This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/B27ED5E6C11311F089B2CF23C4F9AE02.roa
File: B27ED5E6C11311F089B2CF23C4F9AE02.roa (raw, json)
Hash identifier: 7fhu/OYQrcFPMsnlICq0uC4gks0i2x0hGeXI57B2Rwc=
Subject key identifier: 77:8C:0C:33:1E:AE:0E:13:D9:5D:57:74:29:85:32:8B:DE:CC:FB:28
Certificate issuer: /CN=A91F4130/serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2
Certificate serial: 02
Authority key identifier: 88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/B27ED5E6C11311F089B2CF23C4F9AE02.roa
Signing time: Fri 14 Nov 2025 04:37:59 +0000
ROA not before: Fri 14 Nov 2025 04:37:59 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 206888
IP address blocks: 138.252.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl
rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4130, serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2
Validity
Not Before: Nov 14 04:37:59 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6916b227-2317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:4e:2c:b8:6b:86:c7:44:3f:3f:e5:b7:3a:
70:cd:32:c2:4b:79:eb:ef:5b:c2:0c:37:26:93:08:
09:28:07:31:ea:35:4f:95:70:58:f5:11:5c:7b:80:
22:ca:75:c4:10:b3:c3:16:7e:b4:5c:65:31:77:a5:
65:48:cd:39:99:49:ed:77:d7:88:57:98:31:12:4f:
6d:27:96:92:fb:ca:fe:ee:43:73:8b:1e:2f:c6:45:
14:1f:37:56:2a:44:a2:bb:15:63:b9:d5:4e:90:b9:
11:e9:c0:4a:4f:9f:46:02:80:11:eb:c0:dd:a8:f6:
23:2e:cf:c8:30:dc:c1:d0:83:e7:5e:24:5e:66:7e:
e9:35:78:de:d1:e7:0a:fc:a8:fd:01:f2:36:f4:f6:
57:af:67:df:69:d7:8a:b3:84:9d:bb:54:3c:ac:e6:
3d:8b:ca:7d:a3:3e:ee:60:37:59:14:cd:46:a9:e7:
71:21:70:ae:37:8d:cc:3d:65:b3:e0:7b:78:b5:4a:
d7:64:9c:65:b7:0d:ff:c5:64:8a:4d:1b:6f:a6:98:
87:61:f6:8c:e1:3c:da:68:66:46:2f:51:8e:64:d0:
9c:2c:e5:ae:d8:af:f5:22:3d:e0:e1:a6:1b:5a:ba:
9c:84:44:d4:f1:79:5d:65:47:8f:47:0f:b3:99:aa:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8C:0C:33:1E:AE:0E:13:D9:5D:57:74:29:85:32:8B:DE:CC:FB:28
X509v3 Authority Key Identifier:
keyid:88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/B27ED5E6C11311F089B2CF23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a8:1b:ae:af:6a:0f:8e:7b:41:d6:a9:4e:3c:0e:d9:47:43:
b2:0e:05:5b:b4:75:0f:97:40:b4:0f:95:3c:e9:1e:d9:cd:2b:
90:df:a8:6b:6d:c6:6a:58:57:90:c8:7c:40:4b:00:3b:63:0b:
ab:b6:90:ab:96:35:16:17:5b:59:e8:1a:8d:e2:ed:c0:9d:b2:
e1:f2:0d:b1:6c:c2:cf:8e:09:84:7e:e8:5c:e9:53:a6:5f:e9:
8d:44:f7:bb:e8:9a:7a:a1:77:02:1c:c9:a5:a3:06:99:c9:ec:
3f:89:68:e9:ee:1e:9e:d4:e5:15:72:0d:bd:eb:ce:58:e1:34:
35:9f:35:b3:8f:87:c6:8c:50:69:7d:82:04:b4:d3:f1:00:63:
2b:99:8f:9b:95:3a:3b:c6:60:dc:9c:fc:a4:fd:82:9c:58:40:
54:05:33:5d:89:b9:11:83:44:b9:e2:c1:69:3c:0b:f8:8a:6f:
93:57:7d:4f:a2:92:51:1d:76:15:88:90:22:a6:05:df:05:d6:
70:96:6b:ab:e9:5f:0f:da:1f:0f:75:c5:dd:4e:2c:4d:94:53:
71:10:cf:40:7f:b3:51:da:d3:94:00:33:3d:49:f6:55:4a:c8:
be:9d:b6:bf:e4:0d:6f:7c:0b:de:e3:09:23:6d:b7:67:04:93:
ed:57:11:b6
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NDEzMDExMC8GA1UEBRMoODgzNzIyODI4RUNGOUU4RERERkQyNDZGM0M2NzhFOUYw
NTE1RjlEMjAeFw0yNTExMTQwNDM3NTlaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MTZiMjI3LTIzMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzZ04suGuGx0Q/P+W3OnDNMsJLeevvW8IMNyaTCAkoBzHqNU+VcFj1EVx7gCLK
dcQQs8MWfrRcZTF3pWVIzTmZSe1314hXmDEST20nlpL7yv7uQ3OLHi/GRRQfN1Yq
RKK7FWO51U6QuRHpwEpPn0YCgBHrwN2o9iMuz8gw3MHQg+deJF5mfuk1eN7R5wr8
qP0B8jb09levZ99p14qzhJ27VDys5j2Lyn2jPu5gN1kUzUap53EhcK43jcw9ZbPg
e3i1StdknGW3Df/FZIpNG2+mmIdh9ozhPNpoZkYvUY5k0Jws5a7Yr/UiPeDhphta
upyERNTxeV1lR49HD7OZqiQ7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUd4wMMx6u
DhPZXVd0KYUyi97M+ygwHwYDVR0jBBgwFoAUiDcigo7Pno3d/SRvPGeOnwUV+dIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MTMwL0Y0MEVFODRFQzEx
MjExRjBCQjVBMTQyMEM0RjlBRTAyL2lEY2lnbzdQbm8zZF9TUnZQR2VPbndVVi1k
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaURjaWdvN1BubzNkX1NSdlBHZU9ud1VWLWRJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDEzMC9GNDBFRTg0RUMxMTIxMUYwQkI1QTE0MjBDNEY5QUUwMi9CMjdFRDVFNkMx
MTMxMUYwODlCMkNGMjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIr80DANBgkqhkiG9w0BAQsFAAOCAQEAjKgbrq9qD457Qdap
TjwO2UdDsg4FW7R1D5dAtA+VPOke2c0rkN+oa23GalhXkMh8QEsAO2MLq7aQq5Y1
FhdbWegajeLtwJ2y4fINsWzCz44JhH7oXOlTpl/pjUT3u+iaeqF3AhzJpaMGmcns
P4lo6e4entTlFXINvevOWOE0NZ81s4+HxoxQaX2CBLTT8QBjK5mPm5U6O8Zg3Jz8
pP2CnFhAVAUzXYm5EYNEueLBaTwL+Ipvk1d9T6KSUR12FYiQIqYF3wXWcJZrq+lf
D9ofD3XF3U4sTZRTcRDPQH+zUdrTlAAzPUn2VUrIvp22v+QNb3wL3uMJI223ZwST
7VcRtg==
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:54:09 2025 by rpki-client