This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/210EF1A0C5CC11F085CF3A5AC4F9AE02.roa File: 210EF1A0C5CC11F085CF3A5AC4F9AE02.roa (raw, json) Hash identifier: n2I65WMHRY3OpnelCNqCwrruskMIvFUB5RDroh1qiqY= Subject key identifier: 8F:8C:76:40:C8:DA:32:75:38:04:75:37:57:28:4D:78:47:35:FD:0A Certificate issuer: /CN=A9116297/serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Certificate serial: 02 Authority key identifier: 4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/210EF1A0C5CC11F085CF3A5AC4F9AE02.roa Signing time: Thu 20 Nov 2025 04:48:17 +0000 ROA not before: Thu 20 Nov 2025 04:48:17 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 46559 IP address blocks: 138.252.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116297, serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Validity Not Before: Nov 20 04:48:17 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=691e9d90-650f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:bf:ab:c1:3b:2e:07:25:5e:d8:1b:ac:22: b4:01:ba:e7:61:8e:ec:95:5d:b7:85:50:e5:20:b7: e9:79:28:7e:ba:79:a2:7b:73:67:0f:c1:5a:93:96: 5d:11:b9:68:a5:72:31:1d:ce:4f:b5:89:a5:1e:21: 50:3e:aa:f2:db:4c:74:77:d9:da:a3:93:68:22:ee: ec:6a:0b:5e:e8:fc:9c:6d:67:10:ef:07:1b:05:a7: 57:de:5f:26:9e:9e:fa:6e:ed:c5:71:97:a5:d7:90: f4:29:fc:8b:66:25:81:4a:66:bd:1c:01:49:6a:a9: 62:22:80:00:3a:11:7b:54:03:65:3c:9d:24:5b:65: 2b:1e:e3:54:22:dc:81:85:ad:b4:c1:08:dc:d1:d5: 42:fe:60:d3:c2:85:00:85:f9:93:e9:f5:99:92:fd: fc:09:8b:bf:8b:d8:12:48:10:df:5a:2a:94:83:92: c1:28:06:7e:40:7e:f2:8e:1f:7b:4e:16:10:54:8b: 8a:17:32:92:c3:28:07:28:44:fa:5a:e4:bf:dd:df: b5:cb:75:02:cf:af:8c:99:7d:21:bc:fa:b3:46:5d: e3:d4:d5:cc:61:31:e3:14:82:7f:88:23:d2:af:a0: 56:2d:e7:34:7f:9d:b6:c7:9e:c1:b6:55:a7:e0:0a: 0b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8C:76:40:C8:DA:32:75:38:04:75:37:57:28:4D:78:47:35:FD:0A X509v3 Authority Key Identifier: keyid:4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/210EF1A0C5CC11F085CF3A5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.196.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:ab:d7:cd:9d:00:40:8b:fa:b3:29:da:31:5e:b7:1f:a4:59: f8:c1:b1:1e:66:97:33:2d:1e:94:23:18:c1:1d:c9:21:cc:05: 5b:9c:20:5e:21:44:23:2b:9c:31:4b:56:82:c5:78:5f:21:bc: 4f:d6:63:80:4c:18:4d:d4:d8:77:5b:d2:92:29:fe:95:e7:1c: 5e:80:62:da:d8:bb:8d:b1:2f:e2:8b:1e:5f:06:51:12:99:31: 70:ab:6e:da:15:c8:48:72:69:ed:b2:fa:a9:83:10:a6:80:a0: 0b:6a:bd:28:b2:c0:a4:56:56:b0:3e:0d:45:0e:8a:c7:99:fd: 77:4f:c3:95:7f:24:e7:f4:0e:ad:28:b1:3c:f3:87:c9:f0:70: 7d:32:81:cc:90:d8:be:e5:fa:7b:3b:32:ba:60:04:98:4d:cf: 73:d2:d9:74:3b:34:b4:76:85:de:c7:49:15:5f:2d:f1:7e:e0: 5c:3e:6c:ec:64:31:c1:8c:ef:f2:fe:b1:3a:5b:b1:65:8e:e5: 8c:29:16:ca:8f:ee:e6:3a:8a:b2:24:74:fc:a8:13:96:04:61: 14:a5:98:6b:42:3b:0e:0e:a1:43:1d:5e:ec:08:38:1c:1a:4b: c3:32:8a:a1:73:c7:5a:4d:ab:42:8d:07:5b:fa:1b:bf:0c:65: dc:5a:a3:ec -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjI5NzExMC8GA1UEBRMoNEM4RjJCNDQ0MzNBQjQ2NEE3MTRBRDhEMzlBOEYxNkU0 QzUwMEE3QzAeFw0yNTExMjAwNDQ4MTdaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWU5ZDkwLTY1MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKzL+rwTsuByVe2BusIrQBuudhjuyVXbeFUOUgt+l5KH66eaJ7c2cPwVqTll0R uWilcjEdzk+1iaUeIVA+qvLbTHR32dqjk2gi7uxqC17o/JxtZxDvBxsFp1feXyae nvpu7cVxl6XXkPQp/ItmJYFKZr0cAUlqqWIigAA6EXtUA2U8nSRbZSse41Qi3IGF rbTBCNzR1UL+YNPChQCF+ZPp9ZmS/fwJi7+L2BJIEN9aKpSDksEoBn5AfvKOH3tO FhBUi4oXMpLDKAcoRPpa5L/d37XLdQLPr4yZfSG8+rNGXePU1cxhMeMUgn+II9Kv oFYt5zR/nbbHnsG2VafgCgt1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUj4x2QMja MnU4BHU3VyhNeEc1/QowHwYDVR0jBBgwFoAUTI8rREM6tGSnFK2NOajxbkxQCnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2Mjk3LzZBNThBRDhFQzVD QjExRjA4NUE5QkM1OEM0RjlBRTAyL1RJOHJSRU02dEdTbkZLMk5PYWp4Ymt4UUNu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEk4clJFTTZ0R1NuRksyTk9hanhia3hRQ253LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjI5Ny82QTU4QUQ4RUM1Q0IxMUYwODVBOUJDNThDNEY5QUUwMi8yMTBFRjFBMEM1 Q0MxMUYwODVDRjNBNUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8xDANBgkqhkiG9w0BAQsFAAOCAQEAjqvXzZ0AQIv6syna MV63H6RZ+MGxHmaXMy0elCMYwR3JIcwFW5wgXiFEIyucMUtWgsV4XyG8T9ZjgEwY TdTYd1vSkin+leccXoBi2ti7jbEv4oseXwZREpkxcKtu2hXISHJp7bL6qYMQpoCg C2q9KLLApFZWsD4NRQ6Kx5n9d0/DlX8k5/QOrSixPPOHyfBwfTKBzJDYvuX6ezsy umAEmE3Pc9LZdDs0tHaF3sdJFV8t8X7gXD5s7GQxwYzv8v6xOluxZY7ljCkWyo/u 5jqKsiR0/KgTlgRhFKWYa0I7Dg6hQx1e7Ag4HBpLwzKKoXPHWk2rQo0HW/obvwxl 3Fqj7A== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:42 2025 by rpki-client