This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/8DF67C6AC5EB11F0BC424964C4F9AE02.roa File: 8DF67C6AC5EB11F0BC424964C4F9AE02.roa (raw, json) Hash identifier: Jh4KCNzZjKqM4r3/qqC/nIIfiTNy+SLhz86KNl2loAY= Subject key identifier: 22:09:7D:2A:C5:96:6A:04:34:62:35:6D:7B:CF:91:FC:B6:35:A1:92 Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 3A Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/8DF67C6AC5EB11F0BC424964C4F9AE02.roa Signing time: Thu 20 Nov 2025 12:30:03 +0000 ROA not before: Thu 20 Nov 2025 12:30:03 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 984 IP address blocks: 72.57.128.0/22 maxlen: 24 72.57.132.0/23 maxlen: 24 72.57.134.0/24 maxlen: 24 72.57.135.0/24 maxlen: 24 72.57.136.0/21 maxlen: 24 72.57.181.0/24 maxlen: 24 72.57.182.0/23 maxlen: 24 72.57.184.0/23 maxlen: 24 72.57.228.0/22 maxlen: 24 72.57.232.0/22 maxlen: 24 72.57.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 20:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Nov 20 12:30:03 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691f09cb-b42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:9c:7d:a4:d1:ed:13:d7:94:ee:37:79:07: 8b:79:01:66:82:a5:d3:8b:da:90:95:27:05:2a:38: 27:a4:fe:95:ad:19:05:2b:6d:d8:f1:5c:86:2d:df: a6:55:cb:7b:94:4a:6a:9f:2f:63:cd:a7:b1:7e:9b: 92:f3:ee:9e:05:eb:71:fd:5c:61:f8:78:3e:50:17: 6e:1b:68:c5:55:c2:4b:45:c0:18:04:45:ea:3e:86: 14:b9:c1:5d:2b:fe:9c:fb:25:7d:0d:c6:07:80:8e: 38:ba:0b:88:79:d2:fe:64:5d:7e:fb:d3:fe:ee:93: 57:b0:47:9e:f2:8e:5c:f3:b6:b8:ca:43:cc:5c:57: 31:a9:5b:56:87:6d:9c:c7:ab:7a:5f:99:fe:97:6b: 9f:7e:35:55:c9:f4:41:71:15:ca:e0:90:bb:d8:e0: 85:1a:d7:82:6c:a9:8a:75:18:e9:f0:87:27:9a:1d: 8d:bc:fb:e5:14:e3:9f:7e:f1:7d:6d:3e:ee:20:27: 26:1f:a9:df:1f:5c:a1:1a:a7:ec:01:79:8c:a6:66: 9a:d4:44:9f:2c:3f:e0:e5:05:bb:aa:1f:16:a4:dd: d4:71:db:b4:5c:47:67:95:0f:30:95:22:92:9f:65: 3a:70:cd:d2:55:ca:1e:df:fd:7c:7a:27:aa:a3:04: 20:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:09:7D:2A:C5:96:6A:04:34:62:35:6D:7B:CF:91:FC:B6:35:A1:92 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/8DF67C6AC5EB11F0BC424964C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.57.128.0/20 72.57.181.0-72.57.185.255 72.57.228.0-72.57.237.255 Signature Algorithm: sha256WithRSAEncryption 6c:b3:2b:95:99:c5:d9:a6:17:ac:9a:bd:8e:6a:6a:df:87:cd: 05:18:6c:cb:df:c2:d7:7d:0c:30:0f:7d:9c:3e:b2:11:03:92: 33:f4:ee:51:49:16:9e:22:14:68:bb:6c:7a:fd:91:85:64:df: 64:32:c5:3a:64:9e:dc:9c:94:19:d9:6c:21:cc:59:b5:94:82: ad:04:56:b9:37:b4:1e:47:eb:dd:54:48:d1:38:ad:cb:95:49: 9b:a1:45:8b:f3:96:8c:e0:1f:d6:74:98:a4:eb:dc:38:87:71: c0:47:20:72:c9:b4:f2:3e:c0:12:d1:1b:0f:f8:de:6e:d0:52: 25:be:ca:91:31:bb:d6:12:16:4a:5d:11:37:a6:29:2e:ec:e9: 13:f4:1b:9e:34:17:c6:44:ea:ac:8d:5a:88:fd:9c:4f:a1:21: b2:40:14:37:e8:c3:ed:73:cd:62:df:39:ca:8e:67:96:77:1a: 0a:11:85:fa:2c:50:31:14:06:27:04:02:69:78:5b:78:0f:c9: 48:85:3a:34:3e:0b:00:3d:27:30:d0:65:e8:80:fe:98:6f:ff: e6:57:7b:d0:14:1f:c3:fa:a8:27:4c:fe:ff:4c:54:b7:80:89: ec:23:9f:1c:ba:66:f0:ef:c3:32:36:df:d3:55:9a:5a:bd:4d: c6:4a:3e:c6 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0Q2MjE2RDU1Q0I1NEZDOUI1NzBGOUYyNUY5QUREMEYz NzY5QjRERTAeFw0yNTExMjAxMjMwMDNaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWYwOWNiLWI0MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCR1Zx9pNHtE9eU7jd5B4t5AWaCpdOL2pCVJwUqOCek/pWtGQUrbdjxXIYt36ZV y3uUSmqfL2PNp7F+m5Lz7p4F63H9XGH4eD5QF24baMVVwktFwBgEReo+hhS5wV0r /pz7JX0NxgeAjji6C4h50v5kXX770/7uk1ewR57yjlzztrjKQ8xcVzGpW1aHbZzH q3pfmf6Xa59+NVXJ9EFxFcrgkLvY4IUa14JsqYp1GOnwhyeaHY28++UU459+8X1t Pu4gJyYfqd8fXKEap+wBeYymZprURJ8sP+DlBbuqHxak3dRx27RcR2eVDzCVIpKf ZTpwzdJVyh7f/Xx6J6qjBCCxAgMBAAGjggKxMIICrTAdBgNVHQ4EFgQUIgl9KsWW agQ0YjVte8+R/LY1oZIwHwYDVR0jBBgwFoAUPWIW1Vy1T8m1cPnyX5rdDzdptN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0M2MkIyOTg2OTM0 MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFdJVzFWeTFUOG0xY1BueVg1cmREemRwdE40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9DNjJCMjk4NjkzNDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi84REY2N0M2QUM1 RUIxMUYwQkM0MjQ5NjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA7BggrBgEFBQcBBwEB/wQs MCowKAQCAAEwIgMEBEg5gDAMAwQASDm1AwQBSDm4MAwDBAJIOeQDBAFIOewwDQYJ KoZIhvcNAQELBQADggEBAGyzK5WZxdmmF6yavY5qat+HzQUYbMvfwtd9DDAPfZw+ shEDkjP07lFJFp4iFGi7bHr9kYVk32QyxTpkntyclBnZbCHMWbWUgq0EVrk3tB5H 691USNE4rcuVSZuhRYvzlozgH9Z0mKTr3DiHccBHIHLJtPI+wBLRGw/43m7QUiW+ ypExu9YSFkpdETemKS7s6RP0G540F8ZE6qyNWoj9nE+hIbJAFDfow+1zzWLfOcqO Z5Z3GgoRhfosUDEUBicEAml4W3gPyUiFOjQ+CwA9JzDQZeiA/phv/+ZXe9AUH8P6 qCdM/v9MVLeAiewjnxy6ZvDvwzI239NVmlq9TcZKPsY= -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:50 2025 by rpki-client