L5v7yf2Zou1S/ExemW1BS0RZw NCj8pfou913Yan1ZdXJ3T5sqbwVNbe4yWQ9BEZK13kJ1xMjnw4BS+QyM4L9Tvn7V h6kLgnT7ZS9Ja/8OPGSIWfOwnzAe3kVwcfPpQEHtZ4K2pAeeCBvU0TSABhzNiVCx o/tGW/RlHmQa8SCYl14kHEJyxpbHTBj+jrtpyl5iOpLMfVDPjuULVGQ8RqlA6LGY ecba9Zi4s8qkCUFs/nSzLaeJD27WPdyB7F4PgIsfP/z+OkHyIjyps1L2fZsciBgg LoesCKo= -----END CERTIFICATE-----Generated at Sun Dec 7 00:37:42 2025 by rpki-client