This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/E57517B0C84F11F0B9AA990CC4F9AE02.roa File: E57517B0C84F11F0B9AA990CC4F9AE02.roa (raw, json) Hash identifier: APz1fq2YwQ7yS7mDD19LwdpN2CTZ/bZgxloH7c0/wbA= Subject key identifier: 10:0B:F5:8C:A4:CA:0B:1B:52:74:AF:B8:EE:67:8F:4B:F5:14:06:7B Certificate issuer: /CN=A91BB9EF/serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Certificate serial: 04 Authority key identifier: 34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/E57517B0C84F11F0B9AA990CC4F9AE02.roa Signing time: Sun 23 Nov 2025 09:37:16 +0000 ROA not before: Sun 23 Nov 2025 09:37:16 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154269 IP address blocks: 43.248.254.0/23 maxlen: 24 2001:df6:2740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB9EF, serialNumber=34F4676C0663839147973D4C869B49DC8C6640F3 Validity Not Before: Nov 23 09:37:16 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6922d5cb-1fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:b0:62:fa:12:c5:11:72:31:c2:c8:f2:2b: 93:b9:bd:9c:56:f2:7b:70:70:71:80:dd:05:be:bc: 7c:2a:53:ec:8e:78:b9:10:22:3f:0f:33:d3:3a:24: fa:f6:ab:ae:45:32:71:9e:5e:cb:b4:03:bf:47:2b: 32:36:a2:f2:26:e7:06:19:52:4d:00:c3:5b:da:ec: b7:3a:c3:bc:02:ab:88:73:0d:47:12:84:0a:31:2f: 2f:2c:ed:37:23:e1:2a:53:ac:54:3a:9c:8a:fd:09: a5:a6:ee:3f:72:68:63:e5:bf:8b:e3:b0:3e:d0:48: 5b:fe:48:bd:ca:0e:f1:1e:47:cb:51:e8:1d:53:33: 4d:ab:c4:34:78:55:cf:59:14:8c:cc:1d:f3:6b:36: cb:e5:67:47:c4:84:f8:0f:2a:61:63:f6:20:7f:f5: ae:42:4d:ee:ee:41:57:04:f5:04:05:ac:d1:5b:80: 1f:c7:3a:e5:d6:d9:99:40:a3:66:60:dd:77:d7:8f: d3:c7:4c:6b:87:26:5e:dd:0e:63:06:73:41:6d:03: 53:b3:be:e7:e7:6c:84:ec:1c:8a:d1:f5:74:93:34: de:db:f8:68:7d:45:85:51:8b:8c:a2:c6:dd:d4:78: a9:8c:f3:39:94:79:7b:05:9c:d0:86:86:90:cc:7d: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:F5:8C:A4:CA:0B:1B:52:74:AF:B8:EE:67:8F:4B:F5:14:06:7B X509v3 Authority Key Identifier: keyid:34:F4:67:6C:06:63:83:91:47:97:3D:4C:86:9B:49:DC:8C:66:40:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/NPRnbAZjg5FHlz1MhptJ3IxmQPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPRnbAZjg5FHlz1MhptJ3IxmQPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB9EF/878723E6C84F11F08BEBCD0BC4F9AE02/E57517B0C84F11F0B9AA990CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.254.0/23 IPv6: 2001:df6:2740::/48 Signature Algorithm: sha256WithRSAEncryption 