This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/B753A48EC6C711F09BF6A518C4F9AE02.roa File: B753A48EC6C711F09BF6A518C4F9AE02.roa (raw, json) Hash identifier: Y96pVTrMdeKkXESI3mBfKCnkNu7eLETGHBB6EtnJI3s= Subject key identifier: C0:14:12:32:C7:34:87:0A:3C:E4:28:81:E9:95:B4:33:87:56:C0:62 Certificate issuer: /CN=A91B6DD0/serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Certificate serial: 1F Authority key identifier: 8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/B753A48EC6C711F09BF6A518C4F9AE02.roa Signing time: Fri 21 Nov 2025 10:49:13 +0000 ROA not before: Fri 21 Nov 2025 10:49:13 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 23672 IP address blocks: 138.252.2.0/23 maxlen: 23 138.252.2.0/24 maxlen: 24 138.252.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6DD0, serialNumber=8E121314291796B2E52B89D87C4ED6D9DCFA524B Validity Not Before: Nov 21 10:49:13 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=692043a8-b2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:83:63:33:da:46:84:2f:74:10:23:03:e0:df: fb:2d:ef:47:ab:e0:32:1f:27:ff:d2:8c:b8:f0:29: e3:2f:78:d9:56:58:75:c2:b9:a1:88:94:10:4f:79: 30:e3:7a:7a:d5:65:60:d5:88:91:15:b1:e1:ab:fd: 0b:2c:84:fa:c2:09:55:fb:16:bb:b6:83:af:d4:8f: a1:ab:e5:92:71:11:28:f2:b8:30:cf:94:e3:ab:77: ff:11:5c:f8:29:72:8a:09:d5:27:44:f9:92:3e:1f: 05:b8:73:c0:ff:c9:97:51:fa:55:93:3e:ff:f0:b3: fb:6e:18:45:3e:8f:4d:4f:bb:1f:3d:63:af:ab:35: 8a:b9:68:0c:7f:9f:aa:23:74:2a:84:97:65:17:e4: 21:61:24:67:de:e2:65:3a:3c:44:d5:b9:c0:be:fb: 1d:b4:8e:88:bb:32:80:5a:2c:23:47:26:59:14:24: 3b:64:3f:a2:70:6d:fc:3a:e9:3c:c1:d3:cd:53:48: c1:7e:93:02:90:8f:fe:d5:cf:85:43:cb:e3:fd:25: 04:2c:28:55:d3:2d:8a:d9:c0:6b:93:ba:fb:2d:7f: 1c:1c:c8:17:a8:f5:ea:4d:32:81:a2:54:4c:74:70: bc:4f:bd:ef:49:4c:fa:88:35:70:07:dc:72:13:1d: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:12:32:C7:34:87:0A:3C:E4:28:81:E9:95:B4:33:87:56:C0:62 X509v3 Authority Key Identifier: keyid:8E:12:13:14:29:17:96:B2:E5:2B:89:D8:7C:4E:D6:D9:DC:FA:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/jhITFCkXlrLlK4nYfE7W2dz6Uks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jhITFCkXlrLlK4nYfE7W2dz6Uks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/C1C7CC14C47011F0945D6239C4F9AE02/B753A48EC6C711F09BF6A518C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.2.0/23 Signature Algorithm: sha256WithRSAEncryption 21:f5:eb:8b:bf:ab:1d:75:db:c6:f7:b4:4d:2b:80:48:57:b5: d2:d6:4c:ba:8b:d6:a2:3a:c4:15:fa:a7:d8:d1:79:27:0f:33: 99:27:61:3e:db:35:70:e7:07:a7:28:81:de:0c:6b:55:6a:7d: 50:65:5a:6a:fa:19:0c:25:b0:3f:ca:fb:fc:a6:db:8d:29:8b: 8e:af:97:87:b6:c6:4c:fe:af:35:13:81:e5:01:d5:7c:b9:a7: 94:cd:e5:a4:f5:e4:96:17:cd:7f:06:0d:db:04:80:d7:6d:2b: 08:3f:84:be:15:d7:f0:1a:a1:6c:73:d3:50:9f:0e:39:cb:d2: 87:4c:2f:15:a0:8f:cb:4e:9c:76:fc:f2:7e:31:98:0b:19:06: 91:9b:97:f2:8e:34:2d:f5:33:fb:96:b3:73:6b:4a:eb:5a:cb: ca:54:57:fc:5b:f8:12:16:d4:c8:11:22:81:ec:00:6a:6a:14: a6:c9:ac:a0:17:9e:12:36:c2:69:2f:37:c6:4f:ae:f7:6d:46: 60:f5:36:76:58:4b:b5:12:fd:40:7a:b3:1b:82:ea:56:0f:ca: 66:92:6e:97:43:0b:79:f7:fd:6c:db:b9:10:37:18:20:2a:0a: 23:7a:47:9e:bb:1b:d5:f6:7c:89:b9:ae:d6:2e:d0:32:74:a5: a4:46:e8:aa -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkREMDExMC8GA1UEBRMoOEUxMjEzMTQyOTE3OTZCMkU1MkI4OUQ4N0M0RUQ2RDlE Q0ZBNTI0QjAeFw0yNTExMjExMDQ5MTNaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjA0M2E4LWIyYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHg2Mz2kaEL3QQIwPg3/st70er4DIfJ//SjLjwKeMveNlWWHXCuaGIlBBPeTDj enrVZWDViJEVseGr/QsshPrCCVX7Fru2g6/Uj6Gr5ZJxESjyuDDPlOOrd/8RXPgp cooJ1SdE+ZI+HwW4c8D/yZdR+lWTPv/ws/tuGEU+j01Pux89Y6+rNYq5aAx/n6oj dCqEl2UX5CFhJGfe4mU6PETVucC++x20joi7MoBaLCNHJlkUJDtkP6Jwbfw66TzB 081TSMF+kwKQj/7Vz4VDy+P9JQQsKFXTLYrZwGuTuvstfxwcyBeo9epNMoGiVEx0 cLxPve9JTPqINXAH3HITHZ/TAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUwBQSMsc0 hwo85CiB6ZW0M4dWwGIwHwYDVR0jBBgwFoAUjhITFCkXlrLlK4nYfE7W2dz6Uksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2REQwL0MxQzdDQzE0QzQ3 MDExRjA5NDVENjIzOUM0RjlBRTAyL2poSVRGQ2tYbHJMbEs0bllmRTdXMmR6NlVr cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvamhJVEZDa1hsckxsSzRuWWZFN1cyZHo2VWtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkREMC9DMUM3Q0MxNEM0NzAxMUYwOTQ1RDYyMzlDNEY5QUUwMi9CNzUzQTQ4RUM2 QzcxMUYwOUJGNkE1MThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8AjANBgkqhkiG9w0BAQsFAAOCAQEAIfXri7+rHXXbxve0 TSuASFe10tZMuovWojrEFfqn2NF5Jw8zmSdhPts1cOcHpyiB3gxrVWp9UGVaavoZ DCWwP8r7/KbbjSmLjq+Xh7bGTP6vNROB5QHVfLmnlM3lpPXklhfNfwYN2wSA120r CD+EvhXX8BqhbHPTUJ8OOcvSh0wvFaCPy06cdvzyfjGYCxkGkZuX8o40LfUz+5az c2tK61rLylRX/Fv4EhbUyBEigewAamoUpsmsoBeeEjbCaS83xk+u921GYPU2dlhL tRL9QHqzG4LqVg/KZpJul0MLeff9bNu5EDcYICoKI3pHnrsb1fZ8ibmu1i7QMnSl pEboqg== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:16 2025 by rpki-client