This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/8D7D3942C9AE11F0A867D348C4F9AE02.roa File: 8D7D3942C9AE11F0A867D348C4F9AE02.roa (raw, json) Hash identifier: f6LJ1o+/HlkVTaZ1lRAj/+eYOJXKRmJ8r7oZSOqaeL4= Subject key identifier: 8B:B5:05:BB:E4:21:11:8E:0F:AB:FD:4A:30:56:11:57:0F:E8:83:61 Certificate issuer: /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Certificate serial: 02 Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/8D7D3942C9AE11F0A867D348C4F9AE02.roa Signing time: Tue 25 Nov 2025 03:26:38 +0000 ROA not before: Tue 25 Nov 2025 03:26:38 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154382 IP address blocks: 144.79.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608 Validity Not Before: Nov 25 03:26:38 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692521ee-2fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:33:dd:37:39:2b:2e:e8:aa:95:1d:c3:f4:55: 13:bd:3f:22:89:96:40:f5:63:21:fe:d4:f8:62:55: bb:9a:cf:1e:ad:8d:3d:c8:f7:dc:e4:23:7b:b3:3e: 88:b1:9f:67:90:96:52:82:a4:47:a1:8f:f4:74:ed: 56:03:eb:21:9d:2b:83:2f:42:6c:03:59:70:b6:8d: 51:0d:3b:6a:74:7a:b8:c2:e6:8b:6b:bd:bd:6c:4f: 90:4f:2c:0e:0a:67:94:b0:bf:93:7d:16:f3:8d:b7: 3b:b4:e4:f3:a1:ad:f8:2f:11:f6:7b:d9:86:02:7c: 58:4a:15:81:33:0f:04:b7:6f:9e:6f:0c:13:74:b5: 36:99:b3:69:48:bc:a6:4d:f7:93:8a:a3:f5:78:8d: 6a:15:a7:cd:86:96:a9:77:22:8d:79:78:7d:0d:76: 23:ff:41:96:fa:bf:df:0a:7c:71:fb:7f:bb:37:8a: 4c:14:dc:b9:9b:9c:8e:0f:bd:30:29:76:75:6f:d3: d6:68:2b:90:d2:dc:a7:09:d0:b1:7b:24:72:51:a2: e1:e5:81:be:64:8f:3e:94:c2:34:a1:45:58:2e:d2: 76:5b:a2:52:17:db:b4:2f:ed:2a:b2:d3:d7:44:de: 74:4b:64:c6:87:a9:79:15:8d:75:9b:25:1b:1d:35: dc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B5:05:BB:E4:21:11:8E:0F:AB:FD:4A:30:56:11:57:0F:E8:83:61 X509v3 Authority Key Identifier: keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/8D7D3942C9AE11F0A867D348C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.8.0/24 Signature Algorithm: sha256WithRSAEncryption 88:70:fe:54:ec:cd:e1:46:20:66:fc:d7:9a:c0:13:10:9f:aa: 40:13:f2:8c:2b:2f:d7:c8:b2:9d:31:93:9d:0e:43:1e:5f:d9: 84:2c:f0:5d:1c:ae:a2:d7:92:36:05:7b:d7:f5:04:53:e7:3f: 87:85:6f:26:65:75:53:d1:69:67:40:a2:36:54:32:5a:3a:db: 2d:60:4b:97:0b:0c:4e:37:f8:03:b9:b9:86:bb:f6:50:6e:5f: fa:eb:ef:78:c2:30:e8:df:45:30:25:80:03:cc:e6:60:1a:4c: 73:f8:c8:fc:cb:93:7a:57:5d:12:41:57:1b:b3:06:43:fa:fa: dd:63:c0:c5:0c:4d:fb:c1:89:45:4f:b2:77:ab:06:ff:9c:16: a6:aa:ab:d5:be:ab:cc:58:eb:d5:c9:47:09:a5:3c:d5:74:92: 1d:c3:bb:12:02:7d:12:02:12:71:fb:86:4b:92:29:70:ac:8d: 26:82:b6:2d:40:54:17:8d:b3:b2:32:0b:d6:d0:20:da:88:45: 33:65:f6:6f:41:45:9f:b8:85:f2:ff:a6:2b:a9:bd:62:43:dc: 46:a6:b0:fa:5b:ee:bb:41:64:9c:3e:2b:41:27:df:d2:d0:0b: d0:28:cb:e5:71:b0:f2:bb:00:3c:cc:79:99:b2:9c:cf:ec:37: 83:fb:29:5e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkEwNDExMC8GA1UEBRMoODhGQjFEMjFDQjg4M0M5N0MyOUFDQjc3RDRENjg4ODRC M0E3QTYwODAeFw0yNTExMjUwMzI2MzhaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjUyMWVlLTJmYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBM903OSsu6KqVHcP0VRO9PyKJlkD1YyH+1PhiVbuazx6tjT3I99zkI3uzPoix n2eQllKCpEehj/R07VYD6yGdK4MvQmwDWXC2jVENO2p0erjC5otrvb1sT5BPLA4K Z5Swv5N9FvONtzu05POhrfgvEfZ72YYCfFhKFYEzDwS3b55vDBN0tTaZs2lIvKZN 95OKo/V4jWoVp82Glql3Io15eH0NdiP/QZb6v98KfHH7f7s3ikwU3LmbnI4PvTAp dnVv09ZoK5DS3KcJ0LF7JHJRouHlgb5kjz6UwjShRVgu0nZbolIX27Qv7Sqy09dE 3nRLZMaHqXkVjXWbJRsdNdzHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUi7UFu+Qh EY4Pq/1KMFYRVw/og2EwHwYDVR0jBBgwFoAUiPsdIcuIPJfCmst31NaIhLOnpggw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QTA0LzI1QzUyNzdFQzlB RTExRjA5OEU5Mjc0NUM0RjlBRTAyL2lQc2RJY3VJUEpmQ21zdDMxTmFJaExPbnBn Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaVBzZEljdUlQSmZDbXN0MzFOYUloTE9ucGdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkEwNC8yNUM1Mjc3RUM5QUUxMUYwOThFOTI3NDVDNEY5QUUwMi84RDdEMzk0MkM5 QUUxMUYwQTg2N0QzNDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJBPCDANBgkqhkiG9w0BAQsFAAOCAQEAiHD+VOzN4UYgZvzX msATEJ+qQBPyjCsv18iynTGTnQ5DHl/ZhCzwXRyuoteSNgV71/UEU+c/h4VvJmV1 U9FpZ0CiNlQyWjrbLWBLlwsMTjf4A7m5hrv2UG5f+uvveMIw6N9FMCWAA8zmYBpM c/jI/MuTelddEkFXG7MGQ/r63WPAxQxN+8GJRU+yd6sG/5wWpqqr1b6rzFjr1clH CaU81XSSHcO7EgJ9EgIScfuGS5IpcKyNJoK2LUBUF42zsjIL1tAg2ohFM2X2b0FF n7iF8v+mK6m9YkPcRqaw+lvuu0FknD4rQSff0tAL0CjL5XGw8rsAPMx5mbKcz+w3 g/spXg== -----END CERTIFICATE-----Generated at Wed Dec 3 15:37:32 2025 by rpki-client