9b:ff:ee:64:9a:04:9c:e4:19:26:2c:f9:6c:e6:6d:39:2b:2e: 39:ef:59:df:f8:a5:06:06:13:63:82:8f:20:d7:35:38:6c:e5: 4c:94:8a:31:0e:23:5e:74:4d:1d:3a:e9:f6:d9:4e:e4:98:94: 84:85:17:96:8c:8f:45:ba:a2:74:5b:d1:12:90:26:df:ac:e4: 7b:e6:dd:3f:1f:b4:1e:27:ac:9d:f0:78:79:16:85:2b:15:cc: fd:be:18:3b:94:3d:01:0b:cb:5c:62:8e:a4:6e:9e:d7:1c:28: 3f:e4:d9:f1:f4:ca:6b:e7:01:e6:6d:fa:45:f8:3b:89:21:70: 4f:a4:c7:7b:15:eb:d8:3a:81:9f:b3:8e:2c:14:4a:11:36:e4: f7:65:3d:25:5d:d0:b4:f1:23:17:e7:3b:e2:3b:61:0d:8b:34: 89:bc:a1:54:5f:30:90:aa:57:da:23:fa:dc:81:03:a9:06:e4: 23:18:5a:d8:a4:e7:ba:f9:96:db:05:d1:0d:68:89:2d:c8:eb: 5b:de:a7:2b:c4:5f:1a:78:a8:ba:95:38:73:27:3a:4c:08:0f: 0e:9a:e3:e6:41:22:18:77:95:10:71:7b:39:7f:a3:8a:21:e6: 51:71:99:93:22:eb:d5:cc:39:cd:ae:88:a7:8d:8e:8c:42:e7: 71:f0:1e:cc -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjlFRjExMC8GA1UEBRMoMzRGNDY3NkMwNjYzODM5MTQ3OTczRDRDODY5QjQ5REM4 QzY2NDBGMzAeFw0yNTExMjMwOTM3MTZaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjJkNWNiLTFmYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsRLBi+hLFEXIxwsjyK5O5vZxW8ntwcHGA3QW+vHwqU+yOeLkQIj8PM9M6JPr2 q65FMnGeXsu0A79HKzI2ovIm5wYZUk0Aw1va7Lc6w7wCq4hzDUcShAoxLy8s7Tcj 4SpTrFQ6nIr9CaWm7j9yaGPlv4vjsD7QSFv+SL3KDvEeR8tR6B1TM02rxDR4Vc9Z FIzMHfNrNsvlZ0fEhPgPKmFj9iB/9a5CTe7uQVcE9QQFrNFbgB/HOuXW2ZlAo2Zg 3XfXj9PHTGuHJl7dDmMGc0FtA1OzvufnbITsHIrR9XSTNN7b+Gh9RYVRi4yixt3U eKmM8zmUeXsFnNCGhpDMfUI3AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUEAv1jKTK CxtSdK+47mePS/UUBnswHwYDVR0jBBgwFoAUNPRnbAZjg5FHlz1MhptJ3IxmQPMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOUVGLzg3ODcyM0U2Qzg0 RjExRjA4QkVCQ0QwQkM0RjlBRTAyL05QUm5iQVpqZzVGSGx6MU1ocHRKM0l4bVFQ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlBSbmJBWmpnNUZIbHoxTWhwdEozSXhtUVBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjlFRi84Nzg3MjNFNkM4NEYxMUYwOEJFQkNEMEJDNEY5QUUwMi9FNTc1MTdCMEM4 NEYxMUYwQjlBQTk5MENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEASv4/jAPBAIAAjAJAwcAIAEN9idAMA0GCSqGSIb3DQEBCwUA A4IBAQCb/+5kmgSc5BkmLPls5m05Ky4571nf+KUGBhNjgo8g1zU4bOVMlIoxDiNe dE0dOun22U7kmJSEhReWjI9FuqJ0W9ESkCbfrOR75t0/H7QeJ6yd8Hh5FoUrFcz9 vhg7lD0BC8tcYo6kbp7XHCg/5Nnx9Mpr5wHmbfpF+DuJIXBPpMd7FevYOoGfs44s FEoRNuT3ZT0lXdC08SMX5zviO2ENizSJvKFUXzCQqlfaI/rcgQOpBuQjGFrYpOe6 +ZbbBdENaIktyOtb3qcrxF8aeKi6lThzJzpMCA8OmuPmQSIYd5UQcXs5f6OKIeZR cZmTIuvVzDnNroinjY6MQudx8B7M -----END CERTIFICATE-----Generated at Fri Dec 19 20:08:19 2025 by rpki-client