This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/474BBE8AA5FF11F08004B67CC4F9AE02.roa File: 474BBE8AA5FF11F08004B67CC4F9AE02.roa (raw, json) Hash identifier: SMOUlqbPMt2kafk5s8X5CGmsl0wmXm2GKsiELLusKwQ= Subject key identifier: F5:66:E1:BB:19:96:66:2B:6D:96:B7:41:C2:D5:40:87:C6:4A:DB:0E Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 29 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/474BBE8AA5FF11F08004B67CC4F9AE02.roa Signing time: Tue 18 Nov 2025 22:44:52 +0000 ROA not before: Tue 18 Nov 2025 22:44:52 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139070 IP address blocks: 152.65.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 22:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Nov 18 22:44:52 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691cf6e4-8df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:fa:48:27:1a:45:e8:6d:79:68:13:3a:26: fc:2a:f8:00:b1:ab:7f:d3:53:c0:94:b0:b2:98:11: f8:1e:ae:53:3d:8f:d9:05:91:2b:0e:37:0a:5f:db: 08:00:df:0e:f8:2c:14:9e:35:f6:0e:68:5e:79:94: 1d:57:5b:0b:72:1b:57:97:67:0a:3c:f0:38:e7:b7: b4:cd:97:9a:1a:57:72:48:04:2e:74:09:e6:9c:65: c5:51:b6:25:d7:88:20:0d:f3:44:0b:70:7a:a0:d1: ce:19:b5:27:62:ca:97:45:f6:3d:4d:8c:18:87:ee: a2:86:44:a0:e0:e2:a9:40:85:84:2f:80:9f:1b:1e: dd:07:d6:6d:2b:b3:fe:08:c0:1a:ab:90:58:0d:6c: a5:bc:7a:13:a3:fd:1d:87:2f:e4:ce:41:e2:eb:da: 9a:38:00:76:50:92:14:d4:2e:50:0d:09:fa:c5:3b: ac:2b:bb:2e:14:64:3f:97:d4:1b:ec:a3:d3:1f:b9: d6:49:55:88:46:67:1b:1a:89:76:86:af:c2:4d:d4: b5:71:e1:9e:af:0c:9c:8e:b0:b6:a2:d0:55:44:c2: 55:80:99:05:09:0a:ab:d8:53:05:2b:80:cb:bb:44: 0b:ca:f5:9c:0d:3e:d0:65:3e:c8:e5:0b:ba:ce:06: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:66:E1:BB:19:96:66:2B:6D:96:B7:41:C2:D5:40:87:C6:4A:DB:0E X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/474BBE8AA5FF11F08004B67CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.65.246.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:d5:da:7e:a9:e0:80:17:2e:bc:5e:d1:a4:2b:fd:22:22:0c: 3e:86:64:8d:bb:82:89:8f:5d:1b:91:62:08:47:25:ad:34:90: 96:ed:0b:b7:5c:38:a0:03:d9:ba:98:87:e3:a0:b1:c9:f5:dd: 3b:98:43:95:bf:4c:6e:2b:b8:d2:dd:ea:6a:b8:a4:a4:cf:77: 8e:df:b5:48:fc:f7:61:b2:32:36:2e:36:88:c7:89:b8:d7:90: 89:55:71:52:10:8e:9f:b9:14:ff:38:95:b1:ca:e0:b7:d9:36: 73:29:8c:41:79:17:a2:90:dc:3f:22:96:e2:0c:a7:59:dd:40: b7:29:46:c9:bd:ca:ae:03:1e:8b:cf:d9:67:a3:7e:d8:29:5c: 8b:0c:c5:bc:49:44:76:c4:76:5c:0d:bc:fd:ad:5e:e2:c5:94: 28:29:af:5e:13:07:0a:8c:81:b9:53:17:e3:1c:66:1e:59:29: 17:41:dc:74:75:54:ce:54:4b:a6:ec:88:1c:31:7c:57:ec:5d: 6a:45:05:86:88:85:12:79:7e:e5:9d:d3:fa:50:71:6d:f2:56: b7:50:48:fa:14:e2:a2:fb:95:fd:b4:cd:a4:1a:45:6c:0a:01: 0b:97:09:05:b4:51:6a:6d:f1:14:b1:ab:39:92:5b:43:da:2d: d2:26:52:12 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNTExMTgyMjQ0NTJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWNmNmU0LThkZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgRfpIJxpF6G15aBM6Jvwq+ACxq3/TU8CUsLKYEfgerlM9j9kFkSsONwpf2wgA 3w74LBSeNfYOaF55lB1XWwtyG1eXZwo88Djnt7TNl5oaV3JIBC50CeacZcVRtiXX iCAN80QLcHqg0c4ZtSdiypdF9j1NjBiH7qKGRKDg4qlAhYQvgJ8bHt0H1m0rs/4I wBqrkFgNbKW8ehOj/R2HL+TOQeLr2po4AHZQkhTULlANCfrFO6wruy4UZD+X1Bvs o9MfudZJVYhGZxsaiXaGr8JN1LVx4Z6vDJyOsLai0FVEwlWAmQUJCqvYUwUrgMu7 RAvK9ZwNPtBlPsjlC7rOBrZ/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9WbhuxmW ZittlrdBwtVAh8ZK2w4wHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi80NzRCQkU4QUE1 RkYxMUYwODAwNEI2N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJhB9jANBgkqhkiG9w0BAQsFAAOCAQEAi9XafqnggBcuvF7R pCv9IiIMPoZkjbuCiY9dG5FiCEclrTSQlu0Lt1w4oAPZupiH46CxyfXdO5hDlb9M biu40t3qarikpM93jt+1SPz3YbIyNi42iMeJuNeQiVVxUhCOn7kU/ziVscrgt9k2 cymMQXkXopDcPyKW4gynWd1AtylGyb3KrgMei8/ZZ6N+2ClciwzFvElEdsR2XA28 /a1e4sWUKCmvXhMHCoyBuVMX4xxmHlkpF0HcdHVUzlRLpuyIHDF8V+xdakUFhoiF Enl+5Z3T+lBxbfJWt1BI+hTiovuV/bTNpBpFbAoBC5cJBbRRam3xFLGrOZJbQ9ot 0iZSEg== -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:53 2025 by rpki-client