This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32322e302f32342d3234203d3e203438323636.roa File: 34332e3235322e32322e302f32342d3234203d3e203438323636.roa (raw, json) Hash identifier: ookmbsWFbg+9xHZ1MlZYR8C8SeTg9Fi1QoqMLsxk6Xs= Subject key identifier: 73:57:BC:4B:40:61:87:14:75:8A:80:49:A2:04:FD:69:CB:27:CC:E8 Certificate issuer: /CN=A91DD5100000/serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Certificate serial: 70E492AC20525C3C767A1EF2AA99003AA4BF0F6A Authority key identifier: 5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32322e302f32342d3234203d3e203438323636.roa Signing time: Fri 19 Dec 2025 13:29:20 +0000 ROA not before: Fri 19 Dec 2025 13:24:20 +0000 ROA not after: Fri 18 Dec 2026 13:29:20 +0000 asID: 48266 IP address blocks: 43.252.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e4:92:ac:20:52:5c:3c:76:7a:1e:f2:aa:99:00:3a:a4:bf:0f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5100000, serialNumber=5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B Validity Not Before: Dec 19 13:24:20 2025 GMT Not After : Dec 18 13:29:20 2026 GMT Subject: CN=7357BC4B40618714758A8049A204FD69CB27CCE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:ea:20:5b:cf:91:04:05:58:87:15:30:90: f3:43:d8:81:ac:81:66:5e:2b:fd:d9:a3:6b:59:14: df:03:66:f8:6d:7d:c0:9d:50:b0:73:7f:12:85:89: c5:03:7a:1a:1c:be:33:6b:b5:27:21:15:7c:fd:bb: ca:84:6e:9f:81:2b:ae:bb:98:b8:97:a2:9a:9b:e8: 76:cd:f2:0b:7d:91:bd:93:81:b1:8b:0f:4d:0d:c1: a2:37:8c:d0:cf:cb:e7:a6:33:22:de:c1:ef:80:15: 16:7e:e2:73:ae:57:5f:c9:4d:e2:64:9e:8d:87:a3: 99:36:45:27:cc:db:b5:fe:ef:70:6a:53:5a:c5:34: 65:cd:e1:67:ac:ea:96:37:3c:ee:0e:54:81:e5:9a: 29:74:3a:be:6f:e6:f2:d3:5a:a9:f6:d8:36:37:4b: 0f:bb:c4:f7:cf:52:a6:5a:19:e1:ba:dd:55:e0:ce: ef:08:88:db:3c:1a:86:05:d0:07:02:1f:11:14:8a: 4a:1d:a5:b0:31:c3:6d:74:91:db:b7:f8:65:66:fa: 01:d8:ee:9f:46:36:5b:db:13:04:23:d3:5b:9c:1b: bf:84:65:c6:5a:32:cd:dc:26:50:ac:59:53:d3:1a: 4d:c8:17:dd:80:7f:9e:89:48:c4:95:81:46:50:e2: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:57:BC:4B:40:61:87:14:75:8A:80:49:A2:04:FD:69:CB:27:CC:E8 X509v3 Authority Key Identifier: keyid:5D:70:7B:0D:35:69:62:24:32:B4:BD:CB:FD:32:0F:9A:8B:6D:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/5D707B0D3569622432B4BDCBFD320F9A8B6DDC7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XXB7DTVpYiQytL3L_TIPmott3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91DD5100000/0/34332e3235322e32322e302f32342d3234203d3e203438323636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.22.0/24 Signature Algorithm: