This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/03B7FB8CCF5A11F09B61EF16C4F9AE02.roa File: 03B7FB8CCF5A11F09B61EF16C4F9AE02.roa (raw, json) Hash identifier: 2Lc1FIKsjB7NXZkrDBswLhzcT+KlGRsME98+/KK0zhg= Subject key identifier: 4C:11:F3:3B:A4:AD:40:81:C8:15:BB:63:6E:76:84:74:F2:81:20:8B Certificate issuer: /CN=A9145E01/serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B Certificate serial: 02 Authority key identifier: 34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/03B7FB8CCF5A11F09B61EF16C4F9AE02.roa Signing time: Tue 02 Dec 2025 08:36:36 +0000 ROA not before: Tue 02 Dec 2025 08:36:36 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133922 IP address blocks: 138.252.226.0/23 maxlen: 23 138.252.226.0/24 maxlen: 24 138.252.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E01, serialNumber=348B54CFF79965E21B2DBAB99F2101E31A560E9B Validity Not Before: Dec 2 08:36:36 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692ea514-0069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:1d:90:69:ea:8b:42:de:e9:bb:ca:c3:a2: 86:40:e3:3b:84:49:99:75:23:08:99:37:8d:b3:3b: 22:f7:94:c9:7e:45:6f:07:da:e4:6a:36:b1:f3:89: b1:33:c3:3f:79:1c:cf:b8:13:c1:2c:29:8c:b3:09: 36:0e:e3:c2:25:5d:04:b1:7e:41:23:20:6b:c9:42: 0e:8d:46:38:d9:45:47:b1:7f:c7:67:f4:b1:52:62: 07:bb:c8:0d:1b:12:f1:04:a8:d5:c9:fe:f1:7b:59: fc:ee:81:93:dd:eb:f8:9b:38:b1:dc:91:99:01:9a: 2c:93:40:af:7d:0b:58:8a:7d:af:53:d1:98:5b:d9: e6:5a:db:f4:1e:ef:96:80:ff:19:2e:0f:bc:4d:31: e0:6a:79:31:25:eb:0f:84:da:15:f3:45:3f:26:f8: 92:29:3f:70:58:a4:d0:3a:2b:65:7e:d0:df:30:c5: 60:ef:73:2a:9e:df:6c:e4:da:a1:b8:81:ca:2a:20: 93:fe:28:41:9f:ba:93:db:b1:ca:9b:7e:29:8e:03: 68:90:58:d7:ec:c6:da:e8:77:dd:0e:df:1b:c1:37: 7b:a4:87:a5:8b:d6:d2:ad:63:b8:b5:49:79:c9:f1: e6:38:5d:79:e8:ef:56:b5:9f:d7:b6:db:25:e5:34: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:11:F3:3B:A4:AD:40:81:C8:15:BB:63:6E:76:84:74:F2:81:20:8B X509v3 Authority Key Identifier: keyid:34:8B:54:CF:F7:99:65:E2:1B:2D:BA:B9:9F:21:01:E3:1A:56:0E:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/NItUz_eZZeIbLbq5nyEB4xpWDps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NItUz_eZZeIbLbq5nyEB4xpWDps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/46927F14CF5911F085BBDD11C4F9AE02/03B7FB8CCF5A11F09B61EF16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.226.0/23 Signature Algorithm: sha256WithRSAEncryption 