This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/D8511C62C5F911F08390847DC4F9AE02.roa File: D8511C62C5F911F08390847DC4F9AE02.roa (raw, json) Hash identifier: mPN4v6Wr0i53K2v54rMGBAtCPDW2RDtBsIS7kf2niPQ= Subject key identifier: B6:87:8C:DF:0C:35:03:AD:3B:8A:03:37:30:D2:93:01:D2:7E:10:8E Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 31 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/D8511C62C5F911F08390847DC4F9AE02.roa Signing time: Thu 20 Nov 2025 10:15:32 +0000 ROA not before: Thu 20 Nov 2025 10:15:32 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 2497 IP address blocks: 72.57.165.0/24 maxlen: 24 72.57.166.0/23 maxlen: 24 72.57.168.0/21 maxlen: 24 72.57.176.0/22 maxlen: 24 72.57.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 20:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Nov 20 10:15:32 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691eea43-d6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:cb:7b:38:4d:7f:a6:55:4a:c2:81:cd:c3: 64:21:2c:5c:18:f6:db:13:32:71:a4:25:83:0b:02: a0:cf:ae:c6:e0:c4:34:44:2c:a7:ee:b2:4a:aa:32: f0:b8:fb:52:a3:e3:62:2e:04:e8:59:13:05:f3:07: 57:e3:68:f0:43:2a:92:57:d7:2d:07:45:b7:c2:f7: ba:15:11:79:64:4b:dc:ef:fa:8e:89:4b:36:1a:a3: ca:fc:8d:36:af:00:ef:33:9c:0f:f6:2f:d5:3f:d7: 73:a7:16:97:53:9c:0a:df:01:1b:38:80:f3:0f:55: 3a:bb:93:fc:b8:f8:75:b5:52:ce:38:14:be:08:8f: f7:dc:1f:29:d5:be:6e:4b:71:19:2c:b3:20:54:ed: 9e:b9:30:64:26:f0:57:94:76:38:49:5f:b6:ac:6d: 97:ae:e6:db:c1:9e:c3:aa:e2:97:d4:fc:30:45:06: d4:46:07:51:0c:65:96:00:31:f9:de:65:e5:09:d4: cf:79:e8:32:e5:e0:0d:3b:93:b0:78:82:dd:82:bd: 00:05:14:a6:95:ad:df:0d:92:99:e7:6e:51:9a:52: d2:bc:d9:e8:fe:7c:f4:0e:ba:c4:e7:23:7a:ad:a5: a0:58:83:51:fc:8e:56:8c:50:b5:f0:03:4b:75:42: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:87:8C:DF:0C:35:03:AD:3B:8A:03:37:30:D2:93:01:D2:7E:10:8E X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/D8511C62C5F911F08390847DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.57.165.0-72.57.180.255 Signature Algorithm: sha256WithRSAEncryption 87:f2:97:3b:33:60:06:e0:69:ec:4f:74:b1:07:78:ff:3b:ea: 73:78:15:22:80:61:fb:a0:a7:7d:5e:8d:ba:31:0f:f1:f7:ad: 1b:12:a8:bf:1a:93:f2:2f:e1:5a:f2:92:17:50:68:39:da:4b: dc:8b:60:02:a4:5c:41:de:19:f6:d3:be:0a:68:46:9e:bd:f9: 49:06:d8:b2:7e:b9:1a:69:62:03:ff:14:38:f9:28:ef:1c:ca: 1c:84:3c:4e:3b:f5:5d:e1:32:b2:d0:05:86:dd:c2:a2:26:87: a2:d0:4b:c2:2c:04:6f:8b:e8:b6:6d:26:34:bc:43:6f:f3:8f: 93:59:46:28:f9:fd:db:ed:86:d3:42:f2:c7:ec:d6:8e:4c:b2: b5:ed:eb:bb:1b:c7:7f:2e:40:82:b0:7d:59:86:22:76:9a:8c: 2d:75:c5:a2:ac:78:e7:8f:a3:42:27:6b:dd:ec:98:13:1b:3d: 47:81:41:b0:b2:e4:b3:cc:72:5d:f2:11:00:e6:72:1d:46:da: 0e:97:76:0f:bc:12:78:b9:b6:af:aa:21:26:03:90:eb:4a:8e: 2d:a2:5b:bf:f0:ef:d0:f5:b7:4e:54:61:37:0f:15:be:69:1f: a2:3e:56:13:51:bf:51:fd:18:c4:cd:1b:5f:04:4c:47:ce:1d: 0c:0b:8c:e6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0Q2MjE2RDU1Q0I1NEZDOUI1NzBGOUYyNUY5QUREMEYz NzY5QjRERTAeFw0yNTExMjAxMDE1MzJaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWVlYTQzLWQ2YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFQct7OE1/plVKwoHNw2QhLFwY9tsTMnGkJYMLAqDPrsbgxDRELKfuskqqMvC4 +1Kj42IuBOhZEwXzB1fjaPBDKpJX1y0HRbfC97oVEXlkS9zv+o6JSzYao8r8jTav AO8znA/2L9U/13OnFpdTnArfARs4gPMPVTq7k/y4+HW1Us44FL4Ij/fcHynVvm5L cRkssyBU7Z65MGQm8FeUdjhJX7asbZeu5tvBnsOq4pfU/DBFBtRGB1EMZZYAMfne ZeUJ1M956DLl4A07k7B4gt2CvQAFFKaVrd8NkpnnblGaUtK82ej+fPQOusTnI3qt paBYg1H8jlaMULXwA0t1QjCnAgMBAAGjggKdMIICmTAdBgNVHQ4EFgQUtoeM3ww1 A607igM3MNKTAdJ+EI4wHwYDVR0jBBgwFoAUPWIW1Vy1T8m1cPnyX5rdDzdptN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0M2MkIyOTg2OTM0 MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFdJVzFWeTFUOG0xY1BueVg1cmREemRwdE40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9DNjJCMjk4NjkzNDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9EODUxMUM2MkM1 RjkxMUYwODM5MDg0N0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQASDmlAwQASDm0MA0GCSqGSIb3DQEBCwUAA4IBAQCH8pc7 M2AG4GnsT3SxB3j/O+pzeBUigGH7oKd9Xo26MQ/x960bEqi/GpPyL+Fa8pIXUGg5 2kvci2ACpFxB3hn2074KaEaevflJBtiyfrkaaWID/xQ4+SjvHMochDxOO/Vd4TKy 0AWG3cKiJoei0EvCLARvi+i2bSY0vENv84+TWUYo+f3b7YbTQvLH7NaOTLK17eu7 G8d/LkCCsH1ZhiJ2mowtdcWirHjnj6NCJ2vd7JgTGz1HgUGwsuSzzHJd8hEA5nId RtoOl3YPvBJ4ubavqiEmA5DrSo4tolu/8O/Q9bdOVGE3DxW+aR+iPlYTUb9R/RjE zRtfBExHzh0MC4zm -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:50 2025 by rpki-client