This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C241C00E721511EF9D7B9F3DC4F9AE02.roa File: C241C00E721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: SWSNUovsVu+2pqs7TGX74GGU3uiG5ZfwJ1pjogY1QJ0= Subject key identifier: 98:51:CA:28:68:B7:0A:84:09:8D:BB:D7:2B:87:A9:70:6A:82:CE:10 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01B3 Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C241C00E721511EF9D7B9F3DC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:17 +0000 ROA not before: Wed 31 Dec 2025 04:24:17 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137198 IP address blocks: 202.29.26.0/24 maxlen: 24 2001:3c8:1306::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 04:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:17 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a570-185d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:b9:53:3b:34:40:f0:49:9c:9b:4b:6d:94: 5f:8e:2b:42:65:f7:c2:5d:28:10:bf:d2:f1:04:90: 90:54:61:a1:fb:22:80:af:6f:6d:4a:01:2c:d2:b8: 8b:7d:06:23:3e:62:42:62:e5:b3:e6:63:56:40:9e: b8:af:5c:1e:93:12:a1:37:c5:d2:d3:42:cb:96:36: 42:69:f5:51:62:3c:e3:4c:51:41:9b:77:ad:f9:0f: f6:2c:b3:ef:50:5c:3a:95:99:8a:4e:54:0a:7c:8c: d6:d8:43:e3:15:28:29:34:7c:7a:a5:dc:14:6e:16: f4:bf:6d:e9:28:0e:9e:04:26:63:64:8d:87:5c:3d: b4:ba:ef:a1:58:a7:3d:10:f6:28:97:07:1f:e0:14: 61:6b:53:a9:15:ea:ad:46:bb:f0:66:c7:c6:25:84: a8:3e:9d:4a:91:c9:fc:a9:19:38:b9:db:7b:cb:14: 11:de:e6:e5:34:40:8a:c0:54:ec:92:9e:57:d9:3b: 87:f0:b0:14:ff:84:4c:fd:35:ba:f3:9f:63:6c:c4: b4:81:84:15:51:64:56:72:98:92:18:74:13:85:21: 58:3a:dc:89:e1:38:a0:18:6d:37:70:b7:5d:13:09: 16:4e:86:eb:4f:4a:5c:0f:6c:5d:6a:35:ee:02:38: b4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:51:CA:28:68:B7:0A:84:09:8D:BB:D7:2B:87:A9:70:6A:82:CE:10 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C241C00E721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.26.0/24 IPv6: 2001:3c8:1306::/48 Signature Algorithm: sha256WithRSAEncryption 20:cf:83:7b:13:c5:d1:67:e3:6a:c5:26:93:81:8d:c2:13:98: bc:0f:d4:bf:d7:ca:d2:5b:a1:76:b3:a2:4c:5a:1a:a6:02:c0: e4:b7:0e:e5:6a:a8:a2:0b:47:b9:71:67:57:35:68:b3:33:61: 11:20:65:e9:ec:cb:28:0b:02:25:51:1a:1c:a3:79:4b:b5:7b: 5d:63:54:c8:98:27:72:1b:70:1c:ee:fb:cc:51:c6:46:b2:78: 6a:14:d7:26:9f:f4:65:74:56:5f:87:76:6b:a5:e5:ab:ce:5a: 15:a0:5d:73:ea:d8:9f:a8:ae:c2:f4:0b:5d:84:a4:ef:5b:55: ef:e5:a6:0b:5a:be:30:71:d3:22:be:e4:74:2c:0f:3b:82:f6: d1:1d:19:1f:8f:28:2b:20:ed:d2:32:ce:bf:a7:b1:32:4c:30: 44:08:36:69:0e:29:f9:e4:8a:f1:d8:49:5e:c3:fd:3c:62:a4: b2:32:60:d6:e9:9f:67:1d:72:ca:fa:75:8c:a9:f8:12:c5:4a: c2:cd:a9:e9:c1:46:38:5b:3f:59:74:b8:49:63:fb:b7:7b:f1: ab:0c:cb:7c:f0:6d:ba:88:1e:32:03:b1:96:4d:cf:29:80:cd: 81:b1:a5:0e:b1:36:5c:4e:63:76:2e:90:69:77:30:22:fa:f6: 96:14:84:64 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDE3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU3MC0xODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ui5Uzs0QPBJnJtLbZRfjitCZffCXSgQv9LxBJCQVGGh+yKAr29tSgEs0riL fQYjPmJCYuWz5mNWQJ64r1wekxKhN8XS00LLljZCafVRYjzjTFFBm3et+Q/2LLPv UFw6lZmKTlQKfIzW2EPjFSgpNHx6pdwUbhb0v23pKA6eBCZjZI2HXD20uu+hWKc9 EPYolwcf4BRha1OpFeqtRrvwZsfGJYSoPp1Kkcn8qRk4udt7yxQR3ublNECKwFTs kp5X2TuH8LAU/4RM/TW6859jbMS0gYQVUWRWcpiSGHQThSFYOtyJ4TigGG03cLdd EwkWTobrT0pcD2xdajXuAji0mwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJhRyiho twqECY271yuHqXBqgs4QMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvQzI0MUMwMEU3 MjE1MTFFRjlEN0I5RjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKHRowDwQCAAIwCQMHACABA8gTBjANBgkqhkiG9w0BAQsF AAOCAQEAIM+DexPF0WfjasUmk4GNwhOYvA/Uv9fK0luhdrOiTFoapgLA5LcO5Wqo ogtHuXFnVzVoszNhESBl6ezLKAsCJVEaHKN5S7V7XWNUyJgnchtwHO77zFHGRrJ4 ahTXJp/0ZXRWX4d2a6Xlq85aFaBdc+rYn6iuwvQLXYSk71tV7+WmC1q+MHHTIr7k dCwPO4L20R0ZH48oKyDt0jLOv6exMkwwRAg2aQ4p+eSK8dhJXsP9PGKksjJg1umf Zx1yyvp1jKn4EsVKws2p6cFGOFs/WXS4SWP7t3vxqwzLfPBtuogeMgOxlk3PKYDN gbGlDrE2XE5jdi6QaXcwIvr2lhSEZA== -----END CERTIFICATE-----Generated at Sun Jan 11 14:38:59 2026 by rpki-client