sha256WithRSAEncryption 58:db:2f:c2:e0:f4:00:0b:e0:fb:de:9c:22:47:11:4f:96:e5: bf:3c:c9:5f:88:07:7b:d8:a3:b0:c9:1d:38:51:3c:4e:79:21: 9f:f9:d1:65:03:6a:11:39:86:18:09:ba:44:93:97:f9:2f:f1: cd:6e:f8:98:e7:3e:79:29:f4:fd:90:5c:e2:c0:84:68:fd:9b: c4:2e:67:81:4d:dc:55:68:96:1f:55:28:59:0f:50:6b:69:4b: d0:eb:30:05:da:f7:f3:6e:f5:9e:24:da:5b:d9:7d:4a:03:f0: c1:8f:f5:94:93:9e:65:34:5c:24:3c:c3:dd:e3:db:91:27:01: 60:7c:30:20:2a:53:56:f5:1c:c5:35:2a:70:d7:06:e7:e2:d8: 90:22:eb:c3:5d:5f:df:cb:5d:b1:aa:6f:59:c1:e2:18:84:d4: 75:0f:b5:4e:2a:c6:3f:ff:6f:49:7f:29:47:d7:60:e3:16:93: cb:29:19:6b:14:49:32:0b:1d:6c:52:0f:87:9e:eb:d2:a6:39: 91:1e:99:67:8d:56:00:f8:1c:0d:3b:50:f5:79:69:b5:ab:97: cc:50:af:d7:fe:1f:ac:db:4d:f9:bd:d6:f3:42:d3:16:da:38: 83:73:25:79:bb:c8:d7:9f:a2:52:1d:32:60:5b:cd:df:92:43: ab:45:54:c4 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUcOSSrCBSXDx2eh7yqpkAOqS/D2owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxREQ1MTAwMDAwMTEwLwYDVQQFEyg1RDcwN0IwRDM1 Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCMB4XDTI1MTIxOTEzMjQyMFoX DTI2MTIxODEzMjkyMFowMzExMC8GA1UEAxMoNzM1N0JDNEI0MDYxODcxNDc1OEE4 MDQ5QTIwNEZENjlDQjI3Q0NFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPn6iBbz5EEBViHFTCQ80PYgayBZl4r/dmja1kU3wNm+G19wJ1QsHN/EoWJ xQN6Ghy+M2u1JyEVfP27yoRun4ErrruYuJeimpvods3yC32RvZOBsYsPTQ3BojeM 0M/L56YzIt7B74AVFn7ic65XX8lN4mSejYejmTZFJ8zbtf7vcGpTWsU0Zc3hZ6zq ljc87g5UgeWaKXQ6vm/m8tNaqfbYNjdLD7vE989SploZ4brdVeDO7wiI2zwahgXQ BwIfERSKSh2lsDHDbXSR27f4ZWb6Adjun0Y2W9sTBCPTW5wbv4RlxloyzdwmUKxZ U9MaTcgX3YB/nolIxJWBRlDiQ2ECAwEAAaOCAg8wggILMB0GA1UdDgQWBBRzV7xL QGGHFHWKgEmiBP1pyyfM6DAfBgNVHSMEGDAWgBRdcHsNNWliJDK0vcv9Mg+ai23c ezAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFERDUxMDAwMDAvMC81RDcwN0Iw RDM1Njk2MjI0MzJCNEJEQ0JGRDMyMEY5QThCNkREQzdCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9YWEI3RFRWcFlp UXl0TDNMX1RJUG1vdHQzSHMuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxREQ1 MTAwMDAwLzAvMzQzMzJlMzIzNTMyMmUzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2Qz ZTIwMzQzODMyMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv8FjANBgkqhkiG9w0BAQsFAAOCAQEA WNsvwuD0AAvg+96cIkcRT5blvzzJX4gHe9ijsMkdOFE8Tnkhn/nRZQNqETmGGAm6 RJOX+S/xzW74mOc+eSn0/ZBc4sCEaP2bxC5ngU3cVWiWH1UoWQ9Qa2lL0OswBdr3 8271niTaW9l9SgPwwY/1lJOeZTRcJDzD3ePbkScBYHwwICpTVvUcxTUqcNcG5+LY kCLrw11f38tdsapvWcHiGITUdQ+1TirGP/9vSX8pR9dg4xaTyykZaxRJMgsdbFIP h57r0qY5kR6ZZ41WAPgcDTtQ9XlptauXzFCv1/4frNtN+b3W80LTFto4g3MlebvI 15+iUh0yYFvN35JDq0VUxA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:41 2025 by rpki-client