This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/CF829C38C92211F0B48DBA21C4F9AE02.roa File: CF829C38C92211F0B48DBA21C4F9AE02.roa (raw, json) Hash identifier: iU9xhgwk7BF9Dw1LyEZZJRsmd4voHButrjrmIYckRSU= Subject key identifier: 20:D7:3F:DA:E2:9E:88:E5:6B:1C:F6:C7:56:75:42:B1:2B:0A:9B:A5 Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Certificate serial: 05 Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/CF829C38C92211F0B48DBA21C4F9AE02.roa Signing time: Mon 24 Nov 2025 10:46:20 +0000 ROA not before: Mon 24 Nov 2025 10:46:20 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135566 IP address blocks: 209.15.96.0/24 maxlen: 24 209.15.97.0/24 maxlen: 24 209.15.98.0/24 maxlen: 24 209.15.99.0/24 maxlen: 24 209.15.100.0/24 maxlen: 24 209.15.101.0/24 maxlen: 24 209.15.102.0/24 maxlen: 24 209.15.103.0/24 maxlen: 24 209.15.104.0/24 maxlen: 24 209.15.105.0/24 maxlen: 24 209.15.106.0/24 maxlen: 24 209.15.107.0/24 maxlen: 24 209.15.108.0/24 maxlen: 24 209.15.109.0/24 maxlen: 24 209.15.110.0/24 maxlen: 24 209.15.111.0/24 maxlen: 24 209.15.112.0/24 maxlen: 24 209.15.113.0/24 maxlen: 24 209.15.114.0/24 maxlen: 24 209.15.115.0/24 maxlen: 24 209.15.116.0/24 maxlen: 24 209.15.117.0/24 maxlen: 24 209.15.118.0/24 maxlen: 24 209.15.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220 Validity Not Before: Nov 24 10:46:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6924377b-e58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fe:ed:a8:93:e2:e5:ac:ad:84:f5:fb:e4:6f: f5:c6:b5:85:cb:7f:20:ab:dd:1d:6b:36:a2:50:84: 3d:6c:e8:4c:99:20:18:9a:83:57:17:e0:71:88:6c: a8:3e:91:3a:8b:e0:36:d8:2a:bc:e6:6f:b3:3e:1d: 4e:ab:63:59:ac:a3:11:3b:b5:61:20:89:b0:97:be: d6:4e:7f:39:14:bb:a6:05:a6:a8:0a:df:ac:62:79: 5a:6f:64:f1:26:e3:e5:92:b5:44:8b:28:e5:c9:ef: e5:03:3f:65:92:f9:12:2d:be:ae:b6:cc:f9:76:2a: 60:3a:25:f4:21:b2:3f:06:37:02:80:1c:5d:85:58: a1:2c:df:ce:4f:64:49:73:ef:8d:85:cf:0b:9d:02: 4e:92:c5:ce:fb:65:bb:57:b7:e3:a7:36:32:f7:64: 84:bd:8d:13:40:90:7b:b2:f9:56:9f:23:df:4e:77: be:a5:9f:4a:e8:5b:0b:fe:9d:25:6f:b6:a7:9e:2f: 57:9f:87:64:53:e3:af:41:53:4b:61:cd:dd:09:01: d1:61:b2:15:38:aa:1b:02:3b:95:29:52:0c:4f:04: ec:b2:b2:76:63:32:08:9b:b0:cc:ac:ab:ed:fa:19: d6:fa:6c:9a:42:19:c8:90:e8:7f:af:0f:d3:c5:6d: 1c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D7:3F:DA:E2:9E:88:E5:6B:1C:F6:C7:56:75:42:B1:2B:0A:9B:A5 X509v3 Authority Key Identifier: keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/CF829C38C92211F0B48DBA21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 