This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/357B8ABEC67F11F08B0CE042C4F9AE02.roa File: 357B8ABEC67F11F08B0CE042C4F9AE02.roa (raw, json) Hash identifier: dAZhfHEyAhFn87WTTiMynuTaHzxmw7BH+vzWlYaWz5s= Subject key identifier: 6B:BB:48:7F:6D:6D:3C:94:1C:B6:62:9C:48:D8:A5:69:67:9A:11:26 Certificate issuer: /CN=A9110C2F/serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB Certificate serial: 04 Authority key identifier: 63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/357B8ABEC67F11F08B0CE042C4F9AE02.roa Signing time: Fri 21 Nov 2025 02:10:11 +0000 ROA not before: Fri 21 Nov 2025 02:10:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38229 IP address blocks: 192.248.0.0/17 maxlen: 17 192.248.0.0/22 maxlen: 22 192.248.4.0/22 maxlen: 22 192.248.8.0/21 maxlen: 21 192.248.16.0/20 maxlen: 21 192.248.32.0/19 maxlen: 19 192.248.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C2F, serialNumber=63F359A69EDC3863486F46D6141F9B5C014323FB Validity Not Before: Nov 21 02:10:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=691fca03-5463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:38:b3:4a:71:4a:02:55:70:78:e7:ac:e0: 52:fc:45:9f:45:c0:cf:dd:c4:ba:47:07:98:b0:0c: 9e:97:19:27:7d:65:f1:04:c2:76:f7:d3:08:e9:2f: 93:9d:89:9c:18:8f:81:eb:6c:cd:be:79:20:0f:05: 71:cf:12:54:bb:20:9b:9b:7e:70:29:9e:5f:8d:95: 43:1b:cf:c4:61:d7:69:fd:b3:3a:e4:78:ac:e0:27: 21:2d:3a:11:07:43:a7:6b:d8:0b:fe:0c:d0:33:84: 77:fd:14:a7:ef:66:96:ec:fd:fd:13:84:7c:fb:36: c3:90:a8:59:a4:85:55:0c:49:14:2b:5c:ac:18:e1: 47:a6:ee:15:3d:e3:39:8a:af:70:f7:47:ac:a8:88: 12:33:48:6c:fa:6a:bd:f1:9c:c3:0f:4c:53:47:5d: 3e:98:b0:ee:ee:fd:e7:35:c9:28:c2:42:31:e9:09: e1:51:6d:f4:8d:5d:76:19:1b:5e:c4:27:9d:46:51: 6b:8f:40:a0:dc:aa:c5:08:68:a9:87:2a:14:ef:d6: e2:60:8c:cf:8d:c9:66:b7:78:17:e6:65:e9:cb:f5: 5c:92:00:c7:da:63:16:ef:b8:f8:ed:76:e5:51:2c: 43:c9:a6:70:86:d1:5f:a9:96:69:46:a2:61:19:15: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BB:48:7F:6D:6D:3C:94:1C:B6:62:9C:48:D8:A5:69:67:9A:11:26 X509v3 Authority Key Identifier: keyid:63:F3:59:A6:9E:DC:38:63:48:6F:46:D6:14:1F:9B:5C:01:43:23:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y_NZpp7cOGNIb0bWFB-bXAFDI_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C2F/1A6AE97CC5A811F093A7F02CC4F9AE02/357B8ABEC67F11F08B0CE042C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.248.0.0/17 Signature Algorithm: sha256WithRSAEncryption