This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa File: 7E87079C721B11EF81654E68C4F9AE02.roa (raw, json) Hash identifier: kmv8kH+gkHaFwx8YyFiEL2ff8IfWx5bDNEOJiDKVY0Q= Subject key identifier: 92:39:9C:75:60:76:80:15:39:3B:41:E3:B0:A8:94:BB:F8:96:DC:BF Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01BE Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:27 +0000 ROA not before: Wed 31 Dec 2025 04:24:27 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 140618 IP address blocks: 202.28.72.0/24 maxlen: 24 202.28.73.0/24 maxlen: 24 202.28.74.0/24 maxlen: 24 202.28.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 04:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:27 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a57b-c99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:a3:6d:9d:16:01:c3:54:d4:24:6a:5a:32: d0:90:bc:06:7d:21:92:d0:79:58:c4:c3:8a:27:69: ed:33:44:0e:3e:cb:bf:c6:fa:60:7a:78:d9:18:e9: 94:79:cd:7c:3c:ce:4a:3e:8d:64:b3:55:41:8e:2b: c1:57:eb:c4:f1:36:5e:3f:d4:eb:ec:15:15:42:60: bb:5a:e9:1b:60:0d:8f:a8:0e:bf:6e:75:84:b3:e0: 23:75:b8:e8:3e:f0:01:f3:56:71:60:fa:02:7f:61: 99:f6:29:72:d7:37:6a:5f:7f:10:c3:fa:25:12:c9: 8f:6c:4f:3f:8f:e4:b8:70:12:66:0e:18:61:50:6f: e8:cc:55:9a:bf:d4:8d:44:da:9e:b4:d1:ef:40:d2: 67:86:a2:7e:24:7c:81:13:07:d6:26:a4:de:ca:d4: 29:07:15:05:46:61:a1:e3:55:53:3d:a1:a4:1e:b5: e8:aa:58:66:fa:d1:45:0a:78:e3:8d:38:f7:b1:db: 2d:74:74:a0:00:f3:fb:fd:4c:6c:50:8b:4c:00:88: 65:ac:86:96:38:47:b8:de:7a:ff:2a:86:a6:60:fb: a0:e6:60:62:4a:41:10:46:59:07:d9:c0:13:de:ed: aa:c2:36:94:7c:cc:9c:85:fb:e2:ba:55:57:c9:57: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:39:9C:75:60:76:80:15:39:3B:41:E3:B0:A8:94:BB:F8:96:DC:BF X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.72.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:4e:99:58:9f:f9:58:fb:be:62:9d:c6:53:34:4a:47:95:cc: bb:55:98:dc:36:06:23:e1:25:de:fa:4e:60:57:d0:07:57:39: 53:65:1a:8e:98:7f:ad:e2:ae:76:e2:be:fe:c9:6e:04:e9:db: 79:b4:16:0c:a7:62:4d:d4:0e:77:bf:6e:fd:e9:c1:c8:e3:59: 52:2c:89:7c:00:e7:69:e5:94:b6:01:c7:28:27:b1:bc:fb:eb: d2:74:91:92:5d:a3:e9:d8:fe:f2:b1:eb:42:01:1a:30:81:ac: 89:ab:3c:22:6d:14:f2:7b:c3:7f:0e:01:af:21:82:6e:ad:c3: f5:d3:e4:0e:01:8a:f9:aa:a4:4b:d9:91:64:eb:7b:11:37:6c: d4:7d:d8:55:01:1d:dc:d0:45:95:cc:cb:01:24:fa:c4:f6:7e: 1b:8e:c9:78:3e:0c:14:1f:8f:5d:24:e3:92:d9:36:c1:e8:d5: f1:12:37:a4:a5:3d:55:54:27:29:d4:50:5b:45:fd:71:dd:c5: 4a:71:e1:64:ff:4e:08:f3:a2:de:27:e5:ec:75:d0:ea:d6:c8: 33:63:7a:86:23:52:7d:79:84:38:45:b0:32:74:1c:f8:c3:6e: ad:93:ac:44:80:e2:08:6a:b2:f9:43:07:12:9d:cc:a8:c8:eb: fb:24:03:f2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU3Yi1jOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIyjbZ0WAcNU1CRqWjLQkLwGfSGS0HlYxMOKJ2ntM0QOPsu/xvpgenjZGOmU ec18PM5KPo1ks1VBjivBV+vE8TZeP9Tr7BUVQmC7WukbYA2PqA6/bnWEs+Ajdbjo PvAB81ZxYPoCf2GZ9ily1zdqX38Qw/olEsmPbE8/j+S4cBJmDhhhUG/ozFWav9SN RNqetNHvQNJnhqJ+JHyBEwfWJqTeytQpBxUFRmGh41VTPaGkHrXoqlhm+tFFCnjj jTj3sdstdHSgAPP7/UxsUItMAIhlrIaWOEe43nr/KoamYPug5mBiSkEQRlkH2cAT 3u2qwjaUfMychfviulVXyVfnEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJI5nHVg doAVOTtB47ColLv4lty/MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvN0U4NzA3OUM3 MjFCMTFFRjgxNjU0RTY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKHEgwDQYJKoZIhvcNAQELBQADggEBAF1OmVif+Vj7vmKd xlM0SkeVzLtVmNw2BiPhJd76TmBX0AdXOVNlGo6Yf63irnbivv7JbgTp23m0Fgyn Yk3UDne/bv3pwcjjWVIsiXwA52nllLYBxygnsbz769J0kZJdo+nY/vKx60IBGjCB rImrPCJtFPJ7w38OAa8hgm6tw/XT5A4BivmqpEvZkWTrexE3bNR92FUBHdzQRZXM ywEk+sT2fhuOyXg+DBQfj10k45LZNsHo1fESN6SlPVVUJynUUFtF/XHdxUpx4WT/ Tgjzot4n5ex10OrWyDNjeoYjUn15hDhFsDJ0HPjDbq2TrESA4ghqsvlDBxKdzKjI 6/skA/I= -----END CERTIFICATE-----Generated at Thu Jan 1 07:37:49 2026 by rpki-client