This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/4988E222A5FF11F08004B67CC4F9AE02.roa File: 4988E222A5FF11F08004B67CC4F9AE02.roa (raw, json) Hash identifier: y8ARtlnKOFD/ZdcLD/y5W8SXczj42QeGDvwDvopZPC8= Subject key identifier: C1:44:E6:5C:5E:35:D3:4B:D8:94:7C:10:BE:01:39:77:A1:5E:A0:BE Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 2D Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/4988E222A5FF11F08004B67CC4F9AE02.roa Signing time: Tue 18 Nov 2025 22:44:56 +0000 ROA not before: Tue 18 Nov 2025 22:44:56 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 53766 IP address blocks: 152.65.192.0/18 maxlen: 21 152.65.192.0/19 maxlen: 24 152.65.224.0/20 maxlen: 24 152.65.240.0/21 maxlen: 24 152.65.248.0/22 maxlen: 24 199.247.160.0/20 maxlen: 24 207.66.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 22:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Nov 18 22:44:56 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691cf6e7-510b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0b:f9:e8:3b:ce:77:c2:cc:f8:94:cb:44:1a: b4:ae:4d:42:b7:f8:24:a3:78:c2:fb:38:8e:76:43: c7:d3:05:20:6f:02:ad:6f:4f:a0:fe:9b:23:12:ed: 55:93:ff:3b:c8:70:06:c2:2c:26:95:df:f5:2c:38: 99:8e:c2:a0:2a:36:8a:6d:79:ef:1e:2b:3a:b2:48: bf:84:71:83:e1:7b:5a:35:c1:1e:02:b9:b9:72:79: 75:c8:2a:28:25:20:3d:ec:72:9f:2e:a7:fa:17:c3: fc:48:00:6e:37:a3:3f:d4:e5:f1:5b:27:dc:b8:e0: 54:27:ff:5c:e6:ed:bd:55:ac:ee:f7:2a:bd:a5:61: 07:f0:88:39:2a:23:a1:58:8d:60:aa:89:62:e2:5f: ad:69:e5:10:38:92:ee:02:25:01:0c:28:e2:49:3f: f2:f8:8d:86:0d:8c:a0:6b:06:dc:f7:91:03:e6:ab: d7:f4:60:96:f5:d5:51:49:a7:48:54:c8:84:66:95: 89:06:50:6e:58:2c:27:be:be:55:91:0b:de:5a:3c: 99:19:06:50:3a:0e:76:c3:53:53:f1:a0:f2:36:3f: a8:ab:36:ad:a4:5d:8c:a0:fd:a3:3a:e3:54:ca:9c: 57:0b:70:2d:e1:c0:d4:3d:0c:80:c1:e4:34:dc:27: fb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:44:E6:5C:5E:35:D3:4B:D8:94:7C:10:BE:01:39:77:A1:5E:A0:BE X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/4988E222A5FF11F08004B67CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 199.247.160.0/20 207.66.112.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:28:1c:17:2d:00:4d:5f:63:c3:7f:f7:f3:e2:0f:19:2e:9e: 85:7c:2a:49:a0:80:be:d8:8c:08:d6:95:c5:92:33:fd:81:b0: 8c:0b:9c:b7:4b:17:95:42:1b:90:0d:6c:75:5e:d0:d5:30:1d: 5d:eb:8c:d8:5b:c9:ce:0f:21:e4:5a:63:a8:fc:af:a5:d4:76: 0b:c5:9a:84:fd:b9:11:de:c9:11:a6:6a:3a:a8:12:a9:1f:d7: 9f:32:1a:47:5f:3a:a6:9f:1a:4c:f6:a2:ef:85:5b:60:7f:f2: 8a:95:ef:7c:cd:0b:dc:72:f1:0b:09:12:39:7a:a0:42:d6:46: 5b:a3:66:7b:6e:b3:1f:86:cb:f9:6c:22:40:c9:85:47:1e:8a: a0:3e:14:20:30:5e:75:e8:0d:82:b8:82:34:d5:06:47:e1:4d: 70:60:dc:b9:87:1f:ca:5e:0b:a6:57:2e:fd:74:76:66:af:c8: f7:23:b3:de:1b:82:01:c9:20:1a:0e:4b:a8:a8:ee:57:a2:0c: b5:cf:46:a1:0e:03:81:fd:d6:2a:40:11:58:88:65:6b:5d:dc: e0:6b:7a:a9:9c:3e:f9:c3:bb:d8:cc:87:6d:ca:5a:96:fb:12: c8:54:1c:65:cb:02:fe:5d:c4:6c:c8:4e:02:67:b1:af:f8:73: b5:c9:f2:e5 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNTExMTgyMjQ0NTZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWNmNmU3LTUxMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiC/noO853wsz4lMtEGrSuTUK3+CSjeML7OI52Q8fTBSBvAq1vT6D+myMS7VWT /zvIcAbCLCaV3/UsOJmOwqAqNoptee8eKzqySL+EcYPhe1o1wR4CublyeXXIKigl ID3scp8up/oXw/xIAG43oz/U5fFbJ9y44FQn/1zm7b1VrO73Kr2lYQfwiDkqI6FY jWCqiWLiX61p5RA4ku4CJQEMKOJJP/L4jYYNjKBrBtz3kQPmq9f0YJb11VFJp0hU yIRmlYkGUG5YLCe+vlWRC95aPJkZBlA6DnbDU1PxoPI2P6irNq2kXYyg/aM641TK nFcLcC3hwNQ9DIDB5DTcJ/vZAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUwUTmXF41 00vYlHwQvgE5d6FeoL4wHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi80OTg4RTIyMkE1 RkYxMUYwODAwNEI2N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEBphBwAMEBMf3oAMEA89CcDANBgkqhkiG9w0BAQsFAAOCAQEA CygcFy0ATV9jw3/38+IPGS6ehXwqSaCAvtiMCNaVxZIz/YGwjAuct0sXlUIbkA1s dV7Q1TAdXeuM2FvJzg8h5FpjqPyvpdR2C8WahP25Ed7JEaZqOqgSqR/XnzIaR186 pp8aTPai74VbYH/yipXvfM0L3HLxCwkSOXqgQtZGW6Nme26zH4bL+WwiQMmFRx6K oD4UIDBedegNgriCNNUGR+FNcGDcuYcfyl4Lplcu/XR2Zq/I9yOz3huCAckgGg5L qKjuV6IMtc9GoQ4Dgf3WKkARWIhla13c4Gt6qZw++cO72MyHbcpalvsSyFQcZcsC /l3EbMhOAmexr/hztcny5Q== -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:46 2025 by rpki-client