This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/844A140AC5F111F08382761DC4F9AE02.roa File: 844A140AC5F111F08382761DC4F9AE02.roa (raw, json) Hash identifier: Gx2kCxxEj3/RIVTnJMerfYLqRKpDP3Xj2fha+8LVQi8= Subject key identifier: 2C:C3:E8:5E:51:BE:D7:F0:D7:F6:D4:4A:7D:E2:3F:05:31:F4:BF:6C Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 2A Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/844A140AC5F111F08382761DC4F9AE02.roa Signing time: Thu 20 Nov 2025 09:15:55 +0000 ROA not before: Thu 20 Nov 2025 09:15:55 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 56286 IP address blocks: 72.57.145.0/24 maxlen: 24 72.57.146.0/23 maxlen: 24 72.57.148.0/22 maxlen: 24 72.57.152.0/23 maxlen: 24 72.57.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 20:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Nov 20 09:15:55 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691edc4a-4b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7e:5c:75:78:25:1b:c1:17:cb:36:aa:71:6d: 67:28:ce:34:42:f5:41:6b:d2:0a:46:3f:07:f5:19: fd:e5:dd:04:3e:1f:59:f7:95:0e:70:7d:e8:32:b1: b3:e6:c2:2e:a1:5e:b2:ac:f8:cc:bd:f4:71:71:a6: e7:28:c3:10:89:d6:19:e5:da:1d:6c:3c:73:55:e7: 91:6e:1d:83:e4:ed:2c:99:89:51:0b:3d:63:34:4e: e6:28:ea:f9:53:97:33:a7:d4:12:d1:fa:92:85:54: 83:b0:64:27:1b:16:91:48:72:3e:4a:5f:da:9d:da: 06:05:e1:8d:34:71:7e:0f:0f:04:1c:ec:8c:e9:9f: 1b:4d:00:54:0a:74:30:e1:bf:e3:93:77:65:48:4e: 00:17:e0:68:10:41:fe:2f:60:d9:ca:37:1d:1b:4d: 88:ab:23:d3:aa:7c:f5:ac:06:6c:7a:91:d1:f3:44: b3:75:a1:f1:25:01:4d:bd:60:9b:6c:af:15:0d:91: 24:e5:53:e2:4e:a2:b4:ae:b2:22:84:63:3f:7d:97: 8d:f6:90:d1:31:10:76:b9:98:e4:b8:f4:01:26:50: c2:66:29:fe:7b:65:48:15:eb:26:36:86:75:56:ea: c9:8c:95:3b:69:91:be:98:dd:01:1e:04:0c:ec:a6: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C3:E8:5E:51:BE:D7:F0:D7:F6:D4:4A:7D:E2:3F:05:31:F4:BF:6C X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/844A140AC5F111F08382761DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.57.145.0-72.57.154.255 Signature Algorithm: sha256WithRSAEncryption 9d:43:8b:0f:f4:d3:a8:9f:a1:04:cd:a2:97:d6:70:e6:8f:ab: 58:81:80:23:82:45:2b:36:41:41:a6:64:cb:66:a6:38:61:d2: 7a:72:18:ad:26:61:af:6c:a0:39:3c:eb:58:ba:b7:5a:9f:bc: b8:81:91:22:04:a3:c1:7c:46:3c:8b:8a:aa:62:b9:81:c2:88: 66:f0:7c:01:3b:43:d4:69:4b:1d:e4:2d:5f:08:1a:05:e4:f8: 6c:6f:3e:f5:07:a8:5c:db:0f:62:6c:60:56:ec:34:af:06:4d: 9d:5c:dd:95:43:dc:86:97:ff:88:46:a3:56:77:8b:cb:e3:05: b7:63:35:8d:26:86:78:81:09:f6:d1:b6:d5:96:6e:05:36:a1: c0:c6:c6:f4:f6:72:f9:c6:34:44:ef:ec:29:5b:47:f9:1a:0b: f6:15:3f:21:39:1a:14:e3:89:26:e2:b1:0e:2a:2d:97:a9:f1: e9:84:4c:40:26:2b:0e:5c:c3:56:ff:5e:c0:bc:f2:6d:63:33: 95:19:db:7c:25:95:b8:7c:6d:cf:5c:2d:04:62:92:18:fd:4e: 9d:63:0e:6a:94:3f:7f:2e:5a:49:5c:c9:5a:5f:8b:60:0b:51: bc:9f:6d:9c:cc:f3:30:d8:18:0f:43:42:b7:61:ae:c1:5d:2f: 7a:74:df:1f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0Q2MjE2RDU1Q0I1NEZDOUI1NzBGOUYyNUY5QUREMEYz NzY5QjRERTAeFw0yNTExMjAwOTE1NTVaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWVkYzRhLTRiMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4flx1eCUbwRfLNqpxbWcozjRC9UFr0gpGPwf1Gf3l3QQ+H1n3lQ5wfegysbPm wi6hXrKs+My99HFxpucowxCJ1hnl2h1sPHNV55FuHYPk7SyZiVELPWM0TuYo6vlT lzOn1BLR+pKFVIOwZCcbFpFIcj5KX9qd2gYF4Y00cX4PDwQc7IzpnxtNAFQKdDDh v+OTd2VITgAX4GgQQf4vYNnKNx0bTYirI9OqfPWsBmx6kdHzRLN1ofElAU29YJts rxUNkSTlU+JOorSusiKEYz99l432kNExEHa5mOS49AEmUMJmKf57ZUgV6yY2hnVW 6smMlTtpkb6Y3QEeBAzsphaPAgMBAAGjggKdMIICmTAdBgNVHQ4EFgQULMPoXlG+ 1/DX9tRKfeI/BTH0v2wwHwYDVR0jBBgwFoAUPWIW1Vy1T8m1cPnyX5rdDzdptN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0M2MkIyOTg2OTM0 MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFdJVzFWeTFUOG0xY1BueVg1cmREemRwdE40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9DNjJCMjk4NjkzNDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi84NDRBMTQwQUM1 RjExMUYwODM4Mjc2MURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQASDmRAwQASDmaMA0GCSqGSIb3DQEBCwUAA4IBAQCdQ4sP 9NOon6EEzaKX1nDmj6tYgYAjgkUrNkFBpmTLZqY4YdJ6chitJmGvbKA5POtYurda n7y4gZEiBKPBfEY8i4qqYrmBwohm8HwBO0PUaUsd5C1fCBoF5Phsbz71B6hc2w9i bGBW7DSvBk2dXN2VQ9yGl/+IRqNWd4vL4wW3YzWNJoZ4gQn20bbVlm4FNqHAxsb0 9nL5xjRE7+wpW0f5Ggv2FT8hORoU44km4rEOKi2XqfHphExAJisOXMNW/17AvPJt YzOVGdt8JZW4fG3PXC0EYpIY/U6dYw5qlD9/LlpJXMlaX4tgC1G8n22czPMw2BgP Q0K3Ya7BXS96dN8f -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:49 2025 by rpki-client