bb:e9:33:76:80:6f:b1:fb:da:94:70:4e:18:2f:da:ec:e2:41: 98:a5:43:ac:6b:69:cf:db:42:7e:0c:e0:01:16:52:01:f0:f1: ad:7b:0a:49:7b:6c:11:c4:f3:cf:95:95:71:03:b0:d6:26:15: a8:ec:48:9e:e8:45:03:70:29:23:ba:88:15:60:f1:10:48:b4: 75:28:d3:dd:b5:4c:89:a8:b2:d7:62:33:28:b9:f5:fa:34:b0: 15:3c:a6:76:ec:e4:a1:a3:71:6a:2e:a8:f9:60:91:dd:37:4e: 48:d1:b9:8f:ba:84:cc:b8:f4:48:ed:2b:1c:a6:76:1f:6c:1b: 1d:6d:0c:b3:51:63:99:ba:4a:54:47:d1:8e:5a:ae:20:aa:3f: 9c:82:fb:5f:8c:81:41:36:67:b6:01:51:67:8d:9d:7f:d3:94: 5c:e4:04:c9:7e:23:a8:cf:e7:99:1c:ae:07:cb:25:5f:1b:3c: 59:0c:60:09:c1:1e:07:91:30:55:e7:5c:ad:e5:85:5e:3b:38: 6e:8a:35:a9:9f:6d:18:09:5c:92:9a:b7:a8:a7:03:75:7f:fd: fd:20:e2:a0:54:6c:e1:6a:eb:b4:c3:3e:d6:d0:c1:8d:04:3b: 7a:89:54:cc:1c:e4:16:90:db:08:8a:42:43:e9:37:1d:63:af: 1a:40:1d:8e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MEMyRjExMC8GA1UEBRMoNjNGMzU5QTY5RURDMzg2MzQ4NkY0NkQ2MTQxRjlCNUMw MTQzMjNGQjAeFw0yNTExMjEwMjEwMTFaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWZjYTAzLTU0NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/KDizSnFKAlVweOes4FL8RZ9FwM/dxLpHB5iwDJ6XGSd9ZfEEwnb30wjpL5Od iZwYj4HrbM2+eSAPBXHPElS7IJubfnApnl+NlUMbz8Rh12n9szrkeKzgJyEtOhEH Q6dr2Av+DNAzhHf9FKfvZpbs/f0ThHz7NsOQqFmkhVUMSRQrXKwY4Uem7hU94zmK r3D3R6yoiBIzSGz6ar3xnMMPTFNHXT6YsO7u/ec1ySjCQjHpCeFRbfSNXXYZG17E J51GUWuPQKDcqsUIaKmHKhTv1uJgjM+NyWa3eBfmZenL9VySAMfaYxbvuPjtduVR LEPJpnCG0V+plmlGomEZFSxrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUa7tIf21t PJQctmKcSNilaWeaESYwHwYDVR0jBBgwFoAUY/NZpp7cOGNIb0bWFB+bXAFDI/sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwQzJGLzFBNkFFOTdDQzVB ODExRjA5M0E3RjAyQ0M0RjlBRTAyL1lfTlpwcDdjT0dOSWIwYldGQi1iWEFGRElf cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWV9OWnBwN2NPR05JYjBiV0ZCLWJYQUZESV9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEMyRi8xQTZBRTk3Q0M1QTgxMUYwOTNBN0YwMkNDNEY5QUUwMi8zNTdCOEFCRUM2 N0YxMUYwOEIwQ0UwNDJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEB8D4ADANBgkqhkiG9w0BAQsFAAOCAQEAu+kzdoBvsfvalHBO GC/a7OJBmKVDrGtpz9tCfgzgARZSAfDxrXsKSXtsEcTzz5WVcQOw1iYVqOxInuhF A3ApI7qIFWDxEEi0dSjT3bVMiaiy12IzKLn1+jSwFTymduzkoaNxai6o+WCR3TdO SNG5j7qEzLj0SO0rHKZ2H2wbHW0Ms1FjmbpKVEfRjlquIKo/nIL7X4yBQTZntgFR Z42df9OUXOQEyX4jqM/nmRyuB8slXxs8WQxgCcEeB5EwVedcreWFXjs4boo1qZ9t GAlckpq3qKcDdX/9/SDioFRs4WrrtMM+1tDBjQQ7eolUzBzkFpDbCIpCQ+k3HWOv GkAdjg== -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:58 2025 by rpki-client