This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/89E51722DF9011EFB2CE892EC4F9AE02.roa File: 89E51722DF9011EFB2CE892EC4F9AE02.roa (raw, json) Hash identifier: Um4faPIiYV0iT9wtSPwe9PJLjNj/ZKWxcpuZEn8fwZQ= Subject key identifier: 2D:E0:13:D8:DD:84:56:C9:91:15:C6:C1:D4:99:0C:33:4F:B8:58:1F Certificate issuer: /CN=A91F8357/serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Certificate serial: A9 Authority key identifier: 36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/89E51722DF9011EFB2CE892EC4F9AE02.roa Signing time: Wed 03 Dec 2025 05:04:38 +0000 ROA not before: Wed 03 Dec 2025 05:04:38 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 140637 IP address blocks: 143.174.192.0/21 maxlen: 21 143.174.200.0/21 maxlen: 21 192.199.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8357, serialNumber=361FADA2E0A88CF287F4CE6CC3B4462C91330BFC Validity Not Before: Dec 3 05:04:38 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692fc4e5-c802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:e1:00:3d:01:d3:55:47:be:69:27:ed:b2: 77:9f:ee:70:90:29:ab:1d:f2:bd:6a:36:ee:0b:fe: 8a:8f:c8:47:a8:60:8a:bd:cd:4b:ce:89:06:d4:7f: 31:47:23:b7:f8:25:8a:64:f6:b7:b2:03:bb:2c:8b: bf:25:cf:57:93:31:45:41:46:ee:cf:bd:dd:58:bc: 15:81:ff:db:a6:06:32:87:54:12:94:9e:81:52:fe: d3:54:78:66:3e:d3:50:e7:c0:fc:3a:20:ea:84:71: bb:5e:35:a6:5e:2d:01:ab:03:fe:7f:44:e6:56:34: f5:2b:f2:d8:df:fe:93:67:c8:a6:98:3c:d9:3f:e6: f0:94:36:6b:83:17:39:b9:55:c1:a2:6f:36:e8:56: 02:63:ab:4f:7f:07:b4:a7:74:16:8e:ed:c3:34:c9: 3b:cd:b5:e5:35:71:9e:e1:17:13:45:fd:4b:db:b2: 43:45:c6:86:2e:73:dc:f5:fd:19:74:27:c4:fb:b3: d3:a7:94:8c:36:0b:ed:b8:cc:83:0f:78:e4:e7:bb: 55:11:07:c9:68:fc:5d:a9:c8:81:07:67:69:32:4e: 74:ed:bc:79:37:37:7b:36:85:13:c8:05:75:45:bf: 90:9c:6f:53:0a:82:81:1d:70:8e:f5:96:9f:32:84: fa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E0:13:D8:DD:84:56:C9:91:15:C6:C1:D4:99:0C:33:4F:B8:58:1F X509v3 Authority Key Identifier: keyid:36:1F:AD:A2:E0:A8:8C:F2:87:F4:CE:6C:C3:B4:46:2C:91:33:0B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/Nh-touCojPKH9M5sw7RGLJEzC_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Nh-touCojPKH9M5sw7RGLJEzC_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/14A78F2CDF8A11EF87472B74C4F9AE02/89E51722DF9011EFB2CE892EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.174.192.0/20 192.199.32.0/21 Signature Algorithm: sha256WithRSAEncryption 