This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/AF2E6AE2C03B11F09EE7012FC4F9AE02.roa File: AF2E6AE2C03B11F09EE7012FC4F9AE02.roa (raw, json) Hash identifier: 7K3qRA/N7rz2jfT0m6Hcbsd9SkfThsmVfXsBZYNY3Xs= Subject key identifier: E3:05:D4:1A:6B:5E:3B:46:E7:69:E1:E8:31:B2:FA:0C:96:37:BC:14 Certificate issuer: /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Certificate serial: 04 Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/AF2E6AE2C03B11F09EE7012FC4F9AE02.roa Signing time: Thu 13 Nov 2025 02:55:00 +0000 ROA not before: Thu 13 Nov 2025 02:54:59 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136765 IP address blocks: 138.252.62.0/24 maxlen: 24 138.252.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5 Validity Not Before: Nov 13 02:54:59 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69154883-1f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:68:9a:af:b8:07:ee:68:43:a0:b9:ee:8d: da:36:76:96:66:c5:d1:ad:74:f1:ae:85:a6:99:01: cf:5e:57:b4:ef:28:c6:0c:da:40:97:94:ac:99:32: c3:19:08:dc:64:e4:b1:a8:0e:c6:89:b1:34:4a:46: 55:38:77:dc:fa:84:5d:54:28:0c:1f:6d:0a:45:38: 91:a7:dd:d3:86:e0:01:10:24:dd:52:b3:f5:2b:f5: dd:0c:f5:26:63:f2:df:4d:1c:46:b3:40:8d:df:1e: 4f:ef:5a:32:e1:21:45:31:57:cf:08:0e:5e:71:24: 40:03:32:c7:1c:44:25:dc:72:80:cc:a2:f5:52:bf: 3c:e8:98:e7:38:3f:79:71:1a:ba:cf:77:c1:4b:e8: 41:f4:24:ff:1b:61:26:ac:f2:cc:3d:6f:12:ed:4c: 53:88:c4:26:8c:be:49:01:a5:7c:a8:78:cd:27:4b: 33:91:67:23:d3:e4:6f:4f:9f:67:7c:f5:89:98:37: 06:2b:1e:da:b8:67:41:cb:60:19:24:fc:ad:7e:f0: c4:06:c4:12:cc:fd:40:68:cf:45:a8:53:e9:94:e7: 7d:ec:59:25:5a:c4:cc:f5:d3:bf:07:a2:3e:67:70: 53:82:fb:d1:76:55:87:d0:e6:95:e4:2b:29:ed:b8: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:05:D4:1A:6B:5E:3B:46:E7:69:E1:E8:31:B2:FA:0C:96:37:BC:14 X509v3 Authority Key Identifier: keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/AF2E6AE2C03B11F09EE7012FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.62.0/23 Signature Algorithm: sha256WithRSAEncryption 67:bd:f1:0f:8a:86:b7:c4:41:a5:26:c3:2a:7f:70:b7:df:d2: af:ec:32:79:d4:83:8f:60:e5:dc:01:86:9d:db:5e:9b:92:6c: e3:1e:52:e0:82:ee:67:31:ff:2a:88:ee:ec:ae:f0:e1:9d:16: b2:8a:69:e6:7c:58:76:9c:c5:9f:d5:d6:e6:bc:a4:d8:d0:3d: f5:43:5f:fc:d3:e6:5a:70:d7:2d:0a:70:6d:21:c7:ee:97:cc: cb:66:56:1a:22:3a:35:a2:d9:4b:19:cd:e2:fb:d3:9a:72:b5: 67:5b:31:d6:ee:5f:e8:6a:7e:90:3c:f7:5d:93:6f:7c:15:0c: be:4f:9e:91:20:a2:54:3e:d9:4b:1e:e4:c6:0f:d0:58:f6:98: 3b:83:ef:1d:77:a8:b4:c1:41:bd:7f:45:c8:8c:03:30:88:b7: 2c:39:d4:de:b0:44:00:04:9a:80:c2:7f:a8:4f:a1:29:96:85: 22:f9:12:8e:d5:a7:bf:01:33:e9:15:3a:f0:f5:e7:8b:f9:71: 14:5a:45:e0:9d:5e:92:78:e0:4e:68:00:31:0e:ba:72:65:17: 84:88:a9:d7:46:52:93:5c:37:33:c2:01:d4:c2:32:6f:38:5f: a6:86:1a:a4:1c:b1:e1:63:1a:98:50:64:08:a0:7a:1e:bf:99: cb:4f:73:ac -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0E1QjExMC8GA1UEBRMoNUQ0RjQxMkFFNDgwMTBGRTU0ODdGMDE4RjE3MUE5QzY0 NjlEOUFDNTAeFw0yNTExMTMwMjU0NTlaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MTU0ODgzLTFmMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkh2iar7gH7mhDoLnujdo2dpZmxdGtdPGuhaaZAc9eV7TvKMYM2kCXlKyZMsMZ CNxk5LGoDsaJsTRKRlU4d9z6hF1UKAwfbQpFOJGn3dOG4AEQJN1Ss/Ur9d0M9SZj 8t9NHEazQI3fHk/vWjLhIUUxV88IDl5xJEADMsccRCXccoDMovVSvzzomOc4P3lx GrrPd8FL6EH0JP8bYSas8sw9bxLtTFOIxCaMvkkBpXyoeM0nSzORZyPT5G9Pn2d8 9YmYNwYrHtq4Z0HLYBkk/K1+8MQGxBLM/UBoz0WoU+mU533sWSVaxMz1078Hoj5n cFOC+9F2VYfQ5pXkKyntuLe1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4wXUGmte O0bnaeHoMbL6DJY3vBQwHwYDVR0jBBgwFoAUXU9BKuSAEP5Uh/AY8XGpxkadmsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQTVCL0QyNUQ4NjhFQzAz QTExRjA4OEEzNDYyQ0M0RjlBRTAyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1z VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFU5Qkt1U0FFUDVVaF9BWThYR3B4a2FkbXNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0E1Qi9EMjVEODY4RUMwM0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9BRjJFNkFFMkMw M0IxMUYwOUVFNzAxMkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8PjANBgkqhkiG9w0BAQsFAAOCAQEAZ73xD4qGt8RBpSbD Kn9wt9/Sr+wyedSDj2Dl3AGGndtem5Js4x5S4ILuZzH/Koju7K7w4Z0Wsopp5nxY dpzFn9XW5ryk2NA99UNf/NPmWnDXLQpwbSHH7pfMy2ZWGiI6NaLZSxnN4vvTmnK1 Z1sx1u5f6Gp+kDz3XZNvfBUMvk+ekSCiVD7ZSx7kxg/QWPaYO4PvHXeotMFBvX9F yIwDMIi3LDnU3rBEAASagMJ/qE+hKZaFIvkSjtWnvwEz6RU68PXni/lxFFpF4J1e knjgTmgAMQ66cmUXhIip10ZSk1w3M8IB1MIybzhfpoYapByx4WMamFBkCKB6Hr+Z y09zrA== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:45 2025 by rpki-client