34:80:25:78:1e:11:42:63:a0:b6:42:6d:75:f9:91:1b:ff:1e: 42:35:27:71:bf:29:2c:5f:70:86:bf:b1:03:2f:c6:df:40:c3: 65:86:df:60:0d:ba:64:e6:2d:76:d0:81:92:9e:3f:d8:ab:f3: 0b:3b:29:71:ff:d9:36:1a:a7:bb:25:89:9b:54:29:62:01:a7: 4d:f6:b9:24:8a:6c:f5:97:df:86:6c:ca:da:b8:6d:c4:5a:23: 71:bd:9c:d5:b1:fb:7b:f6:5c:24:76:b4:00:b0:28:64:6e:b9: 03:6b:1f:2f:b3:f3:f7:9a:3a:e6:c7:d9:75:c7:38:90:c0:93: 38:c6:f0:9a:3a:d8:8b:1f:70:27:51:5a:a6:6c:62:64:60:b5: 5f:48:a9:98:a6:45:1d:4f:61:2c:e9:7c:be:9b:d8:58:74:fb: b0:cc:e7:60:d2:73:e7:c9:fe:51:bb:6a:be:96:6f:53:65:c2: dd:88:c5:c4:0a:d1:ed:ff:ad:97:3f:df:52:22:af:21:2d:5f: d7:fc:ab:4e:fc:c0:35:f7:30:cd:ee:24:31:5a:46:c0:6f:6a: 16:3c:db:26:ca:39:37:7f:24:c9:f8:04:a1:a7:3f:db:82:1f: 2d:66:ed:c8:ea:eb:13:c7:69:79:1d:40:8f:50:84:1b:dc:fc: cc:04:e6:47 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUUwMTExMC8GA1UEBRMoMzQ4QjU0Q0ZGNzk5NjVFMjFCMkRCQUI5OUYyMTAxRTMx QTU2MEU5QjAeFw0yNTEyMDIwODM2MzZaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MmVhNTE0LTAwNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEhR2QaeqLQt7pu8rDooZA4zuESZl1IwiZN42zOyL3lMl+RW8H2uRqNrHzibEz wz95HM+4E8EsKYyzCTYO48IlXQSxfkEjIGvJQg6NRjjZRUexf8dn9LFSYge7yA0b EvEEqNXJ/vF7WfzugZPd6/ibOLHckZkBmiyTQK99C1iKfa9T0Zhb2eZa2/Qe75aA /xkuD7xNMeBqeTEl6w+E2hXzRT8m+JIpP3BYpNA6K2V+0N8wxWDvcyqe32zk2qG4 gcoqIJP+KEGfupPbscqbfimOA2iQWNfsxtrod90O3xvBN3ukh6WL1tKtY7i1SXnJ 8eY4XXno71a1n9e22yXlNF91AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUTBHzO6St QIHIFbtjbnaEdPKBIIswHwYDVR0jBBgwFoAUNItUz/eZZeIbLbq5nyEB4xpWDpsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1RTAxLzQ2OTI3RjE0Q0Y1 OTExRjA4NUJCREQxMUM0RjlBRTAyL05JdFV6X2VaWmVJYkxicTVueUVCNHhwV0Rw cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTkl0VXpfZVpaZUliTGJxNW55RUI0eHBXRHBzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUUwMS80NjkyN0YxNENGNTkxMUYwODVCQkREMTFDNEY5QUUwMi8wM0I3RkI4Q0NG NUExMUYwOUI2MUVGMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr84jANBgkqhkiG9w0BAQsFAAOCAQEANIAleB4RQmOgtkJt dfmRG/8eQjUncb8pLF9whr+xAy/G30DDZYbfYA26ZOYtdtCBkp4/2KvzCzspcf/Z NhqnuyWJm1QpYgGnTfa5JIps9ZffhmzK2rhtxFojcb2c1bH7e/ZcJHa0ALAoZG65 A2sfL7Pz95o65sfZdcc4kMCTOMbwmjrYix9wJ1FapmxiZGC1X0ipmKZFHU9hLOl8 vpvYWHT7sMznYNJz58n+UbtqvpZvU2XC3YjFxArR7f+tlz/fUiKvIS1f1/yrTvzA Nfcwze4kMVpGwG9qFjzbJso5N38kyfgEoac/24IfLWbtyOrrE8dpeR1Aj1CEG9z8 zATmRw== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:41 2025 by rpki-client