This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/CA5B7DA48ECA11EEA3901581C4F9AE02.roa File: CA5B7DA48ECA11EEA3901581C4F9AE02.roa (raw, json) Hash identifier: IEppcfJ1cKJnkpbKDcHW0HDieVMkg79R16TR/E/T86Q= Subject key identifier: 7C:66:32:21:05:FB:97:B3:FE:7C:F9:C9:83:44:7E:59:4F:6E:00:AA Certificate issuer: /CN=A91FB8C8/serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Certificate serial: 0183 Authority key identifier: 36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/CA5B7DA48ECA11EEA3901581C4F9AE02.roa Signing time: Tue 09 Dec 2025 02:10:53 +0000 ROA not before: Tue 09 Dec 2025 02:10:53 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134564 IP address blocks: 36.50.30.0/24 maxlen: 24 163.61.86.0/24 maxlen: 24 2001:df3:3240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C8, serialNumber=369B3E9B7B66E8F5BB979A6E2F2E7AACF500D3F1 Validity Not Before: Dec 9 02:10:53 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6937852d-f538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:ad:76:97:7d:96:14:b7:31:19:0d:31:5c: 69:93:e6:67:45:56:59:74:9a:fa:52:c3:e8:ea:63: b1:93:b0:69:b1:d6:38:86:0b:c8:08:61:5f:7c:75: b0:13:c1:ed:e6:aa:bd:0f:4e:06:d0:39:05:20:c4: 8d:10:10:f3:b3:62:89:90:ef:46:17:ce:9f:01:b7: 0e:87:dc:42:38:4f:5d:66:da:2d:98:58:6d:b6:28: 21:dc:b3:82:af:bb:fd:ad:26:61:f8:cd:5b:2b:56: 97:02:12:ed:21:2f:b6:88:94:29:bf:bd:92:74:28: 39:91:68:bc:b5:fd:22:76:0b:05:22:ac:93:6d:61: 6d:f3:20:a2:47:8f:55:2a:36:6a:8f:51:bf:bc:43: 39:bd:ee:b6:29:ac:2a:ce:59:13:66:0c:97:4c:ec: 55:de:5c:e3:18:6d:0f:10:8e:52:95:71:db:4e:24: f9:68:73:14:68:10:96:f2:d9:07:4b:c4:48:5f:e9: 58:66:24:3e:d9:f2:62:b8:25:a4:ac:47:34:d2:15: d5:ab:ed:8f:3d:5a:42:ea:56:78:fb:a9:13:c1:56: 7d:0c:29:2f:d3:82:ed:30:4b:f5:22:37:f5:5a:a1: d9:fd:00:79:83:c7:dd:05:01:80:9d:e6:b4:30:c4: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:66:32:21:05:FB:97:B3:FE:7C:F9:C9:83:44:7E:59:4F:6E:00:AA X509v3 Authority Key Identifier: keyid:36:9B:3E:9B:7B:66:E8:F5:BB:97:9A:6E:2F:2E:7A:AC:F5:00:D3:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/Nps-m3tm6PW7l5puLy56rPUA0_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nps-m3tm6PW7l5puLy56rPUA0_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C8/C44C04528EC911EE9F8E447FC4F9AE02/CA5B7DA48ECA11EEA3901581C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.30.0/24 163.61.86.0/24 IPv6: 2001:df3:3240::/48 Signature Algorithm: sha256WithRSAEncryption 