This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/025F9668C60A11F0AB4AE483C4F9AE02.roa File: 025F9668C60A11F0AB4AE483C4F9AE02.roa (raw, json) Hash identifier: oCw/U7EHZyY3epAeaKjuRj0uw2tokHOQeiiiuBTFKyU= Subject key identifier: 66:CB:E3:84:9A:ED:CA:6A:22:AF:60:B5:BD:52:04:8B:59:4B:14:3E Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 37 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/025F9668C60A11F0AB4AE483C4F9AE02.roa Signing time: Thu 20 Nov 2025 12:20:41 +0000 ROA not before: Thu 20 Nov 2025 12:20:41 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 202736 IP address blocks: 72.57.186.0/23 maxlen: 24 72.57.188.0/22 maxlen: 24 72.57.192.0/22 maxlen: 24 72.57.196.0/22 maxlen: 24 72.57.200.0/21 maxlen: 24 72.57.208.0/20 maxlen: 24 72.57.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Dec 2025 20:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Nov 20 12:20:41 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691f0798-a331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:ef:40:ae:b6:8b:ff:8c:da:51:31:9b:f9: 47:c0:f8:99:ef:9a:d1:1f:b7:a6:45:94:42:4b:f5: 4b:82:c8:70:d5:48:18:c6:57:30:b3:54:fe:2e:aa: e9:55:3f:3d:ec:04:cc:68:35:fd:92:64:2a:96:27: 88:ca:30:10:0b:02:d7:8e:c6:f6:16:12:89:b0:25: c5:39:2f:bd:e2:2c:9b:c8:f7:06:b7:9b:d5:aa:6d: fc:da:4e:75:d8:62:e6:d3:ec:ad:ee:ad:d4:8d:6f: cc:70:96:07:be:d1:81:cd:e0:05:88:1b:54:67:e0: 05:73:8c:11:b2:29:7a:2b:01:ad:6b:04:9c:30:ff: 40:e7:82:43:f9:a2:2e:06:c6:44:77:90:78:ca:f1: 36:9f:61:56:b3:87:b9:e3:f0:95:10:e7:f2:f4:d3: db:ff:de:b9:e0:e9:ac:75:45:5e:e8:11:f2:71:5b: e6:c9:d2:61:1f:38:6e:6e:76:b3:a3:a5:e4:b8:62: ae:b5:6a:94:49:2d:68:64:53:b9:e1:29:3b:77:26: 63:fa:50:b4:84:0f:14:66:f0:09:6c:a6:47:a7:dd: e9:20:8d:c6:1e:ff:49:e6:f5:c3:46:a1:a0:4b:a9: d5:b6:98:d0:83:74:84:6c:fa:dd:7b:1a:9a:ef:3f: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CB:E3:84:9A:ED:CA:6A:22:AF:60:B5:BD:52:04:8B:59:4B:14:3E X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/025F9668C60A11F0AB4AE483C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.57.186.0-72.57.227.255 Signature Algorithm: sha256WithRSAEncryption a2:aa:b0:c0:e3:23:84:b1:16:18:58:63:85:18:1d:33:b8:a2: ea:23:aa:73:e4:c4:74:ad:59:1c:7d:8e:01:98:5c:5e:d5:1e: 2f:b9:6a:74:f9:f9:bc:fd:65:64:ac:b6:41:d1:c7:80:4e:13: 5e:e9:92:fa:9f:fa:e9:59:d5:75:93:ea:96:ce:84:18:be:a3: 47:ae:47:ea:e4:a3:09:30:d1:18:39:0f:55:28:65:32:69:e1: 26:1f:f4:39:31:7d:84:0d:2e:30:7c:b2:0d:8c:ad:fd:59:84: 05:35:9b:ec:dd:8c:9b:ca:87:f4:4b:9b:bb:72:ef:c9:0c:cf: dd:1c:c7:81:6e:0e:5b:8d:ac:b5:3f:da:ca:ca:27:2e:65:86: 0e:c5:6f:00:a0:0e:24:d2:bb:cc:3f:1f:a6:84:be:ac:e4:0a: 92:74:10:73:59:e4:b8:e3:8d:92:ad:82:19:77:30:e9:70:f2: 54:62:58:3e:b8:f9:ca:2f:be:9c:d1:86:cf:4c:bb:ef:ca:eb: c6:e6:50:76:28:55:e5:a4:cf:65:fe:64:3f:cc:ce:38:5f:41: 53:63:9f:dc:59:bb:b1:55:2a:64:ac:10:ee:44:6f:6f:5c:ab: a6:fc:32:ef:d8:83:ec:58:cb:99:62:4c:9a:32:7e:d7:f9:85: da:29:f5:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0Q2MjE2RDU1Q0I1NEZDOUI1NzBGOUYyNUY5QUREMEYz NzY5QjRERTAeFw0yNTExMjAxMjIwNDFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWYwNzk4LWEzMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCogu9ArraL/4zaUTGb+UfA+JnvmtEft6ZFlEJL9UuCyHDVSBjGVzCzVP4uqulV Pz3sBMxoNf2SZCqWJ4jKMBALAteOxvYWEomwJcU5L73iLJvI9wa3m9WqbfzaTnXY YubT7K3urdSNb8xwlge+0YHN4AWIG1Rn4AVzjBGyKXorAa1rBJww/0DngkP5oi4G xkR3kHjK8TafYVazh7nj8JUQ5/L009v/3rng6ax1RV7oEfJxW+bJ0mEfOG5udrOj peS4Yq61apRJLWhkU7nhKTt3JmP6ULSEDxRm8Alspken3ekgjcYe/0nm9cNGoaBL qdW2mNCDdIRs+t17GprvP/+DAgMBAAGjggKdMIICmTAdBgNVHQ4EFgQUZsvjhJrt ymoir2C1vVIEi1lLFD4wHwYDVR0jBBgwFoAUPWIW1Vy1T8m1cPnyX5rdDzdptN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0M2MkIyOTg2OTM0 MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFdJVzFWeTFUOG0xY1BueVg1cmREemRwdE40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9DNjJCMjk4NjkzNDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi8wMjVGOTY2OEM2 MEExMUYwQUI0QUU0ODNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQBSDm6AwQCSDngMA0GCSqGSIb3DQEBCwUAA4IBAQCiqrDA 4yOEsRYYWGOFGB0zuKLqI6pz5MR0rVkcfY4BmFxe1R4vuWp0+fm8/WVkrLZB0ceA ThNe6ZL6n/rpWdV1k+qWzoQYvqNHrkfq5KMJMNEYOQ9VKGUyaeEmH/Q5MX2EDS4w fLINjK39WYQFNZvs3Yybyof0S5u7cu/JDM/dHMeBbg5bjay1P9rKyicuZYYOxW8A oA4k0rvMPx+mhL6s5AqSdBBzWeS4442SrYIZdzDpcPJUYlg+uPnKL76c0YbPTLvv yuvG5lB2KFXlpM9l/mQ/zM44X0FTY5/cWbuxVSpkrBDuRG9vXKum/DLv2IPsWMuZ YkyaMn7X+YXaKfXY -----END CERTIFICATE-----Generated at Tue Nov 25 17:41:11 2025 by rpki-client