This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa File: F189CB86C81D11EBA4C0E321C4F9AE02.roa (raw, json) Hash identifier: S5y137jYfy0MIB/O4qGenQWe0yCgY06a7wP6x5FBr7o= Subject key identifier: 74:04:F2:EE:20:DA:BC:BF:14:34:03:D1:5B:C3:F9:99:6D:E6:D5:8B Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 0608 Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa Signing time: Tue 04 Nov 2025 23:13:20 +0000 ROA not before: Tue 04 Nov 2025 23:13:20 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137968 IP address blocks: 203.25.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Nov 4 23:13:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690a888f-8646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:d3:1b:de:42:84:1a:ba:1d:ce:ce:df:12: 72:da:31:4c:ed:96:91:8e:43:35:55:6d:61:fc:e4: 32:15:30:c8:fe:60:90:e8:8f:d5:99:f2:b6:c4:d4: 7c:65:c6:da:8b:d1:8b:25:dc:1e:b8:11:b8:36:fc: d4:38:bd:4f:f1:9b:dc:06:59:fa:0e:a7:34:df:1e: 9c:17:ff:b6:72:ce:f4:2e:bd:33:2c:8c:c8:e4:ff: 92:00:1b:ec:09:ab:f4:48:ea:7c:f7:4b:73:b8:77: 48:e5:24:73:26:2c:3e:d2:78:e9:32:e4:a1:e0:40: 4a:72:2e:74:26:6c:7d:33:76:24:ed:03:6e:cb:3a: db:d4:1c:3a:20:1c:da:c0:6a:38:96:bc:11:51:91: eb:65:2a:54:ea:93:48:f2:7f:bf:f5:d7:32:72:1c: 2b:29:6a:69:97:f7:3d:ba:0b:97:99:17:02:4e:eb: aa:2f:ed:7e:29:b2:47:f0:6d:9f:22:38:45:42:ab: b4:9b:bb:8e:0f:ed:c2:bb:19:cc:19:86:26:34:60: c4:a0:bd:f8:e7:8e:9d:f3:ae:87:b2:aa:79:27:16: 2a:e6:a3:cf:37:93:08:be:44:31:fe:48:b2:d9:7d: ff:a7:57:14:01:75:ba:d8:f2:53:d7:93:e2:58:98: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:F2:EE:20:DA:BC:BF:14:34:03:D1:5B:C3:F9:99:6D:E6:D5:8B X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.25.144.0/24 Signature Algorithm: sha256WithRSAEncryption 57:52:eb:59:b2:42:92:91:13:15:41:c2:21:30:80:3f:c7:7d: 67:fb:65:58:5f:5b:3d:81:e3:07:35:19:b0:a6:c7:92:1c:6a: 78:91:55:97:5a:5c:02:29:74:2d:54:76:0a:84:ff:62:2f:2b: e8:bd:83:88:35:92:23:3e:11:16:68:aa:ab:8f:61:47:af:36: c3:d5:90:66:36:61:2a:d8:0f:37:e2:55:ab:f1:0b:a5:93:10: a6:66:9f:57:68:80:05:89:af:f1:fc:ba:e8:22:14:e2:6f:06: 5c:93:b8:65:b1:9e:3f:08:10:ed:cf:c2:5c:93:f9:b6:05:45: 94:9e:57:aa:57:bb:11:1f:5e:a0:ed:fe:eb:b6:97:95:e2:3d: d2:bd:46:57:d0:e2:e0:c9:83:94:0a:c3:a8:3b:68:f7:b5:ef: 22:1b:d0:a3:52:de:46:0f:83:69:3a:65:8b:ea:bd:ff:d1:0a: 7a:0f:83:13:ea:ec:e4:b9:68:12:4a:7c:de:55:75:9e:69:6a: 34:d7:a0:a7:33:3c:ec:b6:27:3b:b8:28:9f:30:38:46:1a:9e: 94:01:7a:dd:b7:0e:a2:5b:d2:4a:d2:8c:03:10:b5:c9:6f:65: e9:22:74:3c:d6:d0:3d:64:1d:ee:13:5a:4f:f5:27:c4:de:91: 5e:c3:2b:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjUxMTA0MjMxMzIwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhODg4Zi04NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TXTG95ChBq6Hc7O3xJy2jFM7ZaRjkM1VW1h/OQyFTDI/mCQ6I/VmfK2xNR8 Zcbai9GLJdweuBG4NvzUOL1P8ZvcBln6Dqc03x6cF/+2cs70Lr0zLIzI5P+SABvs Cav0SOp890tzuHdI5SRzJiw+0njpMuSh4EBKci50Jmx9M3Yk7QNuyzrb1Bw6IBza wGo4lrwRUZHrZSpU6pNI8n+/9dcychwrKWppl/c9uguXmRcCTuuqL+1+KbJH8G2f IjhFQqu0m7uOD+3CuxnMGYYmNGDEoL34546d866Hsqp5JxYq5qPPN5MIvkQx/kiy 2X3/p1cUAXW62PJT15PiWJgf1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHQE8u4g 2ry/FDQD0VvD+Zlt5tWLMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkI1Q0UvQjA5NkM1MDBDODFBMTFFQkIxMjVBNzNFQzRGOUFFMDIvRjE4OUNCODZD ODFEMTFFQkE0QzBFMzIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLGZAwDQYJKoZIhvcNAQELBQADggEBAFdS61myQpKRExVB wiEwgD/HfWf7ZVhfWz2B4wc1GbCmx5IcaniRVZdaXAIpdC1UdgqE/2IvK+i9g4g1 kiM+ERZoqquPYUevNsPVkGY2YSrYDzfiVavxC6WTEKZmn1dogAWJr/H8uugiFOJv BlyTuGWxnj8IEO3PwlyT+bYFRZSeV6pXuxEfXqDt/uu2l5XiPdK9RlfQ4uDJg5QK w6g7aPe17yIb0KNS3kYPg2k6ZYvqvf/RCnoPgxPq7OS5aBJKfN5VdZ5pajTXoKcz POy2Jzu4KJ8wOEYanpQBet23DqJb0krSjAMQtclvZekidDzW0D1kHe4TWk/1J8Te kV7DK3o= -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:30 2025 by rpki-client