This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/E9A639DAB9EB11F0AE27CB70C4F9AE02.roa File: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (raw, json) Hash identifier: rEHYvI4H6kzy3QLBvK5c7/+2A8OlyxQVAExaC8Q6VxQ= Subject key identifier: 60:7B:AC:BE:72:2D:97:55:E3:D3:E3:0A:D4:73:F6:1A:F2:A8:9D:41 Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Certificate serial: 05 Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/E9A639DAB9EB11F0AE27CB70C4F9AE02.roa Signing time: Wed 05 Nov 2025 02:05:34 +0000 ROA not before: Wed 05 Nov 2025 02:05:34 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 15830 IP address blocks: 138.252.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Nov 2025 05:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D Validity Not Before: Nov 5 02:05:34 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690ab0ed-ec76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:dc:67:42:af:96:e2:24:25:f0:b1:d3:74: 88:fb:37:0a:6b:93:54:d9:5e:6a:ad:11:bc:d6:a9: e4:5c:c6:d0:ec:8b:00:6a:1c:2c:21:02:ef:df:52: 02:62:f8:9c:8c:55:92:20:21:4e:64:70:d4:21:29: 10:28:0a:d7:3c:c0:98:81:26:f4:8d:47:a6:b3:19: fb:6a:ce:f1:b8:de:d0:3b:5e:e6:9a:4d:80:60:01: dd:9a:7d:87:64:7b:f8:53:b5:f5:33:9a:53:3a:1d: 39:85:8f:11:55:a5:4a:b6:0d:94:d7:ee:ed:2f:93: 6f:38:ef:54:41:e5:a2:d9:5b:d2:b6:b1:eb:c7:83: 07:89:5a:ac:05:9f:d0:f4:63:a2:e7:89:52:d3:c1: ab:4d:cf:f6:28:9b:45:1d:5a:9b:31:5d:0f:cb:02: 0f:30:1f:37:26:f8:64:f6:66:8b:00:a4:62:68:0b: 02:72:49:50:8f:0c:30:23:63:43:a4:b4:49:87:a8: ad:aa:04:ee:e2:73:5f:47:ce:ea:e2:a2:8d:bb:0c: ca:ba:b7:56:25:8a:ca:50:79:00:03:df:8d:12:9f: 48:57:a1:61:14:d5:8c:2d:ec:c7:58:55:ff:a1:e0: 4f:4a:84:7c:37:0a:2f:2d:69:46:25:e9:96:b9:fe: 29:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7B:AC:BE:72:2D:97:55:E3:D3:E3:0A:D4:73:F6:1A:F2:A8:9D:41 X509v3 Authority Key Identifier: keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/E9A639DAB9EB11F0AE27CB70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.8.0/23 Signature Algorithm: sha256WithRSAEncryption ab:ed:06:4c:cf:14:1e:cb:1f:38:a7:d2:9a:36:e0:0f:d6:05: b6:bd:e6:59:e6:56:e7:a1:30:51:99:99:5a:ec:f6:f3:fd:34: f7:b5:99:51:b3:7b:ca:7e:e5:90:47:0e:07:e2:55:d5:7b:da: 33:d0:84:38:cc:0b:51:82:80:2c:ef:74:56:73:61:ef:7e:58: 20:77:9f:e9:b2:37:be:73:f4:e5:5b:dc:16:60:ac:6e:0a:05: f7:fc:87:3d:5b:56:20:01:09:33:38:e6:04:29:46:6e:51:d5: e2:86:b4:52:1d:48:70:26:83:9a:21:8d:38:fa:f9:0c:25:dd: 41:fc:7f:45:b6:72:12:62:11:a1:42:35:fa:ea:80:63:6b:20: 3f:d7:a5:dd:40:0d:55:c5:18:da:bd:46:aa:f2:3c:41:04:87: ca:ef:1a:43:3a:d4:de:b4:a4:24:78:f2:27:08:8f:3f:c3:32: 25:3b:88:2c:e4:ec:ab:aa:39:c6:56:9c:48:e4:7b:dc:23:a1: 75:cb:dc:e4:53:3a:13:af:1e:0d:32:1c:10:de:e4:33:2a:a2: 0e:3e:8a:98:71:2c:23:23:e2:c0:26:4d:4d:e2:64:ac:44:c2: 8f:0a:ba:32:03:36:1b:f3:f3:08:cd:be:ef:28:02:ae:b6:91: 3c:b1:1e:4e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkU3NjExMC8GA1UEBRMoQkQ4RTNDQzJBOTNENURCQ0Q4NDI3NTA5NzM4QTMxNEJG OTBDODg3RDAeFw0yNTExMDUwMjA1MzRaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MGFiMGVkLWVjNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTxNxnQq+W4iQl8LHTdIj7Nwprk1TZXmqtEbzWqeRcxtDsiwBqHCwhAu/fUgJi +JyMVZIgIU5kcNQhKRAoCtc8wJiBJvSNR6azGftqzvG43tA7XuaaTYBgAd2afYdk e/hTtfUzmlM6HTmFjxFVpUq2DZTX7u0vk28471RB5aLZW9K2sevHgweJWqwFn9D0 Y6LniVLTwatNz/Yom0UdWpsxXQ/LAg8wHzcm+GT2ZosApGJoCwJySVCPDDAjY0Ok tEmHqK2qBO7ic19Hzurioo27DMq6t1YlispQeQAD340Sn0hXoWEU1Ywt7MdYVf+h 4E9KhHw3Ci8taUYl6Za5/imLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUYHusvnIt l1Xj0+MK1HP2GvKonUEwHwYDVR0jBBgwFoAUvY48wqk9XbzYQnUJc4oxS/kMiH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTc2L0Q5RTRDNENDQjky NzExRjBCODBFQzQ1RUM0RjlBRTAyL3ZZNDh3cWs5WGJ6WVFuVUpjNG94U19rTWlI MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdlk0OHdxazlYYnpZUW5VSmM0b3hTX2tNaUgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU3Ni9EOUU0QzRDQ0I5MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi9FOUE2MzlEQUI5 RUIxMUYwQUUyN0NCNzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8CDANBgkqhkiG9w0BAQsFAAOCAQEAq+0GTM8UHssfOKfS mjbgD9YFtr3mWeZW56EwUZmZWuz28/0097WZUbN7yn7lkEcOB+JV1XvaM9CEOMwL UYKALO90VnNh735YIHef6bI3vnP05VvcFmCsbgoF9/yHPVtWIAEJMzjmBClGblHV 4oa0Uh1IcCaDmiGNOPr5DCXdQfx/RbZyEmIRoUI1+uqAY2sgP9el3UANVcUY2r1G qvI8QQSHyu8aQzrU3rSkJHjyJwiPP8MyJTuILOTsq6o5xlacSOR73COhdcvc5FM6 E68eDTIcEN7kMyqiDj6KmHEsIyPiwCZNTeJkrETCjwq6MgM2G/PzCM2+7ygCrraR PLEeTg== -----END CERTIFICATE-----Generated at Tue Nov 18 13:50:56 2025 by rpki-client