This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/485C422CA5FF11F08004B67CC4F9AE02.roa File: 485C422CA5FF11F08004B67CC4F9AE02.roa (raw, json) Hash identifier: UyaIPOR5BtYKD7ht1J5Z5vKBp3WQiWRuvIXcjTfMuds= Subject key identifier: 02:A6:D6:F4:57:CE:6E:38:68:53:9D:FF:41:16:5A:DD:E1:EB:DC:07 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 2B Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/485C422CA5FF11F08004B67CC4F9AE02.roa Signing time: Tue 18 Nov 2025 22:44:54 +0000 ROA not before: Tue 18 Nov 2025 22:44:54 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 19527 IP address blocks: 152.65.192.0/18 maxlen: 21 152.65.192.0/19 maxlen: 24 152.65.224.0/20 maxlen: 24 152.65.240.0/21 maxlen: 24 152.65.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 22:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Nov 18 22:44:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691cf6e6-5a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2e:01:79:01:5b:d6:89:8d:44:27:57:ae:5c: c7:df:55:5a:a2:da:33:7b:a7:30:3a:33:7a:e4:60: 8a:79:88:cf:63:55:d6:d1:32:39:30:5d:5f:81:fd: 2d:66:92:6c:34:e2:05:7f:d6:6b:0d:f6:04:6e:7c: fd:5a:81:e6:bd:c2:1a:18:32:4b:44:c5:dd:22:3f: 57:a4:38:87:f0:5c:37:71:9c:3c:61:9f:59:50:5f: 2a:90:1e:e6:54:b0:b4:bd:e4:c4:f6:98:a8:fb:5b: f0:9c:2e:9c:70:c1:52:dd:fa:d8:88:0f:e8:2b:94: ca:be:28:9f:80:1d:a6:50:a5:6a:f7:95:57:9c:25: 74:4d:b3:fe:af:d1:4c:b1:94:db:e7:8b:b7:99:80: 18:db:81:18:b9:af:d6:28:ef:05:8f:c8:9f:8c:3d: d0:3d:44:d1:37:01:97:62:43:a4:fd:21:1a:43:f0: d1:5c:ad:2f:fe:1a:48:8e:3e:c5:71:90:72:80:73: 64:9e:95:ce:dc:22:9f:46:d7:10:91:ca:de:8a:0a: 74:50:82:ea:74:7b:9c:80:e2:af:67:60:ec:a7:4e: 9d:a5:5e:b6:41:36:33:b5:16:39:a2:66:3e:76:da: b1:35:a6:96:3a:95:7e:3d:cb:4b:bd:4b:cb:be:f5: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A6:D6:F4:57:CE:6E:38:68:53:9D:FF:41:16:5A:DD:E1:EB:DC:07 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/485C422CA5FF11F08004B67CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 Signature Algorithm: sha256WithRSAEncryption 23:65:a4:c8:53:98:2c:75:de:13:d5:09:80:58:24:37:0b:66: e6:c6:c6:61:42:fa:65:1c:e6:21:41:30:d6:87:f0:5f:9c:21: 26:97:97:a2:7e:4a:d6:c1:c3:e8:38:25:15:0b:35:64:72:20: d2:19:1a:2d:fb:71:e8:ff:3c:25:94:63:d3:4f:af:20:30:f0: 7d:d5:b7:7d:21:bd:5e:29:c2:9b:7e:36:ea:b9:22:a9:a8:ff: bd:ee:a8:1e:06:40:56:fe:b2:cf:1c:7c:ea:be:83:0e:86:4c: 22:6f:72:e3:12:41:31:0d:92:79:09:20:14:b9:3c:d4:ef:ee: 4d:7a:cb:bb:1f:cb:64:1d:12:16:53:c8:02:9d:d6:1d:4f:9a: ec:e9:76:52:6b:37:3b:47:25:41:85:79:bb:58:38:e7:3c:12: d0:e9:62:56:c8:08:8d:c1:89:7a:78:72:75:49:f5:f4:09:e3: 74:62:90:41:f2:d5:6b:e3:69:f3:16:e8:32:bb:49:e4:8d:f9: 3f:c7:4e:6d:b2:b9:de:b6:a2:eb:30:66:6f:11:0f:0d:74:01: 52:b7:d4:b1:e5:ae:87:0c:aa:59:8c:bc:f7:9e:e5:37:01:8f: 8d:87:00:1c:23:2d:74:19:28:13:a4:06:42:9c:36:76:2b:a1: bf:54:8d:30 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNTExMTgyMjQ0NTRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWNmNmU2LTVhNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKLgF5AVvWiY1EJ1euXMffVVqi2jN7pzA6M3rkYIp5iM9jVdbRMjkwXV+B/S1m kmw04gV/1msN9gRufP1agea9whoYMktExd0iP1ekOIfwXDdxnDxhn1lQXyqQHuZU sLS95MT2mKj7W/CcLpxwwVLd+tiID+grlMq+KJ+AHaZQpWr3lVecJXRNs/6v0Uyx lNvni7eZgBjbgRi5r9Yo7wWPyJ+MPdA9RNE3AZdiQ6T9IRpD8NFcrS/+GkiOPsVx kHKAc2Selc7cIp9G1xCRyt6KCnRQgup0e5yA4q9nYOynTp2lXrZBNjO1FjmiZj52 2rE1ppY6lX49y0u9S8u+9RJTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUAqbW9FfO bjhoU53/QRZa3eHr3AcwHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi80ODVDNDIyQ0E1 RkYxMUYwODAwNEI2N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBphBwDANBgkqhkiG9w0BAQsFAAOCAQEAI2WkyFOYLHXeE9UJ gFgkNwtm5sbGYUL6ZRzmIUEw1ofwX5whJpeXon5K1sHD6DglFQs1ZHIg0hkaLftx 6P88JZRj00+vIDDwfdW3fSG9XinCm3426rkiqaj/ve6oHgZAVv6yzxx86r6DDoZM Im9y4xJBMQ2SeQkgFLk81O/uTXrLux/LZB0SFlPIAp3WHU+a7Ol2Ums3O0clQYV5 u1g45zwS0OliVsgIjcGJenhydUn19AnjdGKQQfLVa+Np8xboMrtJ5I35P8dObbK5 3rai6zBmbxEPDXQBUrfUseWuhwyqWYy8957lNwGPjYcAHCMtdBkoE6QGQpw2diuh v1SNMA== -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:49 2025 by rpki-client