13:88:b2:ea:1c:00:59:9d:28:01:c8:bd:95:3c:bd:05:8b:d3: 76:c8:b2:30:ea:ab:5d:38:5b:d0:09:0f:01:07:ae:4b:a0:ff: dd:91:9e:1e:af:dd:c9:85:b9:59:0a:70:94:78:d1:0b:30:4c: e7:33:97:fd:2c:4b:4a:33:14:e8:40:5a:14:cc:c9:3a:86:69: e8:fe:c7:bc:a0:b8:64:cc:02:76:59:80:2e:c1:f5:33:f5:25: a5:f2:d4:f5:20:41:52:24:dc:11:72:7e:87:43:a9:18:a1:e3: 2b:a0:bf:46:2d:f4:35:51:55:b2:65:2e:7b:3a:34:86:bc:45: 38:d4:50:7f:f3:53:5a:7a:92:17:74:2a:f0:19:8f:df:7c:6d: 42:c4:fb:9d:8f:9f:df:c2:b6:04:95:0a:af:9d:72:f3:20:0f: a7:2c:14:1b:10:89:94:eb:db:d8:17:f4:1c:a3:c5:3f:11:f2: 5e:20:77:16:cb:44:35:94:21:90:49:6f:e6:c7:51:89:50:83: 18:38:df:22:75:ef:ad:cb:30:0b:80:35:9c:fc:a4:73:09:8c: 6f:6c:09:74:a7:36:d9:b6:22:6b:ed:78:4f:f3:7c:3f:5e:70: c0:8e:99:68:b0:4c:1c:90:76:32:a7:50:21:75:5e:6f:ca:e6: 3d:7d:b2:74 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzNTcxMTAvBgNVBAUTKDM2MUZBREEyRTBBODhDRjI4N0Y0Q0U2Q0MzQjQ0NjJD OTEzMzBCRkMwHhcNMjUxMjAzMDUwNDM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmYzRlNS1jODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3fhAD0B01VHvmkn7bJ3n+5wkCmrHfK9ajbuC/6Kj8hHqGCKvc1LzokG1H8x RyO3+CWKZPa3sgO7LIu/Jc9XkzFFQUbuz73dWLwVgf/bpgYyh1QSlJ6BUv7TVHhm PtNQ58D8OiDqhHG7XjWmXi0BqwP+f0TmVjT1K/LY3/6TZ8immDzZP+bwlDZrgxc5 uVXBom826FYCY6tPfwe0p3QWju3DNMk7zbXlNXGe4RcTRf1L27JDRcaGLnPc9f0Z dCfE+7PTp5SMNgvtuMyDD3jk57tVEQfJaPxdqciBB2dpMk507bx5Nzd7NoUTyAV1 Rb+QnG9TCoKBHXCO9ZafMoT6pwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC3gE9jd hFbJkRXGwdSZDDNPuFgfMB8GA1UdIwQYMBaAFDYfraLgqIzyh/TObMO0RiyRMwv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xNEE3OEYyQ0RG OEExMUVGODc0NzJCNzRDNEY5QUUwMi9OaC10b3VDb2pQS0g5TTVzdzdSR0xKRXpD X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05oLXRvdUNvalBLSDlNNXN3N1JHTEpFekNfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgzNTcvMTRBNzhGMkNERjhBMTFFRjg3NDcyQjc0QzRGOUFFMDIvODlFNTE3MjJE RjkwMTFFRkIyQ0U4OTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBASPrsADBAPAxyAwDQYJKoZIhvcNAQELBQADggEBABOIsuoc AFmdKAHIvZU8vQWL03bIsjDqq104W9AJDwEHrkug/92Rnh6v3cmFuVkKcJR40Qsw TOczl/0sS0ozFOhAWhTMyTqGaej+x7yguGTMAnZZgC7B9TP1JaXy1PUgQVIk3BFy fodDqRih4yugv0Yt9DVRVbJlLns6NIa8RTjUUH/zU1p6khd0KvAZj998bULE+52P n9/CtgSVCq+dcvMgD6csFBsQiZTr29gX9ByjxT8R8l4gdxbLRDWUIZBJb+bHUYlQ gxg43yJ1763LMAuANZz8pHMJjG9sCXSnNtm2ImvteE/zfD9ecMCOmWiwTByQdjKn UCF1Xm/K5j19snQ= -----END CERTIFICATE-----Generated at Sun Dec 7 00:44:44 2025 by rpki-client