5c:39:e0:aa:2e:58:83:06:0e:66:52:b5:63:66:4b:79:a9:81: 4e:c5:15:d4:d3:6c:43:25:9d:4c:2f:6d:49:25:9e:17:44:4e: 63:18:ff:7d:09:37:6f:fd:eb:ad:af:c9:c4:44:e7:ed:3a:90: 01:45:89:6e:21:05:71:22:c4:0e:f3:66:43:2d:37:8d:be:e0: f2:6f:9e:44:56:37:41:6f:ee:3c:77:4e:a4:59:9e:a2:6f:1c: 47:fc:39:de:db:33:58:4d:ab:76:ca:8c:90:be:2c:67:ae:eb: 20:15:8d:ee:7c:7c:2b:83:bd:bf:0d:36:cc:1a:ae:a5:77:46: 25:5e:b9:fc:a3:7f:3c:f2:f2:47:49:d6:b9:7d:ca:5f:2a:6e: b2:13:87:96:07:05:f3:87:ef:09:1b:49:30:48:4d:2a:b1:3c: 31:5c:5f:ff:91:2f:74:fe:eb:31:c1:ce:39:33:68:9d:a7:9a: bf:05:c5:2a:d4:80:23:d8:09:3c:91:30:dc:a9:7f:55:86:c4: 52:50:4f:bd:5b:37:14:3b:ae:35:38:05:e3:e7:12:dc:52:a9: 31:de:89:2b:b2:fe:37:82:de:b1:b0:b0:f4:6c:7c:25:9e:fe: ea:e0:29:3b:c7:f3:4b:d8:5e:85:d5:48:13:03:90:7f:bc:34: c5:e3:6f:18 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzgxMTAvBgNVBAUTKDM2OUIzRTlCN0I2NkU4RjVCQjk3OUE2RTJGMkU3QUFD RjUwMEQzRjEwHhcNMjUxMjA5MDIxMDUzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3ODUyZC1mNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2Gtdpd9lhS3MRkNMVxpk+ZnRVZZdJr6UsPo6mOxk7BpsdY4hgvICGFffHWw E8Ht5qq9D04G0DkFIMSNEBDzs2KJkO9GF86fAbcOh9xCOE9dZtotmFhttigh3LOC r7v9rSZh+M1bK1aXAhLtIS+2iJQpv72SdCg5kWi8tf0idgsFIqyTbWFt8yCiR49V KjZqj1G/vEM5ve62KawqzlkTZgyXTOxV3lzjGG0PEI5SlXHbTiT5aHMUaBCW8tkH S8RIX+lYZiQ+2fJiuCWkrEc00hXVq+2PPVpC6lZ4+6kTwVZ9DCkv04LtMEv1Ijf1 WqHZ/QB5g8fdBQGAnea0MMQ7DwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFHxmMiEF +5ez/nz5yYNEfllPbgCqMB8GA1UdIwQYMBaAFDabPpt7Zuj1u5eabi8ueqz1ANPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOC9DNDRDMDQ1MjhF QzkxMUVFOUY4RTQ0N0ZDNEY5QUUwMi9OcHMtbTN0bTZQVzdsNXB1THk1NnJQVUEw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wcy1tM3RtNlBXN2w1cHVMeTU2clBVQTBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkI4QzgvQzQ0QzA0NTI4RUM5MTFFRTlGOEU0NDdGQzRGOUFFMDIvQ0E1QjdEQTQ4 RUNBMTFFRUEzOTAxNTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAAkMh4DBACjPVYwDwQCAAIwCQMHACABDfMyQDANBgkqhkiG 9w0BAQsFAAOCAQEAXDngqi5YgwYOZlK1Y2ZLeamBTsUV1NNsQyWdTC9tSSWeF0RO Yxj/fQk3b/3rra/JxETn7TqQAUWJbiEFcSLEDvNmQy03jb7g8m+eRFY3QW/uPHdO pFmeom8cR/w53tszWE2rdsqMkL4sZ67rIBWN7nx8K4O9vw02zBqupXdGJV65/KN/ PPLyR0nWuX3KXypushOHlgcF84fvCRtJMEhNKrE8MVxf/5EvdP7rMcHOOTNonaea vwXFKtSAI9gJPJEw3Kl/VYbEUlBPvVs3FDuuNTgF4+cS3FKpMd6JK7L+N4LesbCw 9Gx8JZ7+6uApO8fzS9hehdVIEwOQf7w0xeNvGA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:54:31 2025 by rpki-client