This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/127C35B4C52511F09456F21BC4F9AE02.roa File: 127C35B4C52511F09456F21BC4F9AE02.roa (raw, json) Hash identifier: nO3ZI61tCBJta8JPb4PdTpG+lV1HeV50ks8A1FY7r+o= Subject key identifier: B5:01:FE:87:47:32:0E:3D:46:83:A8:3D:58:6C:AB:AC:47:2F:78:C2 Certificate issuer: /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856 Certificate serial: 02 Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/127C35B4C52511F09456F21BC4F9AE02.roa Signing time: Wed 19 Nov 2025 08:52:27 +0000 ROA not before: Wed 19 Nov 2025 08:52:27 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 154351 IP address blocks: 138.252.184.0/23 maxlen: 23 138.252.184.0/24 maxlen: 24 138.252.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856 Validity Not Before: Nov 19 08:52:27 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=691d854a-e35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a9:46:42:df:a0:e5:02:bc:9a:d2:88:cb:4e: b3:4e:16:e6:1a:01:5d:02:ba:fe:39:5e:bb:e5:70: 63:9b:c9:fa:21:81:8a:cc:af:e2:49:67:d0:c5:3a: 9b:3d:f3:03:d0:72:cd:87:7a:67:34:00:08:fb:d6: 49:9e:ec:99:94:88:9c:96:38:78:b5:d0:2e:4d:10: 4c:f2:a1:9a:85:f6:ec:9c:ae:87:cd:c1:6a:8d:75: c6:64:aa:63:1c:46:72:00:6c:bb:84:59:81:ca:07: a6:b9:16:4d:e5:9e:e0:26:86:dc:38:b4:63:4d:1d: ca:c2:bf:62:f5:bf:29:5e:4f:22:db:25:69:89:d1: 43:91:2e:dc:41:54:d7:b4:46:90:06:94:6e:a5:df: 09:c0:dd:e1:85:c0:54:cd:52:e9:4e:92:47:2a:e6: eb:ac:d0:b1:49:c2:82:9e:85:39:16:f9:d6:2d:e8: 41:57:68:0e:1e:89:88:d5:4b:11:ec:f7:e1:44:e7: 8c:b8:cb:24:d2:4e:3e:9c:9d:b1:d3:c7:db:5f:83: 68:c7:cd:8e:fd:4a:57:d0:7d:88:62:f8:98:c3:5a: 3b:46:e2:63:0d:36:19:e1:34:f0:71:40:8b:73:f8: 30:bc:cc:b8:5c:bb:0b:60:ae:ae:bd:4c:da:70:7c: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:01:FE:87:47:32:0E:3D:46:83:A8:3D:58:6C:AB:AC:47:2F:78:C2 X509v3 Authority Key Identifier: keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/127C35B4C52511F09456F21BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.184.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:78:78:2c:0a:37:d7:c3:12:72:b1:49:b3:15:52:ae:1f:ca: 5a:5c:7c:24:f6:2c:cb:80:1e:74:5d:ba:36:e9:b3:3a:0d:64: 94:91:19:a8:7f:5f:9e:c9:84:cf:fd:b3:e4:2e:44:b6:fa:54: 55:05:e5:a7:bc:31:3c:c5:aa:0a:bb:7c:4d:1a:72:78:90:c4: 6f:fe:9e:05:b3:98:b0:4d:06:c4:5d:15:f2:26:af:b0:bb:ed: 01:10:73:b6:80:e8:b6:9f:35:66:aa:df:64:01:eb:2e:95:e8: 1e:6d:9e:dc:eb:87:63:7d:65:e8:08:4d:d9:3f:de:79:04:79: ea:a9:7b:9b:c2:2d:f4:32:77:10:2f:30:6c:75:2c:f7:62:87: d6:7f:38:64:f4:76:94:fe:b2:95:3f:a1:02:03:46:b0:ee:77: dd:97:ce:f5:a9:3a:fb:4d:30:f8:b4:3d:fc:8e:ec:20:f9:c1: e1:64:d2:3a:72:03:3d:d0:59:99:ea:37:d4:c3:32:c0:f2:cc: 26:af:82:94:5d:8d:8b:cd:e2:0e:fa:98:14:48:7a:c5:ff:d2: b0:9b:10:97:cb:a8:25:1b:0f:a4:74:6e:99:42:7c:0a:bc:c2: bf:2b:69:2f:43:83:dc:f1:d8:2c:2c:17:da:ab:ec:2c:56:df: 42:36:02:9b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDdBMzExMC8GA1UEBRMoMzEyNTc1REU0RDQ2NDNGQURGQUU0ODg3NkRGNDU2N0Q3 RDdDNjg1NjAeFw0yNTExMTkwODUyMjdaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWQ4NTRhLWUzNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiqUZC36DlArya0ojLTrNOFuYaAV0Cuv45XrvlcGObyfohgYrMr+JJZ9DFOps9 8wPQcs2Hemc0AAj71kme7JmUiJyWOHi10C5NEEzyoZqF9uycrofNwWqNdcZkqmMc RnIAbLuEWYHKB6a5Fk3lnuAmhtw4tGNNHcrCv2L1vyleTyLbJWmJ0UORLtxBVNe0 RpAGlG6l3wnA3eGFwFTNUulOkkcq5uus0LFJwoKehTkW+dYt6EFXaA4eiYjVSxHs 9+FE54y4yyTSTj6cnbHTx9tfg2jHzY79SlfQfYhi+JjDWjtG4mMNNhnhNPBxQItz +DC8zLhcuwtgrq69TNpwfHANAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUtQH+h0cy Dj1Gg6g9WGyrrEcveMIwHwYDVR0jBBgwFoAUMSV13k1GQ/rfrkiHbfRWfX18aFYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEN0EzLzg2MUIxMTEyQzUy NDExRjA5NTZBREQxQUM0RjlBRTAyL01TVjEzazFHUV9yZnJraUhiZlJXZlgxOGFG WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVNWMTNrMUdRX3JmcmtpSGJmUldmWDE4YUZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDdBMy84NjFCMTExMkM1MjQxMUYwOTU2QUREMUFDNEY5QUUwMi8xMjdDMzVCNEM1 MjUxMUYwOTQ1NkYyMUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8uDANBgkqhkiG9w0BAQsFAAOCAQEAPHh4LAo318MScrFJ sxVSrh/KWlx8JPYsy4AedF26NumzOg1klJEZqH9fnsmEz/2z5C5EtvpUVQXlp7wx PMWqCrt8TRpyeJDEb/6eBbOYsE0GxF0V8iavsLvtARBztoDotp81ZqrfZAHrLpXo Hm2e3OuHY31l6AhN2T/eeQR56ql7m8It9DJ3EC8wbHUs92KH1n84ZPR2lP6ylT+h AgNGsO533ZfO9ak6+00w+LQ9/I7sIPnB4WTSOnIDPdBZmeo31MMywPLMJq+ClF2N i83iDvqYFEh6xf/SsJsQl8uoJRsPpHRumUJ8CrzCvytpL0OD3PHYLCwX2qvsLFbf QjYCmw== -----END CERTIFICATE-----Generated at Wed Dec 3 14:53:40 2025 by rpki-client