This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4C5D09F0C62B11F0869A2726C4F9AE02.roa File: 4C5D09F0C62B11F0869A2726C4F9AE02.roa (raw, json) Hash identifier: rkHPQBbIGBC9kES91A9vwrHj905HvLVwpxDu2FnpJAU= Subject key identifier: 0D:2B:9D:1F:ED:25:A6:7A:46:B9:86:2C:85:53:C7:68:68:12:C1:B9 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0722 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4C5D09F0C62B11F0869A2726C4F9AE02.roa Signing time: Thu 20 Nov 2025 16:09:32 +0000 ROA not before: Thu 20 Nov 2025 16:09:32 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154339 IP address blocks: 138.252.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Nov 20 16:09:32 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=691f3d3b-e4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:64:6e:38:4b:25:ab:18:45:ce:fd:1f:07:f3: cb:d0:d2:db:8b:f4:ab:70:ae:67:b4:d3:bd:43:62: 42:57:9f:b4:99:95:4a:6e:31:c2:6d:fd:2f:ec:3f: 61:1f:c4:03:98:d3:9c:33:1c:ee:e5:de:55:f2:2a: ae:53:6c:74:00:aa:54:9a:ba:44:bd:e7:d3:5d:97: 48:f6:ef:11:0d:22:bf:e1:cf:2d:82:16:58:74:aa: 0b:28:d9:96:e4:28:29:06:6d:00:1e:35:f1:b8:dc: ae:a5:6e:05:2b:12:46:be:3b:77:07:c7:48:86:79: f5:24:06:e8:9a:3f:7d:92:b6:e4:7b:f2:a8:95:9e: 6b:b8:9b:28:fb:00:b1:45:a9:ab:be:1a:76:b1:0e: e0:17:eb:eb:46:cb:bc:00:92:eb:e5:0f:17:74:a1: 9e:d4:92:a7:cb:4e:0e:d1:38:83:fb:71:8f:97:be: 43:ea:5a:02:d2:bb:43:2e:37:58:bc:d7:ef:f0:7d: 76:4a:38:59:0e:a8:7f:a3:09:06:92:4a:33:f8:68: 4c:ee:f4:92:95:b1:e0:ec:8b:f8:7c:1e:d8:06:3f: 47:27:90:97:a4:95:77:b4:7a:e9:01:e8:b0:43:37: 65:12:79:0a:47:da:f0:5b:61:e4:c5:39:a5:13:af: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2B:9D:1F:ED:25:A6:7A:46:B9:86:2C:85:53:C7:68:68:12:C1:B9 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4C5D09F0C62B11F0869A2726C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.132.0/23 Signature Algorithm: sha256WithRSAEncryption 90:7a:1b:b2:ab:3a:f5:59:15:94:62:45:00:a7:ec:eb:13:cf: 1e:c6:ad:05:7d:12:1f:83:47:4a:7c:69:35:5d:97:bc:25:30: b1:b2:a8:24:74:fc:d7:6d:69:a4:67:96:49:e8:4c:8d:cb:5f: ca:5c:8b:34:3a:d0:24:b2:5f:35:92:30:2e:c7:09:0f:24:6b: b1:8a:3d:7a:ec:d7:34:2b:ed:bd:89:da:c2:08:69:93:89:a5: 65:65:64:e9:4f:6b:d6:b8:8d:f4:e6:07:0c:0f:de:cc:24:98: 67:ab:8c:95:e2:be:70:b2:17:eb:5b:7a:9a:12:86:d9:87:71: 97:90:37:1b:05:25:54:97:25:f3:b5:a4:b7:f4:56:7e:3d:a6: fb:8a:28:aa:bb:7f:b7:78:e2:64:6e:92:fa:4b:43:3c:eb:a1: 1c:07:e4:86:ce:af:50:a1:c5:62:78:ad:a8:53:a6:6d:92:52: 78:0c:d2:19:a9:c1:f7:87:34:89:26:71:90:f6:3b:15:2a:a2: 1a:a8:88:11:25:e3:56:15:5e:ff:3a:96:c0:af:0d:f5:21:9a: 61:47:82:95:f3:3e:1a:72:bd:48:f8:f2:5c:92:15:d1:e6:3d: 1a:63:4a:0b:a9:bc:82:82:70:92:86:89:0e:1f:8e:6c:31:a6: 2c:1b:54:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMTIwMTYwOTMyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmM2QzYi1lNGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GRuOEslqxhFzv0fB/PL0NLbi/SrcK5ntNO9Q2JCV5+0mZVKbjHCbf0v7D9h H8QDmNOcMxzu5d5V8iquU2x0AKpUmrpEvefTXZdI9u8RDSK/4c8tghZYdKoLKNmW 5CgpBm0AHjXxuNyupW4FKxJGvjt3B8dIhnn1JAbomj99krbke/KolZ5ruJso+wCx Ramrvhp2sQ7gF+vrRsu8AJLr5Q8XdKGe1JKny04O0TiD+3GPl75D6loC0rtDLjdY vNfv8H12SjhZDqh/owkGkkoz+GhM7vSSlbHg7Iv4fB7YBj9HJ5CXpJV3tHrpAeiw QzdlEnkKR9rwW2HkxTmlE6/GXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA0rnR/t JaZ6RrmGLIVTx2hoEsG5MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNEM1RDA5RjBD NjJCMTFGMDg2OUEyNzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGK/IQwDQYJKoZIhvcNAQELBQADggEBAJB6G7KrOvVZFZRi RQCn7OsTzx7GrQV9Eh+DR0p8aTVdl7wlMLGyqCR0/NdtaaRnlknoTI3LX8pcizQ6 0CSyXzWSMC7HCQ8ka7GKPXrs1zQr7b2J2sIIaZOJpWVlZOlPa9a4jfTmBwwP3swk mGerjJXivnCyF+tbepoShtmHcZeQNxsFJVSXJfO1pLf0Vn49pvuKKKq7f7d44mRu kvpLQzzroRwH5IbOr1ChxWJ4rahTpm2SUngM0hmpwfeHNIkmcZD2OxUqohqoiBEl 41YVXv86lsCvDfUhmmFHgpXzPhpyvUj48lySFdHmPRpjSgupvIKCcJKGiQ4fjmwx piwbVGk= -----END CERTIFICATE-----Generated at Sun Dec 7 15:25:55 2025 by rpki-client