This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/BF556A5AD00911F08CA8E011C4F9AE02.roa File: BF556A5AD00911F08CA8E011C4F9AE02.roa (raw, json) Hash identifier: Ohq89QpQ4h6890Ezis7aDeUdxD3YflZSmZSGNInyLts= Subject key identifier: 2C:D1:57:DA:EC:2C:07:C2:15:F5:BF:F4:F1:92:EA:C6:73:13:BF:75 Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 02 Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/BF556A5AD00911F08CA8E011C4F9AE02.roa Signing time: Wed 03 Dec 2025 05:34:33 +0000 ROA not before: Wed 03 Dec 2025 05:34:33 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132103 IP address blocks: 144.79.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Dec 3 05:34:33 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692fcbe9-f15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b7:2a:2f:a5:7f:30:1c:e1:81:4d:52:1f:39: 97:bd:61:eb:e8:5e:cc:62:e0:76:71:83:e1:db:90: 75:ec:37:fd:24:e0:8f:32:7c:2c:38:a0:35:c0:1d: b9:ed:05:77:94:0e:73:b1:a0:2b:a0:a9:68:b9:10: af:6d:1f:03:28:a5:20:c0:65:68:92:03:ec:38:29: 40:50:52:d5:48:e6:fb:9d:d5:ea:9a:24:98:a7:a1: fb:22:01:31:8a:77:1e:26:02:fa:39:7c:fd:c1:28: 68:4a:db:27:e7:f7:cc:c5:cf:0f:83:9e:c3:86:9d: 51:28:57:82:bf:cd:cb:fe:fd:96:f6:a4:38:7d:c6: 33:df:e0:6b:e1:1c:f3:3e:7f:af:19:25:81:d9:3f: 53:34:3d:15:fe:58:4d:58:95:04:ac:50:42:b9:4f: e0:1f:c0:fd:66:3b:62:f4:7d:1a:d7:aa:98:d6:b8: 58:5e:bd:5a:80:57:95:3f:7b:db:d1:24:48:5a:b9: 83:e4:2f:03:8c:0f:50:5e:b9:15:57:27:04:de:1b: 7a:7f:33:9e:aa:ca:72:40:23:04:42:2c:fc:3b:05: a6:ea:f6:45:f2:0e:94:4c:29:16:95:69:ee:3a:5a: f1:9f:9e:35:84:77:f5:5b:a1:0d:e6:f9:6d:f6:a4: db:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D1:57:DA:EC:2C:07:C2:15:F5:BF:F4:F1:92:EA:C6:73:13:BF:75 X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/BF556A5AD00911F08CA8E011C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.44.0/24 Signature Algorithm: sha256WithRSAEncryption b2:b2:e2:ea:8b:3e:a8:a1:a1:6f:a0:f4:46:e7:13:ff:a5:49: 4b:18:53:7c:de:49:e0:b7:cd:62:21:f8:d4:8e:7a:70:a0:5d: b2:95:4e:f5:a9:8b:21:94:12:0a:85:81:af:6e:b0:b9:d8:84: d4:46:c4:04:06:03:60:ae:ca:f1:64:26:b5:88:d3:d8:da:eb: 5f:95:f2:b4:e8:29:72:60:b1:06:9c:1c:2d:f9:03:56:ed:f3: cb:96:f9:c7:d0:cd:da:f1:38:dd:90:fb:4c:49:25:a5:55:2d: 32:47:41:d8:2c:e2:fe:6d:f5:e5:eb:13:47:b5:cf:18:4e:32: 05:62:11:9f:09:b0:66:af:d4:12:10:00:e6:0a:b4:4c:dc:05: 9e:b6:6d:d9:55:a7:4c:d5:42:35:5f:76:c1:9f:84:35:62:c8: 8b:f4:f5:99:a9:a9:1b:37:8c:c9:63:af:34:61:59:9a:6b:03: a2:1b:ce:7d:01:68:6e:66:05:c0:0f:29:90:aa:13:63:e9:f5: 5a:5f:e2:97:7a:ee:20:d8:ae:a7:90:72:0c:a2:22:3c:77:2d: fc:f8:3c:15:80:99:37:13:1d:16:03:e8:b4:ed:28:f1:33:9e: db:2e:e3:4e:76:2d:08:c8:d5:8a:61:df:7e:62:ea:c6:a2:5a: 76:a6:cf:72 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoMzhCQ0Q0RjlGODNBMUFEMDlCNjg4N0RCRUQ4MDRCMTgw QzNBMTZGQzAeFw0yNTEyMDMwNTM0MzNaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MmZjYmU5LWYxNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDityovpX8wHOGBTVIfOZe9YevoXsxi4HZxg+HbkHXsN/0k4I8yfCw4oDXAHbnt BXeUDnOxoCugqWi5EK9tHwMopSDAZWiSA+w4KUBQUtVI5vud1eqaJJinofsiATGK dx4mAvo5fP3BKGhK2yfn98zFzw+DnsOGnVEoV4K/zcv+/Zb2pDh9xjPf4GvhHPM+ f68ZJYHZP1M0PRX+WE1YlQSsUEK5T+AfwP1mO2L0fRrXqpjWuFhevVqAV5U/e9vR JEhauYPkLwOMD1BeuRVXJwTeG3p/M56qynJAIwRCLPw7Babq9kXyDpRMKRaVae46 WvGfnjWEd/VboQ3m+W32pNuRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULNFX2uws B8IV9b/08ZLqxnMTv3UwHwYDVR0jBBgwFoAUOLzU+fg6GtCbaIfb7YBLGAw6Fvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzI0N0I1Q0JBRDAw OTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT0x6VS1mZzZHdENiYUlmYjdZQkxHQXc2RnZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVERi8yNDdCNUNCQUQwMDkxMUYwQkU2MDBFNkJDNEY5QUUwMi9CRjU1NkE1QUQw MDkxMUYwOENBOEUwMTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJBPLDANBgkqhkiG9w0BAQsFAAOCAQEAsrLi6os+qKGhb6D0 RucT/6VJSxhTfN5J4LfNYiH41I56cKBdspVO9amLIZQSCoWBr26wudiE1EbEBAYD YK7K8WQmtYjT2NrrX5XytOgpcmCxBpwcLfkDVu3zy5b5x9DN2vE43ZD7TEklpVUt MkdB2Czi/m315esTR7XPGE4yBWIRnwmwZq/UEhAA5gq0TNwFnrZt2VWnTNVCNV92 wZ+ENWLIi/T1mampGzeMyWOvNGFZmmsDohvOfQFobmYFwA8pkKoTY+n1Wl/il3ru INiup5ByDKIiPHct/Pg8FYCZNxMdFgPotO0o8TOe2y7jTnYtCMjVimHffmLqxqJa dqbPcg== -----END CERTIFICATE-----Generated at Wed Dec 3 14:53:46 2025 by rpki-client