This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/576F51B8C91911F0AB974C6DC4F9AE02.roa File: 576F51B8C91911F0AB974C6DC4F9AE02.roa (raw, json) Hash identifier: IB2q7pBY7tiWYmmMufMjNcggqg1Dv4TLNZ3XaMRxv3I= Subject key identifier: 71:87:DD:91:B2:A5:E4:5A:60:45:6F:7E:33:DE:88:B9:40:87:9C:7E Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 39 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/576F51B8C91911F0AB974C6DC4F9AE02.roa Signing time: Mon 24 Nov 2025 10:46:25 +0000 ROA not before: Mon 24 Nov 2025 10:46:25 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 20940 IP address blocks: 61.19.5.0/24 maxlen: 24 61.19.8.0/24 maxlen: 24 61.19.11.0/24 maxlen: 24 61.19.12.0/24 maxlen: 24 61.19.13.0/24 maxlen: 24 122.155.239.0/24 maxlen: 24 2001:c38:500a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 10:46:25 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69243781-02c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:15:50:d2:a1:42:d7:58:70:aa:85:cc:dd: 8a:9c:04:2c:3e:35:c9:a6:cc:f9:44:38:25:97:4c: 5d:7c:94:aa:f8:96:48:11:b1:c7:15:01:8e:94:a0: 0f:a9:80:39:6b:f3:9a:a2:c7:85:11:55:d5:96:af: 0f:27:55:9f:48:75:17:14:35:e2:5e:da:52:8f:99: 13:bc:a2:12:09:af:e0:68:55:3d:58:9f:bc:40:cd: 54:9e:23:e3:db:b9:ad:d1:90:fc:62:33:bd:a7:27: 47:8a:49:43:e5:3d:33:31:4b:10:2f:a9:b2:03:12: 9c:16:c0:26:49:00:4a:be:e0:34:17:38:9f:d6:6e: f6:21:eb:73:8c:f4:36:d4:db:d8:a5:0e:88:9e:d7: 5f:68:fe:98:d1:c7:d3:50:fd:3f:0b:49:05:55:0d: ba:ca:8b:3d:c3:b4:4d:8f:47:95:60:60:a8:ae:ae: 02:e7:d4:c7:3a:0b:e0:63:de:aa:65:66:a4:08:28: 73:42:08:c2:c6:db:46:cf:49:a8:ce:b9:bf:4d:4f: 59:fa:c7:0a:32:e1:3f:d3:b3:a0:fb:4a:be:30:4a: f6:ee:48:58:75:40:f2:bb:48:82:8c:6d:08:67:4c: 15:16:e5:68:d7:74:f0:56:50:9d:80:2a:ef:47:fe: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:87:DD:91:B2:A5:E4:5A:60:45:6F:7E:33:DE:88:B9:40:87:9C:7E X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/576F51B8C91911F0AB974C6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.19.5.0/24 61.19.8.0/24 61.19.11.0-61.19.13.255 122.155.239.0/24 IPv6: 2001:c38:500a::/48 Signature Algorithm: sha256WithRSAEncryption 4f:dc:48:68:d7:05:fe:49:67:90:0b:7b:07:48:de:11:59:cc: b7:9d:20:d3:d8:94:ca:8f:5c:3f:32:6d:36:e7:63:a7:f2:61: f9:70:5b:29:70:a1:b4:d8:7a:03:0b:1e:62:70:7e:c2:18:38: 87:cc:43:29:e8:1b:90:db:94:8f:f0:7d:34:8f:49:9e:5f:7d: 66:10:0e:0a:52:1c:d3:2b:36:14:59:9a:be:71:ae:1a:a0:ab: ef:4a:ed:5a:65:b4:c6:0c:f0:2e:87:9c:8e:10:f0:b0:94:d3: ac:09:a0:94:22:88:87:dd:c3:fc:13:4a:c6:6e:31:a3:1a:96: c8:f3:96:dd:27:d9:1b:e3:d9:50:c4:4d:ec:19:01:98:c2:c6: 93:31:34:4e:6f:86:7c:da:40:ab:17:c9:d0:68:75:5c:65:27: 63:be:50:2f:c7:9e:3a:0d:c9:b9:22:25:7e:e0:87:4d:7b:ab: 0c:05:7d:b2:98:10:2b:14:a1:c0:f3:ca:14:5b:ac:d8:15:f3: b5:32:46:2b:39:fb:ef:62:55:db:95:ca:48:be:fd:f2:db:01: 7a:8d:0e:1e:b1:fb:69:1a:ec:ab:54:a7:de:71:3b:62:a4:fd: b5:a4:d7:0f:04:49:41:d0:6c:cf:d7:b4:44:02:79:86:15:95: 90:4b:68:2b -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQxMDQ2MjVaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQzNzgxLTAyYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcIhVQ0qFC11hwqoXM3YqcBCw+NcmmzPlEOCWXTF18lKr4lkgRsccVAY6UoA+p gDlr85qix4URVdWWrw8nVZ9IdRcUNeJe2lKPmRO8ohIJr+BoVT1Yn7xAzVSeI+Pb ua3RkPxiM72nJ0eKSUPlPTMxSxAvqbIDEpwWwCZJAEq+4DQXOJ/WbvYh63OM9DbU 29ilDoie119o/pjRx9NQ/T8LSQVVDbrKiz3DtE2PR5VgYKiurgLn1Mc6C+Bj3qpl ZqQIKHNCCMLG20bPSajOub9NT1n6xwoy4T/Ts6D7Sr4wSvbuSFh1QPK7SIKMbQhn TBUW5WjXdPBWUJ2AKu9H/p6fAgMBAAGjggLAMIICvDAdBgNVHQ4EFgQUcYfdkbKl 5FpgRW9+M96IuUCHnH4wHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi81NzZGNTFCOEM5 MTkxMUYwQUI5NzRDNkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBKBggrBgEFBQcBBwEB/wQ7 MDkwJgQCAAEwIAMEAD0TBQMEAD0TCDAMAwQAPRMLAwQBPRMMAwQAepvvMA8EAgAC MAkDBwAgAQw4UAowDQYJKoZIhvcNAQELBQADggEBAE/cSGjXBf5JZ5ALewdI3hFZ zLedINPYlMqPXD8ybTbnY6fyYflwWylwobTYegMLHmJwfsIYOIfMQynoG5DblI/w fTSPSZ5ffWYQDgpSHNMrNhRZmr5xrhqgq+9K7VpltMYM8C6HnI4Q8LCU06wJoJQi iIfdw/wTSsZuMaMalsjzlt0n2Rvj2VDETewZAZjCxpMxNE5vhnzaQKsXydBodVxl J2O+UC/HnjoNybkiJX7gh017qwwFfbKYECsUocDzyhRbrNgV87UyRis5++9iVduV yki+/fLbAXqNDh6x+2ka7KtUp95xO2Kk/bWk1w8ESUHQbM/XtEQCeYYVlZBLaCs= -----END CERTIFICATE-----Generated at Sat Dec 6 01:49:47 2025 by rpki-client