This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/21A731506C9B11ED93A7513AC4F9AE02.roa File: 21A731506C9B11ED93A7513AC4F9AE02.roa (raw, json) Hash identifier: I+YIdTy2YChQ/2bTwzuZ1CtQVEHczwwgdIjE/2ukjdM= Subject key identifier: 79:36:D9:AC:1A:C1:E7:8C:A0:A1:AC:3F:7B:1B:5F:AB:4E:51:07:83 Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Certificate serial: 0C3D Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/21A731506C9B11ED93A7513AC4F9AE02.roa Signing time: Sat 20 Dec 2025 19:16:00 +0000 ROA not before: Sat 20 Dec 2025 19:16:00 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 31898 IP address blocks: 203.149.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Validity Not Before: Dec 20 19:16:00 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6946f5f0-69d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:68:0c:c2:1b:87:d7:ff:bf:e1:67:07:e7: 7b:d0:02:2d:31:4c:97:02:35:ee:64:79:87:10:ed: 84:5b:28:11:d4:f1:e5:ed:be:3b:19:e5:a2:a3:15: 0b:fa:68:02:ee:9a:b1:f5:aa:02:70:11:09:eb:51: 3c:c9:b4:e0:c5:55:e8:ca:14:f9:9b:6c:94:13:20: 0c:2f:4e:c8:f1:9f:d2:12:af:fb:ed:8a:ed:5f:46: 28:51:60:8a:c8:b2:f5:a4:e8:0f:24:1d:c1:df:bd: 59:74:bb:f2:80:9f:4a:48:73:d0:f2:4e:96:71:66: 11:57:10:48:c1:49:20:97:de:79:70:15:51:3e:a7: eb:b1:17:c0:a4:c6:8a:06:a5:50:b9:4b:33:09:0b: d0:95:4e:19:db:d4:90:88:67:7e:e3:b9:1d:2d:3d: 31:a6:19:18:79:7a:3b:6b:15:a4:d9:09:04:fd:fb: eb:a2:e2:81:bd:11:ef:89:11:9c:23:b3:e3:bc:53: 22:ef:12:d0:9d:fa:ff:32:c8:44:26:7c:69:e9:6b: 21:c6:5d:bf:4a:29:f0:cf:85:eb:e6:5e:78:d5:9d: 0d:d4:b2:83:29:15:42:da:67:b4:24:08:51:0f:54: a0:66:9e:b3:3c:17:ae:bd:45:66:dd:63:5d:5c:34: 43:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:36:D9:AC:1A:C1:E7:8C:A0:A1:AC:3F:7B:1B:5F:AB:4E:51:07:83 X509v3 Authority Key Identifier: keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/21A731506C9B11ED93A7513AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.149.202.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:68:08:d1:01:17:15:f0:49:1c:17:d2:6f:81:76:aa:94:66: d3:56:4c:00:f6:b6:a7:4a:39:1c:cf:a8:4d:03:d9:6c:cb:ba: 81:b0:6b:17:c6:65:cd:aa:51:da:bd:0a:47:88:c5:1e:d4:f2: b2:a0:07:56:20:29:b0:2b:75:13:31:6c:88:fd:20:59:0d:68: be:e1:a3:16:96:31:61:d5:e9:ea:95:a5:43:92:87:32:3f:c2: db:52:2d:62:47:97:6b:c1:92:7f:6f:4e:48:2f:38:5a:fd:11: 32:ce:ea:2e:a8:36:22:58:a2:3d:95:ab:c3:3f:70:71:06:82: 39:e1:76:8b:34:41:5f:d8:9d:ea:a1:0f:0f:03:1e:34:ad:7f: 62:4b:c5:a2:e9:28:3c:2a:ac:7d:79:fa:c8:1b:a7:22:04:00: 40:54:a8:f8:d1:95:ad:66:b6:c1:0d:d0:d2:60:c8:d4:be:31: d6:a6:a5:7e:1b:09:67:e9:5a:a4:e6:0c:e4:82:af:d7:e9:88: 71:9c:a4:d2:0f:85:e8:d2:d7:d7:ee:55:18:79:22:5c:1d:64: ea:9d:c8:e9:ec:a3:64:f4:24:56:83:b1:e2:15:5e:54:61:98: 2e:17:e1:72:9f:04:69:22:42:c9:b4:c0:39:70:5b:e7:b9:b2: 6d:a4:06:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Mjc0QTQxMTAvBgNVBAUTKDU5NTY2NUZGODVFNEU0NzczNzFGNzU0MUY3MjA5REMy NDRFNjBDQTUwHhcNMjUxMjIwMTkxNjAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ2ZjVmMC02OWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdloDMIbh9f/v+FnB+d70AItMUyXAjXuZHmHEO2EWygR1PHl7b47GeWioxUL +mgC7pqx9aoCcBEJ61E8ybTgxVXoyhT5m2yUEyAML07I8Z/SEq/77YrtX0YoUWCK yLL1pOgPJB3B371ZdLvygJ9KSHPQ8k6WcWYRVxBIwUkgl955cBVRPqfrsRfApMaK BqVQuUszCQvQlU4Z29SQiGd+47kdLT0xphkYeXo7axWk2QkE/fvrouKBvRHviRGc I7PjvFMi7xLQnfr/MshEJnxp6Wshxl2/Sinwz4Xr5l541Z0N1LKDKRVC2me0JAhR D1SgZp6zPBeuvUVm3WNdXDRDIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHk22awa weeMoKGsP3sbX6tOUQeDMB8GA1UdIwQYMBaAFFlWZf+F5OR3Nx91QfcgncJE5gyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzRBNC9EREJFNDIwQTMw RjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVIYzNIM1ZCOXlDZHdrVG1E S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dWWmxfNFhrNUhjM0gzVkI5eUNkd2tUbURLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc0QTQvRERCRTQyMEEzMEYwMTFFQTk4NTlBRTUzQzRGOUFFMDIvMjFBNzMxNTA2 QzlCMTFFRDkzQTc1MTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLlcowDQYJKoZIhvcNAQELBQADggEBAAtoCNEBFxXwSRwX 0m+BdqqUZtNWTAD2tqdKORzPqE0D2WzLuoGwaxfGZc2qUdq9CkeIxR7U8rKgB1Yg KbArdRMxbIj9IFkNaL7hoxaWMWHV6eqVpUOShzI/wttSLWJHl2vBkn9vTkgvOFr9 ETLO6i6oNiJYoj2Vq8M/cHEGgjnhdos0QV/YneqhDw8DHjStf2JLxaLpKDwqrH15 +sgbpyIEAEBUqPjRla1mtsEN0NJgyNS+MdampX4bCWfpWqTmDOSCr9fpiHGcpNIP hejS19fuVRh5IlwdZOqdyOnso2T0JFaDseIVXlRhmC4X4XKfBGkiQsm0wDlwW+e5 sm2kBrs= -----END CERTIFICATE-----Generated at Mon Dec 22 03:28:19 2025 by rpki-client