This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/8F62775EC9B311F08EBFD366C4F9AE02.roa File: 8F62775EC9B311F08EBFD366C4F9AE02.roa (raw, json) Hash identifier: HxgOvE8EAPC40IUOqEwdYq0KSHkJcIRXkuZt02zGc1Q= Subject key identifier: 96:AF:56:1B:D7:C0:5F:E1:19:47:A3:74:0C:97:95:CA:51:72:CD:E4 Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61 Certificate serial: 02 Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/8F62775EC9B311F08EBFD366C4F9AE02.roa Signing time: Tue 25 Nov 2025 04:02:29 +0000 ROA not before: Tue 25 Nov 2025 04:02:29 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154283 IP address blocks: 138.252.4.0/23 maxlen: 23 138.252.4.0/24 maxlen: 24 138.252.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61 Validity Not Before: Nov 25 04:02:29 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69252a55-82cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:38:42:ec:d9:d0:e1:3e:07:e0:de:56:fe: ab:e1:f5:1f:79:b0:50:05:87:4c:4a:42:9b:54:8b: 24:7a:41:d7:6b:20:54:c4:a9:04:92:aa:89:f7:d0: a2:a0:0d:67:c3:f6:a8:0f:af:c2:ff:93:c8:79:66: 26:98:1b:e2:e1:da:2e:c4:67:a7:87:b2:98:d0:bd: cb:74:d8:98:60:25:49:2f:df:fa:72:2e:e8:f7:c5: 60:eb:cd:ee:e9:de:04:f1:30:e4:fe:e2:b7:8c:f8: 97:de:d2:7e:22:2d:1d:69:70:82:1c:ab:60:72:f5: 14:3e:15:85:64:35:ac:15:70:4e:e2:52:42:d7:0d: 95:e8:3e:b5:5f:a2:2b:bd:06:e6:06:63:f5:fb:de: a7:e8:04:62:e6:6a:f5:95:d9:f1:29:6e:f4:f2:ab: 20:8f:88:eb:d0:56:67:c4:61:71:2c:8d:7e:db:fa: f2:79:a5:1d:c9:4f:f0:c1:35:16:9b:cc:91:04:cf: f6:e6:14:52:a9:c0:b5:2e:71:4c:fc:30:b2:5c:67: 70:3b:00:5e:5b:39:29:09:42:4c:a6:30:94:24:0b: 84:2d:54:95:1a:78:25:a8:e8:73:b9:aa:fb:2b:99: 3c:11:66:e1:fc:0b:15:76:7b:b2:eb:48:13:d9:7d: e6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AF:56:1B:D7:C0:5F:E1:19:47:A3:74:0C:97:95:CA:51:72:CD:E4 X509v3 Authority Key Identifier: keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/8F62775EC9B311F08EBFD366C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.4.0/23 Signature Algorithm: sha256WithRSAEncryption 13:42:20:da:da:90:c5:aa:0e:91:5a:49:94:3e:11:40:43:09: 9b:05:e3:ac:48:42:18:de:0a:66:ba:8e:18:8d:f4:0c:ab:cc: 57:15:82:96:85:1e:79:60:99:e8:56:ca:c1:ac:97:52:b3:8b: a8:e7:5a:8d:f2:8f:8e:df:8e:a9:56:c9:03:7d:86:d9:6f:bb: 8b:79:09:f9:5b:c8:18:36:3c:e8:9c:25:a2:1a:18:d3:cb:d1: 58:9a:ac:38:50:71:27:d6:ae:f4:c8:6d:85:b7:d4:e6:2a:0e: b1:7d:e2:a3:94:75:4e:63:cb:fb:a4:1d:05:3c:4d:bb:e1:fc: 81:89:31:e7:7d:fa:3a:3e:87:2a:e5:fe:43:b1:ef:84:0a:88: e7:73:1e:43:67:dc:7c:58:71:b8:f5:2a:ec:90:32:55:6f:73: fc:20:ea:10:a9:87:6a:74:ba:74:05:f3:e6:a6:f2:88:0d:1a: 5e:3e:b4:b7:1b:c1:38:c4:43:07:7f:40:02:63:7c:c0:ce:c6: ab:64:92:d4:0f:0a:b3:20:e4:27:51:36:30:b9:e5:43:6e:1f: c4:dd:4d:0a:56:cc:3b:38:e4:32:8a:7a:2a:f6:70:c7:74:a0: a4:39:ca:e0:55:38:ad:f0:4b:86:10:2e:19:18:ee:90:50:a9: 87:31:66:5c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEY1MDExMC8GA1UEBRMoMUJFQTM4MTE0RTlFRTgyRTQwNjRFQjNCRjkxMzI4MDg2 QzM1N0I2MTAeFw0yNTExMjUwNDAyMjlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjUyYTU1LTgyY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1PjhC7NnQ4T4H4N5W/qvh9R95sFAFh0xKQptUiyR6QddrIFTEqQSSqon30KKg DWfD9qgPr8L/k8h5ZiaYG+Lh2i7EZ6eHspjQvct02JhgJUkv3/pyLuj3xWDrze7p 3gTxMOT+4reM+Jfe0n4iLR1pcIIcq2By9RQ+FYVkNawVcE7iUkLXDZXoPrVfoiu9 BuYGY/X73qfoBGLmavWV2fEpbvTyqyCPiOvQVmfEYXEsjX7b+vJ5pR3JT/DBNRab zJEEz/bmFFKpwLUucUz8MLJcZ3A7AF5bOSkJQkymMJQkC4QtVJUaeCWo6HO5qvsr mTwRZuH8CxV2e7LrSBPZfeYLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlq9WG9fA X+EZR6N0DJeVylFyzeQwHwYDVR0jBBgwFoAUG+o4EU6e6C5AZOs7+RMoCGw1e2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RjUwLzAzM0VDRDcyQzlC MzExRjBBRDYzRkM3OEM0RjlBRTAyL0ctbzRFVTZlNkM1QVpPczctUk1vQ0d3MWUy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRy1vNEVVNmU2QzVBWk9zNy1STW9DR3cxZTJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEY1MC8wMzNFQ0Q3MkM5QjMxMUYwQUQ2M0ZDNzhDNEY5QUUwMi84RjYyNzc1RUM5 QjMxMUYwOEVCRkQzNjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8BDANBgkqhkiG9w0BAQsFAAOCAQEAE0Ig2tqQxaoOkVpJ lD4RQEMJmwXjrEhCGN4KZrqOGI30DKvMVxWCloUeeWCZ6FbKwayXUrOLqOdajfKP jt+OqVbJA32G2W+7i3kJ+VvIGDY86JwlohoY08vRWJqsOFBxJ9au9MhthbfU5ioO sX3io5R1TmPL+6QdBTxNu+H8gYkx5336Oj6HKuX+Q7HvhAqI53MeQ2fcfFhxuPUq 7JAyVW9z/CDqEKmHanS6dAXz5qbyiA0aXj60txvBOMRDB39AAmN8wM7Gq2SS1A8K syDkJ1E2MLnlQ24fxN1NClbMOzjkMop6KvZwx3SgpDnK4FU4rfBLhhAuGRjukFCp hzFmXA== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:18 2025 by rpki-client