This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F60CA67E721511EFA7D82D3EC4F9AE02.roa File: F60CA67E721511EFA7D82D3EC4F9AE02.roa (raw, json) Hash identifier: T1GaCd1hJ72xTpJtWWP1doFccttjCnGdOay/GkO7mO0= Subject key identifier: B6:16:D6:76:E4:33:93:4F:E7:E8:1D:51:40:79:2A:BF:FA:45:62:32 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 01CA Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F60CA67E721511EFA7D82D3EC4F9AE02.roa Signing time: Wed 31 Dec 2025 04:24:38 +0000 ROA not before: Wed 31 Dec 2025 04:24:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 24344 IP address blocks: 202.29.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 04:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 31 04:24:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954a585-92f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:2c:e4:42:49:90:55:6f:4e:18:a2:f8:09: 50:e6:5a:5c:45:28:76:67:7d:8f:ac:83:9f:a8:14: df:7e:46:65:de:14:87:40:ca:b3:ba:76:ca:13:ce: ba:9b:84:18:3e:0f:6c:e7:9b:02:0c:df:97:5f:c6: 91:f5:e2:0b:37:c4:ef:d6:17:6e:06:4c:b1:a9:69: 5b:0d:bf:a7:f6:c1:ef:7c:f0:60:1d:ce:cb:83:c2: ca:05:7f:80:4c:6a:5a:3c:b3:65:2c:e4:02:c7:e7: 85:61:30:30:34:fb:45:8e:31:cf:60:c3:18:76:f9: 7f:c9:22:f0:8b:7d:f4:75:2f:da:fb:e8:54:5c:8e: bf:54:4f:a1:ca:dd:d1:84:ab:80:9a:50:c9:6c:85: 86:69:2f:0b:04:7d:46:7f:aa:11:24:a7:0b:ab:61: 72:69:67:fb:50:84:ea:6d:3c:1a:d5:44:50:44:f5: 29:cf:25:2d:3b:75:6e:28:c6:49:1b:19:15:af:b8: dd:87:4b:1b:70:bc:61:04:76:3c:83:c0:80:24:fc: 87:7d:de:6e:3f:00:6f:95:20:73:57:e4:6c:f1:5b: 4f:bd:d3:06:f4:e0:fc:cd:d2:39:52:39:ad:14:5d: aa:65:0e:18:94:3a:ea:5b:bb:3a:02:6d:96:30:51: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:16:D6:76:E4:33:93:4F:E7:E8:1D:51:40:79:2A:BF:FA:45:62:32 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F60CA67E721511EFA7D82D3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.60.0/24 Signature Algorithm: sha256WithRSAEncryption 99:9f:f5:67:b8:42:7a:62:b2:4b:8b:b4:02:34:2e:35:1d:3c: 9d:ae:8e:a6:e5:51:bf:7c:76:69:c8:72:b4:a8:a7:5e:a2:34: 99:54:12:37:b3:92:c5:87:ae:77:1d:09:54:42:d6:ba:1a:1a: 35:fe:ff:03:da:1f:24:80:14:2f:19:e6:eb:44:cc:26:69:62: 8b:1f:22:ee:55:64:59:27:f8:86:5c:2d:fc:2c:03:23:9a:ff: 3b:27:34:f3:01:79:8c:52:5e:9e:8c:b8:b2:6d:1b:9b:c7:4a: 05:7d:21:12:16:2e:a5:b5:1d:f9:5e:88:94:83:ce:5c:df:80: 16:33:a8:93:ac:3c:e7:58:d7:31:f5:37:50:f7:e7:ff:46:07: eb:67:1f:9a:0c:79:1d:7d:d7:ca:10:47:37:4d:98:58:b3:4a: 67:20:03:46:8f:6f:50:34:87:26:87:fe:f4:0c:82:bc:da:0f: 10:89:47:11:fe:a5:6d:29:80:67:97:1c:67:ab:b6:5f:a7:a7: b1:87:6f:af:12:73:75:31:7f:1b:97:2b:e6:5f:38:7c:b5:ed: 79:6b:d4:1d:70:ae:b9:7a:36:62:10:b3:15:46:cc:31:38:1a: c5:2a:69:ad:1e:51:66:56:99:d9:0f:29:2b:76:19:85:a6:b9: da:1e:fe:cd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0YTU4NS05MmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCEs5EJJkFVvThii+AlQ5lpcRSh2Z32PrIOfqBTffkZl3hSHQMqzunbKE866 m4QYPg9s55sCDN+XX8aR9eILN8Tv1hduBkyxqWlbDb+n9sHvfPBgHc7Lg8LKBX+A TGpaPLNlLOQCx+eFYTAwNPtFjjHPYMMYdvl/ySLwi330dS/a++hUXI6/VE+hyt3R hKuAmlDJbIWGaS8LBH1Gf6oRJKcLq2FyaWf7UITqbTwa1URQRPUpzyUtO3VuKMZJ GxkVr7jdh0sbcLxhBHY8g8CAJPyHfd5uPwBvlSBzV+Rs8VtPvdMG9OD8zdI5Ujmt FF2qZQ4YlDrqW7s6Am2WMFEl8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLYW1nbk M5NP5+gdUUB5Kr/6RWIyMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjYwQ0E2N0U3 MjE1MTFFRkE3RDgyRDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKHTwwDQYJKoZIhvcNAQELBQADggEBAJmf9We4QnpiskuL tAI0LjUdPJ2ujqblUb98dmnIcrSop16iNJlUEjezksWHrncdCVRC1roaGjX+/wPa HySAFC8Z5utEzCZpYosfIu5VZFkn+IZcLfwsAyOa/zsnNPMBeYxSXp6MuLJtG5vH SgV9IRIWLqW1HfleiJSDzlzfgBYzqJOsPOdY1zH1N1D35/9GB+tnH5oMeR1918oQ RzdNmFizSmcgA0aPb1A0hyaH/vQMgrzaDxCJRxH+pW0pgGeXHGertl+np7GHb68S c3UxfxuXK+ZfOHy17Xlr1B1wrrl6NmIQsxVGzDE4GsUqaa0eUWZWmdkPKSt2GYWm udoe/s0= -----END CERTIFICATE-----Generated at Sun Jan 11 23:25:35 2026 by rpki-client