This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32312e302f32342d3234203d3e203530333835.roa File: 34332e3235322e32312e302f32342d3234203d3e203530333835.roa (raw, json) Hash identifier: kaULZDC6XCfi7x2p6IJ/ygWV6uSlBhFSJ4hHgh1euqM= Subject key identifier: 55:0B:C7:D4:16:8B:08:44:57:FE:73:D3:2A:F5:D8:DA:D9:D5:81:1A Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 4B5A9D02A60AD17D2FB2E665A58091226CFD5616 Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32312e302f32342d3234203d3e203530333835.roa Signing time: Sun 21 Dec 2025 11:29:20 +0000 ROA not before: Sun 21 Dec 2025 11:24:20 +0000 ROA not after: Sun 20 Dec 2026 11:29:20 +0000 asID: 50385 IP address blocks: 43.252.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 21:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5a:9d:02:a6:0a:d1:7d:2f:b2:e6:65:a5:80:91:22:6c:fd:56:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Dec 21 11:24:20 2025 GMT Not After : Dec 20 11:29:20 2026 GMT Subject: CN=550BC7D4168B084457FE73D32AF5D8DAD9D5811A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:b6:41:c5:60:12:4c:82:15:ad:d4:10:cb: 4e:c8:42:a4:6f:95:ba:7c:9c:09:39:c4:82:d1:df: 27:85:62:a0:d1:77:cf:6e:44:be:f5:48:a2:e3:53: 70:3d:59:21:08:17:60:2c:12:2c:f4:61:1f:1f:3c: ce:7e:12:dc:cf:4b:d0:f6:14:6d:61:13:7e:18:7d: 53:87:ac:1d:11:ee:51:8c:2b:40:75:d9:df:0e:89: 54:bb:03:07:ab:27:67:9f:f3:29:a1:a1:a0:62:04: 63:66:4a:56:6e:70:2c:04:d7:ce:14:da:29:56:7c: d8:20:ea:ad:97:b7:9f:eb:59:9d:03:02:98:3a:39: 89:79:ca:2f:31:9b:a6:ad:ae:60:19:15:38:49:1a: fe:5d:d2:ba:41:6c:30:bc:08:bf:7e:b4:6e:2e:a7: c3:8d:0b:5b:32:9a:36:b2:da:f8:5d:86:89:a4:90: a8:fe:09:48:e3:a8:99:fe:f3:20:fb:c2:a8:df:b9: a8:7f:d7:7f:80:1c:5a:18:b4:8a:49:73:66:2a:40: c6:23:80:31:39:7c:eb:db:c5:ab:c7:58:6c:d4:8f: 10:91:47:bf:0d:9b:4f:8f:cb:77:17:90:8f:a3:5c: 2b:58:1e:4b:91:83:ad:4e:9c:8b:25:7d:50:cc:db: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0B:C7:D4:16:8B:08:44:57:FE:73:D3:2A:F5:D8:DA:D9:D5:81:1A X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32312e302f32342d3234203d3e203530333835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.21.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:90:86:b6:d9:98:27:85:31:98:f0:de:2e:6c:33:8f:59:c4: dd:78:f6:16:9f:17:9a:08:a1:16:23:a6:c8:c4:d5:71:17:d2: 0e:82:74:e8:7c:26:a1:96:4c:ac:08:a2:0e:c0:b7:da:8f:44: fd:1e:f8:7b:77:55:5a:0d:a8:91:26:e0:37:c0:2e:62:c9:48: f5:c2:e1:89:0d:06:81:a3:e5:b4:10:10:00:1e:16:92:ae:93: cb:07:1c:29:94:24:bc:94:34:fb:94:0b:61:45:5d:42:7c:6a: 54:ff:80:fb:9e:fb:4f:0c:90:9f:71:4f:c5:71:d5:99:98:ff: a9:6b:e2:53:c9:46:b0:d8:78:d6:72:11:7a:74:9b:2b:10:97: ea:b1:29:e9:7d:1d:89:fb:64:06:5f:97:1f:35:cb:af:12:aa: 8a:33:25:63:c9:2b:0f:bb:ff:cf:c7:8b:7a:43:90:17:9b:1a: 4b:fa:90:4f:85:73:ee:11:40:56:d1:bf:27:42:e2:2f:a6:8f: 0a:fb:e2:8a:ad:b6:52:ca:20:d6:e0:43:33:55:ce:53:bf:a2: bf:83:9b:ba:3e:e9:43:02:86:6e:a7:f1:3a:d9:f2:b8:0a:43: d3:a0:0f:09:b7:74:75:fd:d2:fd:86:3c:e1:3f:2c:4b:07:1d: 33:8b:d8:82 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUS1qdAqYK0X0vsuZlpYCRImz9VhYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI1MTIyMTExMjQyMFoX DTI2MTIyMDExMjkyMFowMzExMC8GA1UEAxMoNTUwQkM3RDQxNjhCMDg0NDU3RkU3 M0QzMkFGNUQ4REFEOUQ1ODExQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2+tkHFYBJMghWt1BDLTshCpG+VunycCTnEgtHfJ4VioNF3z25EvvVIouNT cD1ZIQgXYCwSLPRhHx88zn4S3M9L0PYUbWETfhh9U4esHRHuUYwrQHXZ3w6JVLsD B6snZ5/zKaGhoGIEY2ZKVm5wLATXzhTaKVZ82CDqrZe3n+tZnQMCmDo5iXnKLzGb pq2uYBkVOEka/l3SukFsMLwIv360bi6nw40LWzKaNrLa+F2GiaSQqP4JSOOomf7z IPvCqN+5qH/Xf4AcWhi0iklzZipAxiOAMTl869vFq8dYbNSPEJFHvw2bT4/LdxeQ j6NcK1geS5GDrU6ciyV9UMzbfaECAwEAAaOCAg8wggILMB0GA1UdDgQWBBRVC8fU FosIRFf+c9Mq9dja2dWBGjAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxREQ1 MTAwMDAwLzAvMzQzMzJlMzIzNTMyMmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzUzMDMzMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8FTANBgkqhkiG9w0BAQsFAAOCAQEA K5CGttmYJ4UxmPDeLmwzj1nE3Xj2Fp8XmgihFiOmyMTVcRfSDoJ06HwmoZZMrAii DsC32o9E/R74e3dVWg2okSbgN8AuYslI9cLhiQ0GgaPltBAQAB4Wkq6TywccKZQk vJQ0+5QLYUVdQnxqVP+A+577TwyQn3FPxXHVmZj/qWviU8lGsNh41nIRenSbKxCX 6rEp6X0diftkBl+XHzXLrxKqijMlY8krD7v/z8eLekOQF5saS/qQT4Vz7hFAVtG/ J0LiL6aPCvviiq22Usog1uBDM1XOU7+iv4Obuj7pQwKGbqfxOtnyuApD06APCbd0 df3S/YY84T8sSwcdM4vYgg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:56:10 2026 by rpki-client