This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/0EFA4E50BEB111F0B971EF51C4F9AE02.roa File: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (raw, json) Hash identifier: 6FoXdKnh4FobFCJ2G0tpVqFddIfSVlw09KcFje53gKM= Subject key identifier: 7A:BE:2A:96:5B:9D:C3:25:08:C5:70:C0:0E:94:BB:3F:1D:5A:6D:08 Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E Certificate serial: 0F Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/0EFA4E50BEB111F0B971EF51C4F9AE02.roa Signing time: Tue 11 Nov 2025 03:46:52 +0000 ROA not before: Tue 11 Nov 2025 03:46:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135101 IP address blocks: 138.252.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E Validity Not Before: Nov 11 03:46:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6912b1ac-b5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:36:05:5b:25:f5:7a:45:37:74:44:95:4e: 26:ce:26:cb:4e:30:f3:fa:6c:f5:83:af:89:3a:88: 71:a9:2d:bc:2d:66:3e:b9:c5:5a:26:53:b8:c1:d4: 04:6b:fc:ab:74:d8:e0:b1:4b:29:90:7b:bc:ea:6b: f5:5f:fb:73:89:b3:14:f7:bf:ee:47:47:c7:d5:75: 65:d0:66:c6:04:ac:ce:23:19:0a:ca:57:41:c2:e9: 66:45:15:31:6a:ae:ec:b1:9c:74:51:de:c4:4e:cc: 30:6d:c1:50:9a:97:c1:02:15:13:23:4f:8b:21:93: f5:f8:f7:96:ed:91:74:9a:bf:ad:44:90:fb:85:ca: bd:16:95:e6:3f:e9:8a:78:c9:02:c7:ee:98:bc:57: 41:4f:15:d0:c7:48:80:b9:b4:4f:1c:fe:c9:4e:45: af:9a:2b:94:b6:45:8c:e4:32:2d:e9:7a:e5:40:0c: 2a:12:21:29:c9:69:25:19:11:08:be:95:1a:18:ec: 65:cc:a0:20:51:98:1d:d7:30:c9:43:cd:a9:ac:c2: bc:7b:21:f6:e6:35:d8:88:f0:68:fc:1d:e5:18:f2: 46:d9:7a:1d:bf:8a:56:4a:c1:0b:69:c3:c1:34:44: 5e:a1:56:07:3f:6c:41:54:e8:b2:56:5d:3d:c3:76: 2b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BE:2A:96:5B:9D:C3:25:08:C5:70:C0:0E:94:BB:3F:1D:5A:6D:08 X509v3 Authority Key Identifier: keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/0EFA4E50BEB111F0B971EF51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.64.0/24 Signature Algorithm: sha256WithRSAEncryption 79:2a:15:e4:5d:b2:78:2e:00:89:fc:cf:27:ab:74:b4:fc:4a: 5c:80:f6:27:a6:02:03:9f:c8:e2:28:cc:fd:3e:82:80:1b:1d: 96:21:03:f8:56:99:0e:9e:86:fd:f1:b7:47:df:9c:49:d2:93: b9:13:91:5c:6b:ee:37:5f:4a:f9:cf:23:1b:0d:90:f6:06:dc: be:18:ed:b2:56:cf:36:04:06:57:7e:af:74:c6:bb:0e:88:29: 5a:8c:56:3a:2e:4c:f6:ec:a6:59:6d:d1:11:c1:02:6c:57:4e: d1:2f:0b:83:42:e8:7d:04:7c:e4:ea:de:1e:7b:bc:01:f1:01: 89:74:84:14:90:14:59:20:f7:0e:aa:d6:49:f8:d3:c7:2c:83: 21:1e:55:7c:87:8d:b0:a1:fc:bf:63:c6:97:87:a7:70:1d:c2: ee:80:30:66:bb:4d:6f:f3:20:90:f3:76:86:1e:e3:bc:51:4e: b6:20:e1:5c:a9:c5:74:a5:4c:3d:9a:f2:4a:cd:f5:b3:03:e4: a5:10:a7:b8:23:d2:d1:a7:7c:b0:59:ee:f4:ad:54:ae:c2:f5: ca:f9:46:a4:19:ab:52:84:1a:f8:7b:65:a2:55:62:17:4a:e8: 57:1e:b1:7f:81:33:08:f8:91:b2:11:41:ef:32:93:eb:16:07: f9:ec:29:7d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNTM0OTJCOTlENkQwN0Q5NDlGNjkwQTkzNjk1QjE0OTI4 MjE2OUEyRTAeFw0yNTExMTEwMzQ2NTJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MTJiMWFjLWI1ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzWDYFWyX1ekU3dESVTibOJstOMPP6bPWDr4k6iHGpLbwtZj65xVomU7jB1ARr /Kt02OCxSymQe7zqa/Vf+3OJsxT3v+5HR8fVdWXQZsYErM4jGQrKV0HC6WZFFTFq ruyxnHRR3sROzDBtwVCal8ECFRMjT4shk/X495btkXSav61EkPuFyr0WleY/6Yp4 yQLH7pi8V0FPFdDHSIC5tE8c/slORa+aK5S2RYzkMi3peuVADCoSISnJaSUZEQi+ lRoY7GXMoCBRmB3XMMlDzamswrx7IfbmNdiI8Gj8HeUY8kbZeh2/ilZKwQtpw8E0 RF6hVgc/bEFU6LJWXT3DdisjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUer4qllud wyUIxXDADpS7Px1abQgwHwYDVR0jBBgwFoAUU0krmdbQfZSfaQqTaVsUkoIWmi4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzkwNzAwMEY2QUIy NDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpTZmFRcVRhVnNVa29JV21p NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVTBrcm1kYlFmWlNmYVFxVGFWc1Vrb0lXbWk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTYyMy85MDcwMDBGNkFCMjQxMUYwQUZDRTVEMkZDNEY5QUUwMi8wRUZBNEU1MEJF QjExMUYwQjk3MUVGNTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIr8QDANBgkqhkiG9w0BAQsFAAOCAQEAeSoV5F2yeC4AifzP J6t0tPxKXID2J6YCA5/I4ijM/T6CgBsdliED+FaZDp6G/fG3R9+cSdKTuRORXGvu N19K+c8jGw2Q9gbcvhjtslbPNgQGV36vdMa7DogpWoxWOi5M9uymWW3REcECbFdO 0S8Lg0LofQR85OreHnu8AfEBiXSEFJAUWSD3DqrWSfjTxyyDIR5VfIeNsKH8v2PG l4encB3C7oAwZrtNb/MgkPN2hh7jvFFOtiDhXKnFdKVMPZrySs31swPkpRCnuCPS 0ad8sFnu9K1UrsL1yvlGpBmrUoQa+HtlolViF0roVx6xf4EzCPiRshFB7zKT6xYH +ewpfQ== -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:47 2025 by rpki-client