209.15.96.0-209.15.119.255 Signature Algorithm: sha256WithRSAEncryption 40:8e:22:6b:2a:eb:8e:ea:b7:2d:28:96:48:4a:47:ef:01:a3: 37:06:1b:57:39:13:0f:38:43:12:aa:ae:50:e9:1a:0e:a9:26: 9a:67:de:5c:60:28:b7:25:47:96:e3:32:41:4e:4a:37:87:24: 5b:b5:ca:d9:85:de:cb:c8:9a:5f:d5:03:11:13:10:88:d4:11: 9b:72:02:2b:8a:ea:04:a5:de:53:46:80:e5:16:ed:26:61:0c: ff:fb:73:7d:24:5e:d3:dc:ce:64:e8:c9:2f:40:e3:b2:cf:99: 5c:93:68:e8:43:65:eb:2d:ec:9c:b8:44:5f:d4:1d:24:28:d1: e0:a8:8f:36:9e:0d:04:6d:e8:6c:61:a6:79:d3:ad:df:ef:3f: 8a:8b:fb:d2:76:93:3f:e7:f4:d4:14:6f:07:b5:08:b0:f1:f7: 74:46:83:62:35:7e:ad:ec:9a:d8:a2:62:00:ec:68:43:b1:df: 25:65:28:2a:58:e4:8e:1b:3a:1a:ad:cb:b3:d5:3a:dc:17:6a: fa:99:75:6b:cb:45:ed:49:e2:04:42:37:d5:8c:7d:70:0c:93: f6:a2:73:a8:6a:d1:49:d7:fb:4a:4f:a4:7d:64:16:59:6f:bf: 1d:ba:17:a9:e9:51:4c:41:88:b7:7a:71:75:82:9b:bf:3f:d2: bf:f3:98:d7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoMUE1QjAwNTk3QzhEN0I2MUZCQkVGRUM1Qjk0NEZFNkY5 QzYzRTIyMDAeFw0yNTExMjQxMDQ2MjBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQzNzdiLWU1OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc/u2ok+LlrK2E9fvkb/XGtYXLfyCr3R1rNqJQhD1s6EyZIBiag1cX4HGIbKg+ kTqL4DbYKrzmb7M+HU6rY1msoxE7tWEgibCXvtZOfzkUu6YFpqgK36xieVpvZPEm 4+WStUSLKOXJ7+UDP2WS+RItvq62zPl2KmA6JfQhsj8GNwKAHF2FWKEs385PZElz 742FzwudAk6Sxc77ZbtXt+OnNjL3ZIS9jRNAkHuy+VafI99Od76ln0roWwv+nSVv tqeeL1efh2RT469BU0thzd0JAdFhshU4qhsCO5UpUgxPBOyysnZjMgibsMysq+36 Gdb6bJpCGciQ6H+vD9PFbRxHAgMBAAGjggKdMIICmTAdBgNVHQ4EFgQUINc/2uKe iOVrHPbHVnVCsSsKm6UwHwYDVR0jBBgwFoAUGlsAWXyNe2H7vv7FuUT+b5xj4iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0FFODgzNjY4QzhF QzExRjA5OUQ4QUI0NUM0RjlBRTAyL0dsc0FXWHlOZTJIN3Z2N0Z1VVQtYjV4ajRp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2xzQVdYeU5lMkg3dnY3RnVVVC1iNXhqNGlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9BRTg4MzY2OEM4RUMxMUYwOTlEOEFCNDVDNEY5QUUwMi9DRjgyOUMzOEM5 MjIxMUYwQjQ4REJBMjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQF0Q9gAwQD0Q9wMA0GCSqGSIb3DQEBCwUAA4IBAQBAjiJr KuuO6rctKJZISkfvAaM3BhtXORMPOEMSqq5Q6RoOqSaaZ95cYCi3JUeW4zJBTko3 hyRbtcrZhd7LyJpf1QMRExCI1BGbcgIriuoEpd5TRoDlFu0mYQz/+3N9JF7T3M5k 6MkvQOOyz5lck2joQ2XrLeycuERf1B0kKNHgqI82ng0EbehsYaZ5063f7z+Ki/vS dpM/5/TUFG8HtQiw8fd0RoNiNX6t7JrYomIA7GhDsd8lZSgqWOSOGzoarcuz1Trc F2r6mXVry0XtSeIEQjfVjH1wDJP2onOoatFJ1/tKT6R9ZBZZb78duhep6VFMQYi3 enF1gpu/P9K/85jX -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:48 2025 by rpki-client