This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/C6B0BA0EC37D11F0A205F578C4F9AE02.roa File: C6B0BA0EC37D11F0A205F578C4F9AE02.roa (raw, json) Hash identifier: tub+Z8WVlBzcWOU2IfPK/efOM91HFbQq95uFwNMo7iQ= Subject key identifier: 7A:16:2E:AE:8D:C4:56:35:2A:4A:2E:36:B5:FC:43:6E:32:70:58:15 Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Certificate serial: 03 Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/C6B0BA0EC37D11F0A205F578C4F9AE02.roa Signing time: Mon 17 Nov 2025 06:22:22 +0000 ROA not before: Mon 17 Nov 2025 06:22:22 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154352 IP address blocks: 138.252.180.0/23 maxlen: 23 138.252.180.0/24 maxlen: 24 138.252.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Validity Not Before: Nov 17 06:22:22 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691abf1e-46a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d1:9d:55:33:a6:ae:c1:a2:79:25:a8:69:fe: 21:11:2f:9d:01:fe:02:6a:09:b4:98:dc:48:f4:9d: 2f:c9:99:2f:2d:60:34:4d:9b:78:cd:b7:5e:85:b7: 52:7d:6e:33:be:c4:50:47:16:f6:9d:02:9c:a8:6e: 2a:48:b7:d0:0e:4e:80:e4:59:e2:35:87:88:17:28: 12:40:87:06:a4:56:fd:4d:f9:b2:fe:a5:74:d5:6e: 40:79:17:f9:b8:da:7b:71:4d:fb:a3:60:3b:d0:b2: c6:10:1c:44:bd:40:de:43:f9:30:b6:6c:88:e0:8b: 30:d9:59:ce:a8:44:7e:db:be:70:83:01:44:ae:34: 9b:61:e8:cb:e3:a0:e5:3d:74:27:1b:f1:15:c1:d5: 18:64:49:47:64:d1:e8:2b:0f:7c:07:10:ac:19:3d: 95:f2:90:01:e6:ea:ec:56:7c:bc:31:65:23:ad:0f: 44:4f:c4:22:ff:e7:6c:bc:ce:a0:ee:66:00:28:d2: 85:c1:b2:a4:eb:3d:55:c1:5f:b5:04:c5:81:22:cf: 84:fd:8f:90:c3:04:1b:cc:ce:e9:a2:50:5d:44:b2: 68:a7:87:50:e1:46:dc:cb:4e:70:c1:cb:40:a0:12: 03:f4:e4:32:5e:8d:4a:e1:8e:94:ef:ea:d5:e0:ca: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:16:2E:AE:8D:C4:56:35:2A:4A:2E:36:B5:FC:43:6E:32:70:58:15 X509v3 Authority Key Identifier: keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/C6B0BA0EC37D11F0A205F578C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.180.0/23 Signature Algorithm: sha256WithRSAEncryption 44:ec:9b:32:53:af:33:f6:db:67:ec:4d:6c:bd:94:da:b7:52: 1c:66:b9:ab:48:65:12:ff:61:67:ae:ce:c5:61:ce:f1:d5:ad: 52:2d:db:3e:30:f5:25:e3:3d:13:7d:bf:ba:d7:7c:ad:35:39: 73:42:ab:21:35:e7:25:d2:a1:4b:5a:5e:b9:43:01:74:d6:6b: a4:97:ff:16:d6:1b:f2:2c:ed:36:12:e9:d3:5c:85:36:72:92: fd:d5:84:3e:c7:95:05:cb:1a:61:17:18:4b:b4:f2:2b:8f:8a: 04:df:55:ca:f0:73:77:d4:5d:8e:0d:c5:8a:36:a9:ad:53:f1: e8:f3:ab:f2:bf:b4:06:d2:8d:c1:07:48:5f:e5:5c:db:b7:07: 8e:4d:39:50:a5:1c:a9:6f:59:1c:5d:7f:3d:cd:b4:99:a3:6c: d5:2d:a9:c2:56:1d:22:f0:95:13:b4:4f:1e:9a:04:34:a0:59: 2c:09:3f:38:09:79:e2:66:37:c5:6b:65:d8:3e:b7:70:a2:cd: 23:47:7e:8f:d5:d7:aa:50:e8:41:a8:87:f2:fd:0a:8d:81:55: 94:df:51:4c:1e:ed:24:56:fb:ed:e5:3a:8b:42:3f:b5:10:ec: 50:47:c6:dd:51:39:d9:01:dd:f5:91:e6:31:bf:74:63:ea:f4: 8e:1d:f9:cf -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoQjA0REM3QUI0ODIzMzM4OTBDMjhBNzY1NzVEOEFERTY0 MjlDM0ZDQjAeFw0yNTExMTcwNjIyMjJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWFiZjFlLTQ2YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa0Z1VM6auwaJ5Jahp/iERL50B/gJqCbSY3Ej0nS/JmS8tYDRNm3jNt16Ft1J9 bjO+xFBHFvadApyobipIt9AOToDkWeI1h4gXKBJAhwakVv1N+bL+pXTVbkB5F/m4 2ntxTfujYDvQssYQHES9QN5D+TC2bIjgizDZWc6oRH7bvnCDAUSuNJth6MvjoOU9 dCcb8RXB1RhkSUdk0egrD3wHEKwZPZXykAHm6uxWfLwxZSOtD0RPxCL/52y8zqDu ZgAo0oXBsqTrPVXBX7UExYEiz4T9j5DDBBvMzumiUF1Esminh1DhRtzLTnDBy0Cg EgP05DJejUrhjpTv6tXgytoXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUehYuro3E VjUqSi42tfxDbjJwWBUwHwYDVR0jBBgwFoAUsE3Hq0gjM4kMKKdlddit5kKcP8sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzY4MkIzOUE2QzM3 QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc0UzSHEwZ2pNNGtNS0tkbGRkaXQ1a0tjUDhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkJBRi82ODJCMzlBNkMzN0MxMUYwOURDNUE1MzJDNEY5QUUwMi9DNkIwQkEwRUMz N0QxMUYwQTIwNUY1NzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8tDANBgkqhkiG9w0BAQsFAAOCAQEAROybMlOvM/bbZ+xN bL2U2rdSHGa5q0hlEv9hZ67OxWHO8dWtUi3bPjD1JeM9E32/utd8rTU5c0KrITXn JdKhS1peuUMBdNZrpJf/FtYb8iztNhLp01yFNnKS/dWEPseVBcsaYRcYS7TyK4+K BN9VyvBzd9Rdjg3FijaprVPx6POr8r+0BtKNwQdIX+Vc27cHjk05UKUcqW9ZHF1/ Pc20maNs1S2pwlYdIvCVE7RPHpoENKBZLAk/OAl54mY3xWtl2D63cKLNI0d+j9XX qlDoQaiH8v0KjYFVlN9RTB7tJFb77eU6i0I/tRDsUEfG3VE52QHd9ZHmMb90Y+r0 jh35zw== -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:45 2025 by rpki-client