This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/115DA80CBDFA11F0AC07856DC4F9AE02.roa File: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (raw, json) Hash identifier: WMpjwelneu59KCwsFhtoJENKBFdbJa7sC91eiRfTIfA= Subject key identifier: 2D:56:7F:DC:65:9E:50:FC:B2:6B:DF:AF:E3:E4:29:1F:70:97:B7:D8 Certificate issuer: /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF Certificate serial: 02 Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/115DA80CBDFA11F0AC07856DC4F9AE02.roa Signing time: Mon 10 Nov 2025 05:56:58 +0000 ROA not before: Mon 10 Nov 2025 05:56:58 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 135410 IP address blocks: 138.252.172.0/23 maxlen: 23 138.252.172.0/24 maxlen: 24 138.252.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF Validity Not Before: Nov 10 05:56:58 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69117eaa-b8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d3:58:01:45:33:2f:07:c3:64:0a:48:3e:1f: ac:f2:3c:60:cf:75:34:18:14:4b:cb:92:af:02:e7: 3e:0f:df:c8:38:52:5a:7d:40:f3:2e:a9:7b:7c:e8: 53:24:71:cc:b0:fd:63:61:7a:93:1c:8a:bd:2f:c7: c9:ca:77:66:dd:c5:6c:8e:17:eb:16:d1:b5:c2:b0: f8:21:12:06:9f:1a:7c:be:c4:d9:58:a1:3e:4f:51: 30:e0:ba:fd:e4:2c:2c:e7:18:f6:b0:ed:97:78:5b: 33:79:65:2c:4c:14:09:85:3b:76:d1:61:cd:c4:c0: c5:91:77:90:2a:29:4f:d0:74:d3:0a:7a:91:b1:4d: 1d:4d:0f:f1:2a:70:6c:0f:50:a5:3c:8e:1a:5b:12: 1d:49:78:8f:b3:b4:4a:b4:11:81:64:53:ae:b0:c9: da:c2:0d:fc:ba:63:a6:6b:d7:2f:65:06:16:76:02: d2:0e:35:a6:d4:f3:75:b0:3d:2e:0e:0a:d7:d2:f6: c4:a3:bb:6c:93:0f:2c:de:73:5b:a1:db:61:e3:3d: a2:39:b1:fd:7b:52:1c:49:36:17:17:8e:e5:3f:01: 20:5a:a5:91:65:8d:9a:78:5d:a1:d8:19:20:76:c4: b9:8b:f3:52:1a:44:23:40:a6:e1:44:8d:38:16:09: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:56:7F:DC:65:9E:50:FC:B2:6B:DF:AF:E3:E4:29:1F:70:97:B7:D8 X509v3 Authority Key Identifier: keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/115DA80CBDFA11F0AC07856DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.172.0/23 Signature Algorithm: sha256WithRSAEncryption ad:a7:55:58:24:6f:41:33:f6:52:54:cd:ce:24:7f:72:72:74: 86:39:47:72:13:b9:6e:e0:2f:1e:30:2b:e6:24:29:7e:30:d1: e5:0e:62:40:40:e2:19:d2:49:b1:e9:e9:22:16:26:0e:8c:08: f3:f1:2b:f0:d1:9e:2c:31:67:dc:45:5b:f5:06:2c:fb:ac:46: 05:2d:58:b8:45:ab:af:c0:fa:c6:cd:63:3d:8d:7b:0d:2b:89: ec:62:81:ae:70:21:ea:11:0e:42:7a:3d:9a:bf:98:6f:71:2e: 09:aa:84:42:c4:53:51:d3:13:2f:6f:08:0d:a9:2b:55:f0:4d: 88:8d:22:95:94:5c:66:84:75:48:d7:aa:59:2a:40:48:71:54: 55:4a:92:72:26:78:e3:7c:18:a3:7c:17:16:d7:92:e4:08:55: f1:d0:26:8a:e3:6c:57:03:9f:c8:3c:29:26:af:16:a8:69:ce: aa:cd:30:ab:44:99:1c:d7:c6:90:dd:88:dc:d5:11:29:14:32: 75:43:ff:aa:89:cd:40:da:07:d0:c1:a6:87:77:b2:f0:16:66: 8d:4a:34:6f:eb:ef:33:1e:c9:ec:58:cf:d4:c9:b1:73:1a:5d: 66:57:d2:dd:8e:28:fc:e8:01:e0:dd:ea:e7:fc:f8:e7:21:3f: b8:f6:25:6e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTdGQzExMC8GA1UEBRMoOTNFNkNDOUNCQzk0QzZCNEU4QzdEOTg2NDE4MzBERTY2 MzkxQjlERjAeFw0yNTExMTAwNTU2NThaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MTE3ZWFhLWI4YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT01gBRTMvB8NkCkg+H6zyPGDPdTQYFEvLkq8C5z4P38g4Ulp9QPMuqXt86FMk ccyw/WNhepMcir0vx8nKd2bdxWyOF+sW0bXCsPghEgafGny+xNlYoT5PUTDguv3k LCznGPaw7Zd4WzN5ZSxMFAmFO3bRYc3EwMWRd5AqKU/QdNMKepGxTR1ND/EqcGwP UKU8jhpbEh1JeI+ztEq0EYFkU66wydrCDfy6Y6Zr1y9lBhZ2AtIONabU83WwPS4O CtfS9sSju2yTDyzec1uh22HjPaI5sf17UhxJNhcXjuU/ASBapZFljZp4XaHYGSB2 xLmL81IaRCNApuFEjTgWCW2xAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULVZ/3GWe UPyya9+v4+QpH3CXt9gwHwYDVR0jBBgwFoAUk+bMnLyUxrTox9mGQYMN5mORud8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1N0ZDLzg4NDU3MkQ0QkRG OTExRjBCM0UwNTI2Q0M0RjlBRTAyL2stYk1uTHlVeHJUb3g5bUdRWU1ONW1PUnVk OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvay1iTW5MeVV4clRveDltR1FZTU41bU9SdWQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTdGQy84ODQ1NzJENEJERjkxMUYwQjNFMDUyNkNDNEY5QUUwMi8xMTVEQTgwQ0JE RkExMUYwQUMwNzg1NkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8rDANBgkqhkiG9w0BAQsFAAOCAQEAradVWCRvQTP2UlTN ziR/cnJ0hjlHchO5buAvHjAr5iQpfjDR5Q5iQEDiGdJJsenpIhYmDowI8/Er8NGe LDFn3EVb9QYs+6xGBS1YuEWrr8D6xs1jPY17DSuJ7GKBrnAh6hEOQno9mr+Yb3Eu CaqEQsRTUdMTL28IDakrVfBNiI0ilZRcZoR1SNeqWSpASHFUVUqSciZ443wYo3wX FteS5AhV8dAmiuNsVwOfyDwpJq8WqGnOqs0wq0SZHNfGkN2I3NURKRQydUP/qonN QNoH0MGmh3ey8BZmjUo0b+vvMx7J7FjP1MmxcxpdZlfS3Y4o/OgB4N3q5/z45yE/ uPYlbg== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:41 2025 by rpki-client