This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7CE0C4A0263E11F0BEF46E0CC4F9AE02.roa File: 7CE0C4A0263E11F0BEF46E0CC4F9AE02.roa (raw, json) Hash identifier: qnn1y22DAejWG5nb/l6xCrcFNEy4XCHpE7133wvYx1Y= Subject key identifier: 05:37:60:78:BA:59:34:C0:47:18:CA:71:E0:44:44:2F:CF:80:45:15 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01AC Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7CE0C4A0263E11F0BEF46E0CC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:11 +0000 ROA not before: Wed 31 Dec 2025 04:24:11 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133042 IP address blocks: 202.29.66.0/24 maxlen: 24 202.29.172.0/22 maxlen: 24 202.29.176.0/22 maxlen: 24 203.159.160.0/24 maxlen: 24 203.159.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 04:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a56b-0754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:29:7c:a0:a6:b4:f0:6d:30:02:5c:80:53:c4: da:ae:5b:d7:b6:00:02:52:3f:04:dd:64:68:62:51: 69:f5:3d:cd:50:1c:5c:9d:58:98:77:27:93:8a:c8: 9c:5e:3d:33:00:3a:23:77:0d:c3:18:b8:a9:fa:15: 3f:f5:68:82:a3:db:23:24:a7:2b:0d:16:1d:9b:77: ab:ea:af:08:f4:e4:d3:61:ca:05:96:c7:68:5a:8a: b7:a3:86:42:eb:23:a2:f8:36:d5:d2:15:97:5a:bd: ce:f6:1a:3b:ff:73:e3:09:ba:75:cd:af:2f:6a:96: 01:f0:3e:11:17:e2:59:d9:4b:ac:77:ec:36:6c:67: 02:d2:35:07:ec:f7:2c:3a:7e:11:23:71:fb:3e:ea: b5:e9:e8:e5:4a:8d:5b:69:b8:70:81:0d:ea:72:94: 6c:3b:a3:18:dd:4a:5a:91:a7:24:0b:27:df:2c:57: bf:a3:33:a7:2c:c4:60:94:8d:92:f0:a1:1f:c0:fc: e2:ec:ab:4f:23:0e:43:a7:b4:9e:5a:ee:21:76:a0: 01:e5:1e:8b:98:5f:69:ad:18:55:db:05:f3:fa:69: 54:03:3f:d4:65:ad:9e:10:b6:15:59:0c:34:35:27: 31:10:6c:0c:b3:af:43:1d:f8:ff:1d:24:90:7b:b6: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:37:60:78:BA:59:34:C0:47:18:CA:71:E0:44:44:2F:CF:80:45:15 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7CE0C4A0263E11F0BEF46E0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.66.0/24 202.29.172.0-202.29.179.255 203.159.160.0/24 203.159.164.0/24 Signature Algorithm: sha256WithRSAEncryption 99:78:b9:d3:6e:98:f3:42:b6:13:46:1e:7e:1a:37:f2:e1:bd: 05:f1:8c:d6:31:1e:01:8c:12:f8:79:29:eb:5f:61:c7:28:49: e3:b1:ec:92:31:84:37:13:a4:7c:cc:12:dd:92:6a:c2:d3:e2: a2:c2:93:d4:7e:ca:e1:a9:4f:3a:6b:a2:51:af:d0:a1:53:6b: 53:44:da:7d:2d:f7:c8:69:c8:74:3f:67:47:2d:2a:fd:3a:8c: 06:e9:c8:5d:89:ec:30:32:92:b5:bb:77:4d:1d:77:25:ca:92: f8:fc:6b:06:32:f1:11:f9:91:93:6e:0a:6a:1e:d1:50:bb:51: 41:3e:81:bb:9b:8c:38:f6:87:14:75:a5:29:6f:e3:a4:49:14: 2e:0f:5f:16:84:6b:82:ca:90:b5:ec:95:18:34:3f:2b:44:3b: 09:3a:94:c9:89:2d:63:13:06:cf:54:21:7b:f0:03:26:d8:72: 1c:67:8d:95:a3:07:81:60:76:84:87:23:de:ff:c1:6d:75:66: 19:a6:ed:6a:c3:eb:ef:b6:ad:2c:3f:f8:78:3e:d1:cf:78:19: a4:a5:c1:09:e5:5c:09:8b:1d:16:25:93:e7:c9:2f:63:cd:47: db:75:82:81:3d:5a:e8:3f:27:d6:0c:43:17:11:4a:4d:8f:be: 8a:41:7c:d2 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU2Yi0wNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCl8oKa08G0wAlyAU8TarlvXtgACUj8E3WRoYlFp9T3NUBxcnViYdyeTisic Xj0zADojdw3DGLip+hU/9WiCo9sjJKcrDRYdm3er6q8I9OTTYcoFlsdoWoq3o4ZC 6yOi+DbV0hWXWr3O9ho7/3PjCbp1za8vapYB8D4RF+JZ2Uusd+w2bGcC0jUH7Pcs On4RI3H7Puq16ejlSo1babhwgQ3qcpRsO6MY3UpakackCyffLFe/ozOnLMRglI2S 8KEfwPzi7KtPIw5Dp7SeWu4hdqAB5R6LmF9prRhV2wXz+mlUAz/UZa2eELYVWQw0 NScxEGwMs69DHfj/HSSQe7ZTJwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFAU3YHi6 WTTARxjKceBERC/PgEUVMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvN0NFMEM0QTAy NjNFMTFGMEJFRjQ2RTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBADKHUIwDAMEAsodrAMEAsodsAMEAMufoAMEAMufpDANBgkq hkiG9w0BAQsFAAOCAQEAmXi5026Y80K2E0Yefho38uG9BfGM1jEeAYwS+Hkp619h xyhJ47HskjGENxOkfMwS3ZJqwtPiosKT1H7K4alPOmuiUa/QoVNrU0TafS33yGnI dD9nRy0q/TqMBunIXYnsMDKStbt3TR13JcqS+PxrBjLxEfmRk24Kah7RULtRQT6B u5uMOPaHFHWlKW/jpEkULg9fFoRrgsqQteyVGDQ/K0Q7CTqUyYktYxMGz1Qhe/AD JthyHGeNlaMHgWB2hIcj3v/BbXVmGabtasPr77atLD/4eD7Rz3gZpKXBCeVcCYsd FiWT58kvY81H23WCgT1a6D8n1gxDFxFKTY++ikF80g== -----END CERTIFICATE-----Generated at Thu Jan 1 14:25:46 2026 by rpki-client