This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa File: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (raw, json) Hash identifier: ubVdeZPf6OneoRvNqezniKDm+qaCd4tbWJlkLoTSud4= Subject key identifier: 92:8E:F2:B8:44:2F:75:A9:88:CF:09:53:B7:67:F8:38:3D:95:93:92 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: 0C Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa Signing time: Mon 01 Dec 2025 06:41:07 +0000 ROA not before: Mon 01 Dec 2025 06:41:07 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 56132 IP address blocks: 130.194.0.0/16 maxlen: 16 130.194.248.0/21 maxlen: 21 130.194.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 17:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Dec 1 06:41:07 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=692d3883-827e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:b3:63:7a:c2:0f:34:44:86:6c:ee:ab:ed: 5c:3b:4f:8a:3c:f0:65:f5:23:df:f9:31:15:fb:5e: cd:73:dc:91:f1:a1:3a:8b:e7:3c:30:2c:d2:0e:d2: af:98:d2:40:4d:43:0c:3d:de:4c:05:b6:42:62:8c: 9a:6f:cc:8c:39:80:e1:a1:29:84:1b:32:3e:ca:84: 65:9b:a2:ad:23:f3:0e:f8:15:2a:93:a7:2b:6b:ef: 93:95:3a:49:8c:a7:0e:67:27:05:51:4e:88:e2:79: 1d:ae:3c:3f:be:60:7e:32:e4:d2:02:f3:49:91:47: bc:81:4c:9f:5f:5f:38:d9:14:06:b6:86:11:05:ea: c1:21:e0:25:4e:78:6a:0c:a1:46:8b:6d:33:3c:8c: ec:09:77:f5:27:5b:9b:ba:5f:7b:cf:f4:fe:80:f8: 50:5f:46:bf:96:92:aa:19:a4:3e:f0:9c:9d:7f:84: c5:b0:54:16:6b:22:0b:fe:c7:b6:ee:3e:d9:81:34: 32:e9:1f:51:b7:d5:39:0f:cd:f4:26:9a:88:a1:6f: f2:70:cf:bb:11:74:e2:18:cf:0f:17:60:bf:2f:ba: a0:39:59:2e:28:fa:90:ea:0e:04:b7:20:7b:77:12: 6f:3e:b3:f8:b1:43:f8:2c:c7:92:ac:c4:ce:1d:f7: 1c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8E:F2:B8:44:2F:75:A9:88:CF:09:53:B7:67:F8:38:3D:95:93:92 X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 130.194.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:e5:be:62:ef:f1:59:8e:71:06:1a:ae:40:19:7a:6b:f5:53: e8:79:fc:71:44:45:20:89:08:ff:c4:6b:b4:75:b8:9b:f7:0b: 60:34:2f:f4:89:79:6b:39:59:77:c0:ad:1d:0e:4e:c9:90:f9: 9c:98:e7:05:e7:66:5c:e1:70:be:da:cd:bb:d1:c1:a5:e7:28: 77:38:7d:65:23:29:9f:fe:d2:50:fd:33:dc:0f:31:19:36:ee: 03:6a:39:e3:cc:64:a5:4e:0c:0a:7e:bc:54:99:e4:b0:5c:c1: 15:2f:45:5b:27:9e:ca:b9:ad:22:35:32:d2:be:06:f2:c6:18: 9a:65:24:66:85:50:2c:89:08:e1:38:af:ba:a5:cd:11:42:74: 48:4c:6f:6a:64:f5:2b:f2:4c:70:43:fc:13:ac:2e:e4:0b:1b: 17:a2:f2:00:13:5c:1a:9f:5b:88:18:15:e4:2a:b4:ca:a3:c3: fb:b8:52:16:b4:15:1a:f3:50:10:37:80:af:31:dc:fd:7f:e4: 34:d1:56:74:17:cf:69:60:2b:3f:60:e4:c8:8c:8d:44:cb:e4: f2:1d:67:1f:aa:41:8a:1a:b3:ea:0f:19:18:0a:4e:d8:7a:cd: d3:d4:1d:8d:5e:cf:68:35:fa:ec:e6:e4:8d:f1:bb:96:79:0d: 1d:68:7f:34 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0NCNTExMC8GA1UEBRMoQjY4MzQ4QjE5MDcwNjNDMDQ0NDU2OUNFQjIyOEVBNTI0 NkQwMkYxOTAeFw0yNTEyMDEwNjQxMDdaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MmQzODgzLTgyN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChSrNjesIPNESGbO6r7Vw7T4o88GX1I9/5MRX7Xs1z3JHxoTqL5zwwLNIO0q+Y 0kBNQww93kwFtkJijJpvzIw5gOGhKYQbMj7KhGWboq0j8w74FSqTpytr75OVOkmM pw5nJwVRTojieR2uPD++YH4y5NIC80mRR7yBTJ9fXzjZFAa2hhEF6sEh4CVOeGoM oUaLbTM8jOwJd/UnW5u6X3vP9P6A+FBfRr+WkqoZpD7wnJ1/hMWwVBZrIgv+x7bu PtmBNDLpH1G31TkPzfQmmoihb/Jwz7sRdOIYzw8XYL8vuqA5WS4o+pDqDgS3IHt3 Em8+s/ixQ/gsx5KsxM4d9xyjAgMBAAGjggKUMIICkDAdBgNVHQ4EFgQUko7yuEQv damIzwlTt2f4OD2Vk5IwHwYDVR0jBBgwFoAUtoNIsZBwY8BERWnOsijqUkbQLxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQ0I1L0VEMjI1NTMyQzQz NDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdG9OSXNaQndZOEJFUlduT3NpanFVa2JRTHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS9FRDIyNTUzMkM0MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi8zQUY2Q0RFNENF N0UxMUYwQkREM0U0NTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQP MA0wCwQCAAEwBQMDAILCMA0GCSqGSIb3DQEBCwUAA4IBAQAz5b5i7/FZjnEGGq5A GXpr9VPoefxxREUgiQj/xGu0dbib9wtgNC/0iXlrOVl3wK0dDk7JkPmcmOcF52Zc 4XC+2s270cGl5yh3OH1lIymf/tJQ/TPcDzEZNu4DajnjzGSlTgwKfrxUmeSwXMEV L0VbJ57Kua0iNTLSvgbyxhiaZSRmhVAsiQjhOK+6pc0RQnRITG9qZPUr8kxwQ/wT rC7kCxsXovIAE1wan1uIGBXkKrTKo8P7uFIWtBUa81AQN4CvMdz9f+Q00VZ0F89p YCs/YOTIjI1Ey+TyHWcfqkGKGrPqDxkYCk7Yes3T1B2NXs9oNfrs5uSN8buWeQ0d aH80 -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:12 2025 by rpki-client