This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/66FA3E10C68311F0A13F9748C4F9AE02.roa File: 66FA3E10C68311F0A13F9748C4F9AE02.roa (raw, json) Hash identifier: 7oAkbXAK+WoVPdADcIVVsk7xd2KL5/UvxGiVooBPqP4= Subject key identifier: 92:33:06:AA:82:DB:8C:12:21:A6:FD:BC:5B:EA:D0:E9:9A:A6:DB:63 Certificate issuer: /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Certificate serial: 02 Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/66FA3E10C68311F0A13F9748C4F9AE02.roa Signing time: Fri 21 Nov 2025 02:40:12 +0000 ROA not before: Fri 21 Nov 2025 02:40:12 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139923 IP address blocks: 138.252.248.0/23 maxlen: 23 138.252.248.0/24 maxlen: 24 138.252.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Validity Not Before: Nov 21 02:40:12 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=691fd10c-ef6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:0f:a1:f0:ac:8f:45:be:ea:62:4c:98:f5: 51:c6:89:fb:8c:17:43:d8:35:cf:68:8e:6e:1e:8a: 32:ad:3c:01:bf:e5:09:1a:b1:ee:2c:db:7e:a4:ea: 22:9d:77:49:ff:ca:2a:a0:92:b9:49:19:e2:d3:8c: 4c:11:6c:8e:f7:db:28:6a:21:39:ab:fa:63:d0:33: 27:35:05:c5:c2:3b:76:a6:80:c4:de:b8:59:bb:ce: 3c:f1:ff:4c:1f:cd:a3:f8:94:de:a4:6a:e4:85:00: 9a:4c:9e:6b:b0:12:25:52:74:57:43:07:2b:8f:ac: 98:37:ee:cb:94:4e:ad:36:d6:a1:60:0f:7a:e8:4e: d9:2b:bc:dd:1d:c5:65:e6:5d:dc:62:dd:0b:c0:3f: 2c:53:00:ff:3c:33:94:ae:ef:b1:d8:e1:3f:d4:6b: a4:ce:9f:e2:f6:a2:60:6c:e5:76:6a:47:75:7c:1d: b9:81:63:c3:db:7e:f2:3c:17:ff:6d:82:bd:3d:08: e3:15:8b:35:52:b9:11:90:c1:7a:6f:4d:ed:2c:9e: 92:4b:b6:93:7f:06:ab:aa:d6:c7:24:6e:1b:67:72: 65:12:b8:74:a0:0a:46:4c:f6:de:2a:eb:ca:3e:2b: 20:3d:28:5f:df:55:96:6b:67:ee:a3:dd:30:84:5e: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:33:06:AA:82:DB:8C:12:21:A6:FD:BC:5B:EA:D0:E9:9A:A6:DB:63 X509v3 Authority Key Identifier: keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/66FA3E10C68311F0A13F9748C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.248.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:5a:cf:80:c9:b6:87:62:5c:c9:ed:f2:96:cc:fa:2d:25:e5: 52:e7:a5:d5:3a:c1:7b:4c:09:28:82:1a:15:d5:4e:71:53:77: 6f:11:0d:01:04:5a:93:cf:d8:32:4f:03:06:e9:5a:81:d8:17: 86:13:6b:ba:7c:e1:79:80:e8:9a:68:b0:d0:6b:f1:c8:a9:c9: 20:3f:29:01:4f:2c:f1:c2:62:61:87:33:a7:ab:8f:bb:0a:e6: 75:ad:d9:63:5a:e3:45:76:f3:18:51:8b:f9:ed:17:26:72:9f: 11:9c:8b:fb:6f:aa:84:b2:36:06:2d:8c:30:f2:eb:4e:07:89: a7:e5:86:5a:c1:98:61:f8:28:bf:c2:44:dc:73:c0:2f:5d:a7: 4a:93:c4:8c:da:ca:ad:01:af:72:06:a1:f6:62:c1:60:45:42: 24:37:59:74:cc:32:c2:ec:96:28:ef:eb:52:3a:51:30:8e:b5: ed:0b:53:9a:d2:e8:57:d7:12:2d:87:e4:5d:b8:2b:f2:57:3a: 5d:36:ac:47:79:52:91:a2:c8:d0:1a:82:3d:32:a2:ee:77:ad: e1:38:5d:99:64:5c:1b:26:06:34:6d:1a:c7:cc:a8:4d:66:94: 24:eb:5e:5b:33:b5:99:c9:f9:34:36:95:f4:2a:10:bc:84:38: ff:f6:4e:10 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Q0UxODExMC8GA1UEBRMoQ0Y5QTNGMzE2NDgzQTJBNzk0NDExRDU5MTQ2RjlGQzU2 NDA5MTk5NzAeFw0yNTExMjEwMjQwMTJaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWZkMTBjLWVmNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBSA+h8KyPRb7qYkyY9VHGifuMF0PYNc9ojm4eijKtPAG/5Qkase4s236k6iKd d0n/yiqgkrlJGeLTjEwRbI732yhqITmr+mPQMyc1BcXCO3amgMTeuFm7zjzx/0wf zaP4lN6kauSFAJpMnmuwEiVSdFdDByuPrJg37suUTq021qFgD3roTtkrvN0dxWXm Xdxi3QvAPyxTAP88M5Su77HY4T/Ua6TOn+L2omBs5XZqR3V8HbmBY8PbfvI8F/9t gr09COMVizVSuRGQwXpvTe0snpJLtpN/Bquq1sckbhtncmUSuHSgCkZM9t4q68o+ KyA9KF/fVZZrZ+6j3TCEXsXbAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUkjMGqoLb jBIhpv28W+rQ6Zqm22MwHwYDVR0jBBgwFoAUz5o/MWSDoqeUQR1ZFG+fxWQJGZcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDRTE4L0IzNzUyQUIyQzY4 MjExRjBCNzZFMTc0NkM0RjlBRTAyL3o1b19NV1NEb3FlVVFSMVpGRy1meFdRSkda Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvejVvX01XU0RvcWVVUVIxWkZHLWZ4V1FKR1pjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0UxOC9CMzc1MkFCMkM2ODIxMUYwQjc2RTE3NDZDNEY5QUUwMi82NkZBM0UxMEM2 ODMxMUYwQTEzRjk3NDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8+DANBgkqhkiG9w0BAQsFAAOCAQEAPFrPgMm2h2Jcye3y lsz6LSXlUuel1TrBe0wJKIIaFdVOcVN3bxENAQRak8/YMk8DBulagdgXhhNrunzh eYDommiw0GvxyKnJID8pAU8s8cJiYYczp6uPuwrmda3ZY1rjRXbzGFGL+e0XJnKf EZyL+2+qhLI2Bi2MMPLrTgeJp+WGWsGYYfgov8JE3HPAL12nSpPEjNrKrQGvcgah 9mLBYEVCJDdZdMwywuyWKO/rUjpRMI617QtTmtLoV9cSLYfkXbgr8lc6XTasR3lS kaLI0BqCPTKi7net4ThdmWRcGyYGNG0ax8yoTWaUJOteWzO1mcn5NDaV9CoQvIQ4 //ZOEA== -----END CERTIFICATE-----Generated at Wed Dec 3 12:24:37 2025 by rpki-client