This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/3AE27D1ACEAD11F0AD3AAB23C4F9AE02.roa File: 3AE27D1ACEAD11F0AD3AAB23C4F9AE02.roa (raw, json) Hash identifier: 6DppbaQQTeNgu9PcDH29P7MYPExUXAiYE2rkkXlKtpg= Subject key identifier: 65:4E:C2:FB:03:E4:FF:56:59:2C:33:88:C0:D0:A8:64:5C:DF:4B:9E Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 3696 Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/3AE27D1ACEAD11F0AD3AAB23C4F9AE02.roa Signing time: Fri 12 Dec 2025 14:30:38 +0000 ROA not before: Fri 12 Dec 2025 14:30:38 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141215 IP address blocks: 116.90.119.0/24 maxlen: 24 202.142.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13974 (0x3696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Dec 12 14:30:38 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693c270e-a90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:8b:7d:f8:31:25:2e:79:15:69:c3:9b:4e: 75:70:34:1b:de:08:61:03:ca:19:cd:9e:3c:44:50: 14:94:4b:74:db:ac:3f:12:6a:54:53:dd:e7:28:ba: 58:b5:5a:3f:0b:d0:c7:84:ee:2f:95:9f:e3:b9:24: 9d:e8:15:fd:c2:80:80:57:52:96:fd:25:d2:07:d8: 6d:34:f9:d3:b1:8e:1b:b3:a2:f2:1f:0d:89:a8:9b: a4:2d:96:d2:2f:fd:77:5e:d7:0b:b2:8c:07:6d:23: 39:53:86:1c:f2:c2:e3:82:17:74:a1:c9:df:4b:91: f1:ce:5f:db:a2:91:90:0c:76:2c:4c:56:7e:08:3e: d9:5d:f4:ad:d4:fc:ee:e8:21:3f:d7:7e:b3:12:b4: 43:72:6d:0d:c2:32:ef:fc:53:e4:2c:ae:67:ff:38: fd:b2:fa:24:55:32:de:e7:b5:6e:98:6d:49:e5:48: dc:0a:1e:bf:eb:5c:07:dd:08:12:e4:1f:f9:9f:4e: e7:5a:a3:57:87:06:21:33:75:e1:14:ff:5f:6e:cf: 32:51:74:e6:34:65:9c:12:30:dc:72:79:44:2b:c8: 72:a3:20:a5:06:9f:60:8b:68:dd:92:49:f6:ea:8c: f6:2d:4e:43:9a:bb:e6:43:b0:dd:75:69:c7:f4:ce: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4E:C2:FB:03:E4:FF:56:59:2C:33:88:C0:D0:A8:64:5C:DF:4B:9E X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/3AE27D1ACEAD11F0AD3AAB23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.90.119.0/24 202.142.155.0/24 Signature Algorithm: sha256WithRSAEncryption 33:77:51:a4:a3:a0:33:0d:08:38:7a:28:77:17:9c:67:a8:d8: 4d:35:23:5c:a0:51:55:5a:52:65:97:55:a5:7f:17:5a:e1:fc: a5:69:f7:3d:85:50:12:6f:f1:7d:12:27:a9:73:98:d7:21:9e: c3:a5:1b:5b:23:3c:32:27:85:bd:27:18:79:ce:57:ec:c4:71: ba:98:09:a5:11:a4:ac:f3:04:99:48:a0:db:53:6d:69:3b:5b: e4:c7:46:cc:0c:74:bf:93:7f:60:fd:2d:05:99:1a:fc:a3:bd: 5e:2a:dc:ee:13:25:60:81:91:1d:54:58:96:2e:e2:88:ce:4d: 6c:b8:cd:78:f6:37:85:7b:4f:b3:2d:83:08:b3:df:ec:57:d0: c2:53:a2:64:c2:3f:2f:1d:03:11:91:32:40:79:53:5f:a1:05: ff:5f:8f:a7:1d:ba:01:cb:73:28:52:a6:69:3f:a0:54:e8:79: 70:ec:f3:15:5a:86:4c:84:5a:e8:3f:7a:51:77:6b:5f:2e:10: 58:3c:11:2a:3b:54:80:57:41:da:59:38:2c:88:52:ca:c7:1c: 81:d3:69:f1:b6:5c:69:a8:b0:53:1f:9c:22:dd:7b:bc:a1:06: f7:d6:a8:6f:43:28:85:2e:84:ca:19:6f:2e:11:6f:e3:6b:a0: c7:d8:b8:c6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjUxMjEyMTQzMDM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjMjcwZS1hOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqj2LffgxJS55FWnDm051cDQb3ghhA8oZzZ48RFAUlEt026w/EmpUU93nKLpY tVo/C9DHhO4vlZ/juSSd6BX9woCAV1KW/SXSB9htNPnTsY4bs6LyHw2JqJukLZbS L/13XtcLsowHbSM5U4Yc8sLjghd0ocnfS5Hxzl/bopGQDHYsTFZ+CD7ZXfSt1Pzu 6CE/136zErRDcm0NwjLv/FPkLK5n/zj9svokVTLe57VumG1J5UjcCh6/61wH3QgS 5B/5n07nWqNXhwYhM3XhFP9fbs8yUXTmNGWcEjDccnlEK8hyoyClBp9gi2jdkkn2 6oz2LU5DmrvmQ7DddWnH9M7RlwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGVOwvsD 5P9WWSwziMDQqGRc30ueMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvM0FFMjdEMUFD RUFEMTFGMEFEM0FBQjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB0WncDBADKjpswDQYJKoZIhvcNAQELBQADggEBADN3UaSj oDMNCDh6KHcXnGeo2E01I1ygUVVaUmWXVaV/F1rh/KVp9z2FUBJv8X0SJ6lzmNch nsOlG1sjPDInhb0nGHnOV+zEcbqYCaURpKzzBJlIoNtTbWk7W+THRswMdL+Tf2D9 LQWZGvyjvV4q3O4TJWCBkR1UWJYu4ojOTWy4zXj2N4V7T7Mtgwiz3+xX0MJTomTC Py8dAxGRMkB5U1+hBf9fj6cdugHLcyhSpmk/oFToeXDs8xVahkyEWug/elF3a18u EFg8ESo7VIBXQdpZOCyIUsrHHIHTafG2XGmosFMfnCLde7yhBvfWqG9DKIUuhMoZ by4Rb+NroMfYuMY= -----END CERTIFICATE-----Generated at Fri Dec 19 10:17:22 2025 by rpki-client