This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/1D0B731CC5B311F0B9E9FC2CC4F9AE02.roa File: 1D0B731CC5B311F0B9E9FC2CC4F9AE02.roa (raw, json) Hash identifier: 4M3xMLmhH3SZkY/B+hPDaXTnaFAKUiA/8/tQBNGnO2Y= Subject key identifier: F2:39:35:57:B8:BB:A3:F2:F9:B6:F7:4C:C9:BF:70:05:98:4B:7B:44 Certificate issuer: /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2 Certificate serial: 02 Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/1D0B731CC5B311F0B9E9FC2CC4F9AE02.roa Signing time: Thu 20 Nov 2025 01:49:13 +0000 ROA not before: Thu 20 Nov 2025 01:49:13 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154315 IP address blocks: 138.252.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2 Validity Not Before: Nov 20 01:49:13 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691e7398-204d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:62:af:56:6e:6c:08:0f:07:cf:d2:7e:10: a9:39:28:1a:2d:8f:05:19:73:18:33:75:60:7e:32: 5f:33:76:f3:19:39:19:91:cb:0c:07:bd:0a:2e:90: 61:d8:29:e9:46:fc:1b:9d:a6:e4:32:c6:bc:f3:63: 52:75:cf:55:0f:c8:11:c6:e8:20:6e:c4:0a:7a:c9: 4c:f1:d2:ec:67:e6:81:a5:66:7d:c5:a0:76:e9:b5: 13:0f:31:06:88:59:50:01:17:09:53:8b:d1:b8:05: a6:fd:49:50:75:18:b7:d0:24:f3:10:fb:1a:d2:41: f1:aa:61:7d:f3:92:2d:ea:41:85:6e:bb:3e:3d:3b: 17:e3:06:75:d1:20:3d:df:e2:e9:74:79:49:c2:89: 91:49:1c:43:ae:9c:6f:7c:41:bf:f7:7f:9a:7a:36: df:2f:99:bc:a2:32:35:c3:95:2e:95:bd:f9:12:4b: 40:61:0e:ec:a8:90:e4:61:4d:f8:ed:87:03:2a:a1: e6:bd:11:db:8b:d1:10:ca:94:0d:0b:d6:88:a1:4d: 3d:bf:69:0b:7b:a7:b1:be:5a:86:fe:bb:93:a1:a0: f6:35:e9:71:80:5e:1c:e1:ad:31:69:cb:b0:98:c8: fa:d8:cf:97:c4:57:cb:ef:31:25:94:a2:94:b5:11: c4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:39:35:57:B8:BB:A3:F2:F9:B6:F7:4C:C9:BF:70:05:98:4B:7B:44 X509v3 Authority Key Identifier: keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/1D0B731CC5B311F0B9E9FC2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.96.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:34:00:0e:27:72:0f:3d:68:15:52:ff:b8:7c:f7:14:bf:7d: 82:98:97:9b:59:08:70:43:b1:6e:8b:96:0f:c2:79:8d:86:fb: 88:8f:4d:af:51:8d:29:e1:5d:d9:4c:8c:97:55:be:f4:5e:1e: b7:b7:9e:d9:91:a0:60:f8:e9:f7:b9:01:38:ac:fe:92:48:4e: e4:c1:a6:35:56:5f:2a:cf:22:37:af:2b:ab:d8:b2:93:74:96: aa:3c:8d:39:44:ae:f5:fe:ad:31:6d:20:88:79:72:ee:2e:10: 1c:ca:35:e5:c2:a5:d3:89:fb:2f:b1:5b:93:a7:cb:66:d5:a3: b8:89:b3:87:2e:af:ee:26:c3:7c:5a:73:92:87:dd:1c:d7:40: 98:47:5b:3b:40:3c:92:b7:05:6c:a0:41:74:a4:00:e4:95:27: 51:ac:b3:2f:59:db:1c:7a:74:63:75:8c:53:1d:da:fb:1e:37: 7f:6e:1b:3a:f4:1d:0f:cb:06:f5:8d:63:4d:da:f0:c1:f8:ed: f0:97:47:fc:df:d1:36:84:58:82:ef:1e:6f:e1:7f:e1:4b:35: f1:10:95:c9:9c:8e:7a:c9:2f:58:49:7d:1b:51:87:8d:dc:78: c6:99:34:54:81:ac:60:46:ce:0a:17:a5:90:8f:73:b3:74:27: 79:35:7c:3a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTJCNTExMC8GA1UEBRMoRkQ0OUE1MTM0NkEyRjdBQzgxMUIwMEFENjJFQkVGMEU5 NEEyQTFCMjAeFw0yNTExMjAwMTQ5MTNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWU3Mzk4LTIwNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7yGKvVm5sCA8Hz9J+EKk5KBotjwUZcxgzdWB+Ml8zdvMZORmRywwHvQoukGHY KelG/BudpuQyxrzzY1J1z1UPyBHG6CBuxAp6yUzx0uxn5oGlZn3FoHbptRMPMQaI WVABFwlTi9G4Bab9SVB1GLfQJPMQ+xrSQfGqYX3zki3qQYVuuz49OxfjBnXRID3f 4ul0eUnCiZFJHEOunG98Qb/3f5p6Nt8vmbyiMjXDlS6VvfkSS0BhDuyokORhTfjt hwMqoea9EduL0RDKlA0L1oihTT2/aQt7p7G+Wob+u5OhoPY16XGAXhzhrTFpy7CY yPrYz5fEV8vvMSWUopS1EcSVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU8jk1V7i7 o/L5tvdMyb9wBZhLe0QwHwYDVR0jBBgwFoAU/UmlE0ai96yBGwCtYuvvDpSiobIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MkI1LzY2NzlEOEJFQzVC MjExRjA4NjIyNzkyQkM0RjlBRTAyL19VbWxFMGFpOTZ5Qkd3Q3RZdXZ2RHBTaW9i SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1VtbEUwYWk5NnlCR3dDdFl1dnZEcFNpb2JJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJCNS82Njc5RDhCRUM1QjIxMUYwODYyMjc5MkJDNEY5QUUwMi8xRDBCNzMxQ0M1 QjMxMUYwQjlFOUZDMkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8YDANBgkqhkiG9w0BAQsFAAOCAQEACjQADidyDz1oFVL/ uHz3FL99gpiXm1kIcEOxbouWD8J5jYb7iI9Nr1GNKeFd2UyMl1W+9F4et7ee2ZGg YPjp97kBOKz+kkhO5MGmNVZfKs8iN68rq9iyk3SWqjyNOUSu9f6tMW0giHly7i4Q HMo15cKl04n7L7Fbk6fLZtWjuImzhy6v7ibDfFpzkofdHNdAmEdbO0A8krcFbKBB dKQA5JUnUayzL1nbHHp0Y3WMUx3a+x43f24bOvQdD8sG9Y1jTdrwwfjt8JdH/N/R NoRYgu8eb+F/4Us18RCVyZyOeskvWEl9G1GHjdx4xpk0VIGsYEbOChelkI9zs3Qn eTV8Og== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:55 2025 by rpki-client