This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/6DD11538BA6711F0A5E1473EC4F9AE02.roa File: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (raw, json) Hash identifier: J1tjfo0Tv8cAIcr5spIPpEp7gs6ochVbVgOyTGB+uQA= Subject key identifier: 9A:70:C8:25:7E:68:92:E5:B0:0D:9A:C9:87:7D:86:67:D2:77:B2:C7 Certificate issuer: /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2 Certificate serial: 05 Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/6DD11538BA6711F0A5E1473EC4F9AE02.roa Signing time: Thu 06 Nov 2025 18:12:46 +0000 ROA not before: Thu 06 Nov 2025 18:12:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154334 IP address blocks: 138.252.124.0/23 maxlen: 23 138.252.124.0/24 maxlen: 24 138.252.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2 Validity Not Before: Nov 6 18:12:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690ce51d-ae3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:87:06:26:b2:e0:66:bc:cf:f0:90:23:8e: f8:b5:2f:73:34:c3:c6:5f:ee:6b:cb:c2:25:64:23: 08:75:27:e1:09:ed:e3:c5:92:50:bf:43:ab:ad:62: a3:f7:ee:25:c1:b1:dd:f3:4f:be:a5:ba:78:d6:ca: 63:31:37:6c:07:e1:35:73:e3:3e:92:e0:cc:8e:73: e6:0e:5c:f9:10:51:31:ff:e1:3a:92:ce:90:77:40: 5d:85:bf:ad:7a:5c:0b:88:92:2b:07:17:fc:be:47: c3:10:12:cc:8d:51:38:77:85:59:6e:74:76:92:4d: b2:1e:90:17:31:9f:fe:84:32:62:d7:f5:b0:84:1b: 65:fc:a5:41:b5:48:50:17:9a:fb:aa:0a:f3:c7:d6: 88:da:04:f1:99:c2:5f:56:98:60:3b:8f:28:12:4f: 92:d6:1a:2c:02:56:ca:19:d1:5e:48:e9:fb:4b:28: 25:f8:dd:c2:42:59:d7:c8:4a:43:a6:25:1b:df:b2: 44:f7:ba:19:db:46:fd:c7:18:aa:e7:0b:5c:1b:a5: 38:ed:c6:13:ca:ae:b0:aa:b7:e5:d9:64:aa:f0:44: 40:62:44:12:73:b4:b3:08:22:aa:60:7a:1c:b6:67: 4f:31:37:84:de:5a:13:3f:6a:52:9c:d5:0c:60:2c: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:70:C8:25:7E:68:92:E5:B0:0D:9A:C9:87:7D:86:67:D2:77:B2:C7 X509v3 Authority Key Identifier: keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/6DD11538BA6711F0A5E1473EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.124.0/23 Signature Algorithm: sha256WithRSAEncryption 62:2f:24:a3:6f:9c:19:7a:53:7b:74:f0:b2:ea:00:1c:37:15: cd:08:87:01:e8:09:20:c0:bf:ae:42:0f:3e:dd:28:64:e0:08: 4f:35:dc:2b:f3:8e:d1:fc:a5:12:32:00:e5:33:d0:fa:69:34: fb:68:62:7c:03:a8:62:ca:70:db:04:f1:06:97:87:d5:17:f3: 72:2b:d5:f5:05:1d:3a:fc:4e:3b:2d:fa:2e:33:a5:7f:4d:b0: 80:f0:e2:f1:ab:96:ee:81:70:87:be:c2:1c:4c:a3:4a:d0:66: 43:da:22:e0:8e:e9:d8:62:cf:2f:ee:1a:fd:09:cb:19:9c:a9: 2e:57:08:48:33:2a:31:0b:34:76:f3:f7:bc:83:48:75:05:e5: f4:22:5d:b4:55:4c:01:73:b1:5c:32:97:84:ea:c2:e1:81:dc: e1:0a:f5:a8:0a:d2:fb:ea:f9:c9:40:64:b9:44:9c:5a:59:ba: 49:2e:e5:0c:2d:df:c6:a5:e0:bc:6b:9e:73:6b:71:6a:02:e7: ba:e5:80:e8:40:c3:f1:8d:f2:f1:51:40:c8:57:55:33:3b:33: 98:f8:0f:e3:e7:29:be:29:f0:87:8a:5e:44:4d:df:97:4b:2f: 37:e9:34:29:07:18:ed:9a:ad:c8:53:d0:ce:56:43:06:c0:39: 02:e3:90:22 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTdBNzExMC8GA1UEBRMoQTBCRjMwNzk0RTZBRTQ5RUMwNjhENTAzOENGOUFGRjU0 MzVEMUREMjAeFw0yNTExMDYxODEyNDZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MGNlNTFkLWFlM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg4IcGJrLgZrzP8JAjjvi1L3M0w8Zf7mvLwiVkIwh1J+EJ7ePFklC/Q6utYqP3 7iXBsd3zT76lunjWymMxN2wH4TVz4z6S4MyOc+YOXPkQUTH/4TqSzpB3QF2Fv616 XAuIkisHF/y+R8MQEsyNUTh3hVludHaSTbIekBcxn/6EMmLX9bCEG2X8pUG1SFAX mvuqCvPH1ojaBPGZwl9WmGA7jygST5LWGiwCVsoZ0V5I6ftLKCX43cJCWdfISkOm JRvfskT3uhnbRv3HGKrnC1wbpTjtxhPKrrCqt+XZZKrwREBiRBJztLMIIqpgehy2 Z08xN4TeWhM/alKc1QxgLP3bAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmnDIJX5o kuWwDZrJh32GZ9J3sscwHwYDVR0jBBgwFoAUoL8weU5q5J7AaNUDjPmv9UNdHdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5N0E3LzAxMDIyNzgyQkEz ODExRjA5MzQwOEY2QkM0RjlBRTAyL29MOHdlVTVxNUo3QWFOVURqUG12OVVOZEhk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb0w4d2VVNXE1SjdBYU5VRGpQbXY5VU5kSGRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTdBNy8wMTAyMjc4MkJBMzgxMUYwOTM0MDhGNkJDNEY5QUUwMi82REQxMTUzOEJB NjcxMUYwQTVFMTQ3M0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8fDANBgkqhkiG9w0BAQsFAAOCAQEAYi8ko2+cGXpTe3Tw suoAHDcVzQiHAegJIMC/rkIPPt0oZOAITzXcK/OO0fylEjIA5TPQ+mk0+2hifAOo Yspw2wTxBpeH1RfzcivV9QUdOvxOOy36LjOlf02wgPDi8auW7oFwh77CHEyjStBm Q9oi4I7p2GLPL+4a/QnLGZypLlcISDMqMQs0dvP3vINIdQXl9CJdtFVMAXOxXDKX hOrC4YHc4Qr1qArS++r5yUBkuUScWlm6SS7lDC3fxqXgvGuec2txagLnuuWA6EDD 8Y3y8VFAyFdVMzszmPgP4+cpvinwh4peRE3fl0svN+k0KQcY7ZqtyFPQzlZDBsA5 AuOQIg== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:22 2025 by rpki-client