This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa File: A1FA022EC60C11F08F496250C4F9AE02.roa (raw, json) Hash identifier: lPYCcJwpQhTwYbnLcej2EE1L4oSnFREXIyfOYx7DkzU= Subject key identifier: D8:C0:A7:8E:BA:A4:37:5F:3F:D8:EA:29:07:E9:1D:48:B9:48:87:D3 Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 39 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa Signing time: Thu 20 Nov 2025 12:30:01 +0000 ROA not before: Thu 20 Nov 2025 12:30:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 3491 IP address blocks: 72.57.238.0/23 maxlen: 24 72.57.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 20:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Nov 20 12:30:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691f09c9-d5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:6e:c0:2a:41:b6:5f:03:d3:8c:1a:76:f2: 64:52:c2:11:3b:f8:c3:57:50:0a:99:8e:08:4c:60: f0:1f:f4:d4:d5:16:15:7b:01:3e:57:81:cf:dc:fc: 70:40:39:47:13:f4:07:5c:74:87:c9:59:64:9d:8d: 7c:0c:ed:ac:5d:40:08:5a:fd:3d:30:9b:e4:51:e5: 87:5e:14:82:3a:95:04:f2:7f:44:dd:18:ba:da:02: e0:94:60:ce:d5:d6:8d:f9:95:a0:90:47:a8:72:9a: 8b:19:2b:65:ca:7b:dd:66:7a:c3:76:25:7b:2d:1a: 16:72:9e:69:8d:3e:81:c6:e5:3f:68:41:36:d4:f4: 49:00:c6:d8:79:1f:a6:d4:23:45:c3:ff:37:e6:5d: ba:b4:ec:e1:91:69:a6:b4:23:0f:81:37:04:69:f6: f1:ee:cf:58:21:c4:8b:94:27:ef:cb:44:5c:44:51: 34:de:3f:83:a3:d9:cd:bb:89:5d:40:40:e0:7c:20: c9:66:27:28:a5:20:95:81:91:ba:be:c0:4b:4a:3d: e3:43:cb:32:aa:14:87:96:05:ab:1f:62:16:53:46: 87:95:c8:ca:af:2f:3b:7d:f2:a9:33:f6:35:7a:44: de:bb:01:de:54:c3:38:a2:32:6d:fb:eb:22:6a:9a: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C0:A7:8E:BA:A4:37:5F:3F:D8:EA:29:07:E9:1D:48:B9:48:87:D3 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.57.238.0-72.57.255.255 Signature Algorithm: sha256WithRSAEncryption 51:28:6e:2b:e8:54:80:ef:ab:2c:f8:64:b2:5f:95:d5:3c:79: 5d:44:3c:02:76:e8:ee:76:5b:52:92:6b:9c:bd:f3:ad:7a:6c: 79:1e:4f:7e:29:40:e7:01:aa:e7:15:8b:fe:98:34:56:84:f8: d6:f9:ac:03:d2:9e:3a:23:c2:1b:c8:c6:b3:3a:5f:e7:28:fa: 9e:4e:97:df:eb:45:b3:4f:11:c4:e3:d1:47:17:2c:d4:b5:33: 04:ab:98:06:d1:fd:b7:75:eb:16:06:b4:ad:f3:f1:71:d3:38: 32:2e:2f:a4:eb:75:82:7c:80:b7:63:74:4b:c1:3c:93:72:84: 05:cf:c0:f7:b3:63:fd:5f:75:17:03:a7:b4:07:e3:83:7d:31: 44:ae:50:23:a5:fb:47:49:bc:36:39:c4:df:59:00:c6:0b:35: 24:b7:51:1d:41:d7:84:9b:2a:8d:b5:9f:2c:b5:b1:ca:f6:64: 39:cd:8c:6a:41:ea:94:cf:c0:af:1d:4b:f6:48:b3:04:ea:4b: fb:6d:24:5d:62:1d:97:13:2e:c7:2f:06:60:bc:3c:bf:1c:3d: 9d:18:5e:4d:6d:9a:9a:aa:f1:91:b7:ed:2a:71:e5:9f:9c:78: ae:35:fd:fb:c7:9a:48:7e:b4:e8:f7:a3:0a:68:ef:85:39:c0: 16:7f:96:9a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0Q2MjE2RDU1Q0I1NEZDOUI1NzBGOUYyNUY5QUREMEYz NzY5QjRERTAeFw0yNTExMjAxMjMwMDFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWYwOWM5LWQ1ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQgG7AKkG2XwPTjBp28mRSwhE7+MNXUAqZjghMYPAf9NTVFhV7AT5Xgc/c/HBA OUcT9AdcdIfJWWSdjXwM7axdQAha/T0wm+RR5YdeFII6lQTyf0TdGLraAuCUYM7V 1o35laCQR6hymosZK2XKe91mesN2JXstGhZynmmNPoHG5T9oQTbU9EkAxth5H6bU I0XD/zfmXbq07OGRaaa0Iw+BNwRp9vHuz1ghxIuUJ+/LRFxEUTTeP4Oj2c27iV1A QOB8IMlmJyilIJWBkbq+wEtKPeNDyzKqFIeWBasfYhZTRoeVyMqvLzt98qkz9jV6 RN67Ad5UwziiMm376yJqmvbZAgMBAAGjggKcMIICmDAdBgNVHQ4EFgQU2MCnjrqk N18/2OopB+kdSLlIh9MwHwYDVR0jBBgwFoAUPWIW1Vy1T8m1cPnyX5rdDzdptN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0M2MkIyOTg2OTM0 MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFdJVzFWeTFUOG0xY1BueVg1cmREemRwdE40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9DNjJCMjk4NjkzNDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9BMUZBMDIyRUM2 MEMxMUYwOEY0OTYyNTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAmBggrBgEFBQcBBwEB/wQX MBUwEwQCAAEwDTALAwQBSDnuAwMBSDgwDQYJKoZIhvcNAQELBQADggEBAFEobivo VIDvqyz4ZLJfldU8eV1EPAJ26O52W1KSa5y98616bHkeT34pQOcBqucVi/6YNFaE +Nb5rAPSnjojwhvIxrM6X+co+p5Ol9/rRbNPEcTj0UcXLNS1MwSrmAbR/bd16xYG tK3z8XHTODIuL6TrdYJ8gLdjdEvBPJNyhAXPwPezY/1fdRcDp7QH44N9MUSuUCOl +0dJvDY5xN9ZAMYLNSS3UR1B14SbKo21nyy1scr2ZDnNjGpB6pTPwK8dS/ZIswTq S/ttJF1iHZcTLscvBmC8PL8cPZ0YXk1tmpqq8ZG37Spx5Z+ceK41/fvHmkh+tOj3 owpo74U5wBZ/lpo= -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:49 2025 by rpki-client