This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/B374CCF4764F11EFA343104DC4F9AE02.roa File: B374CCF4764F11EFA343104DC4F9AE02.roa (raw, json) Hash identifier: D8epG3RbH6PIZsRmwRm9X6xHLsgomayBZPYyoKFX7xI= Subject key identifier: B2:AA:9F:02:24:9D:7D:CB:FD:9C:42:09:CD:60:E1:0A:2B:67:2B:87 Certificate issuer: /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921 Certificate serial: 0154 Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/B374CCF4764F11EFA343104DC4F9AE02.roa Signing time: Tue 02 Dec 2025 23:58:50 +0000 ROA not before: Tue 02 Dec 2025 23:58:50 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45248 IP address blocks: 85.204.253.0/24 maxlen: 24 89.39.91.0/24 maxlen: 24 89.47.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921 Validity Not Before: Dec 2 23:58:50 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692f7d3a-a75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:1a:3e:db:9b:a5:12:03:0c:34:95:31:cf: 78:3c:69:d2:6b:5b:4a:eb:33:f6:d6:f6:4d:15:9f: 41:f3:63:2a:20:eb:9f:8f:76:bc:e6:ac:20:31:7a: 29:76:3b:88:98:10:73:23:e4:2e:a9:d4:56:60:3c: 59:93:39:ce:5c:2a:20:d9:37:b2:3a:6b:dd:33:be: 23:71:bc:62:46:d2:da:cc:72:8e:61:9e:b9:fb:7d: 60:9f:cd:b2:8e:c2:c9:ad:13:ea:b2:e7:13:cc:44: c2:bd:7a:3f:6b:c2:2b:20:59:f9:5d:58:0e:1b:35: 0a:2a:ce:0c:f8:55:92:33:1a:25:79:70:16:c1:31: 65:52:28:98:b9:e7:a6:7b:ab:07:87:ec:51:4a:f6: e2:03:53:74:85:b3:7d:f3:c7:89:f4:ca:8a:c9:a3: ff:f9:59:1d:dc:2a:b5:cc:51:e8:9e:53:84:5d:0f: ce:4b:db:02:18:7d:46:1a:34:4b:db:bf:11:e0:19: 68:84:c3:3e:9a:85:6d:07:92:eb:7a:24:ea:54:b9: 3a:d4:61:27:5a:6e:cb:b8:de:75:9a:c9:a2:36:46: f6:cb:54:98:18:3c:6f:6b:90:f7:02:5d:7b:dd:60: ff:0d:60:a1:17:5f:15:4b:16:b2:f6:6a:fe:c3:cb: 19:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AA:9F:02:24:9D:7D:CB:FD:9C:42:09:CD:60:E1:0A:2B:67:2B:87 X509v3 Authority Key Identifier: keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/B374CCF4764F11EFA343104DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 85.204.253.0/24 89.39.91.0/24 89.47.94.0/24 Signature Algorithm: sha256WithRSAEncryption b1:86:fa:2c:2f:f2:9e:50:c0:3f:60:26:77:60:65:db:e2:80: 84:a3:f0:27:32:c1:f4:66:11:19:ad:8e:2a:8c:59:6e:c0:a0: 23:fc:ee:19:85:8b:97:f0:99:fd:e8:51:fe:87:15:0b:28:35: 21:62:f9:75:21:f8:12:1f:fe:c1:d9:de:2f:1a:7e:6e:38:d8: d2:f4:99:cf:37:7b:7f:ab:f2:b1:de:fa:ee:bf:4a:6c:4a:8f: 81:ea:c3:df:4a:79:2e:20:bd:51:15:43:98:5e:55:58:ba:f0: 5a:b2:56:3a:35:4f:ee:64:30:a2:66:c2:61:d7:26:cf:ac:d8: 8a:bb:ee:8b:2a:bd:82:7b:64:5a:18:f3:a8:98:69:49:ee:98: 9a:29:c5:5d:78:05:08:00:99:eb:7e:ca:82:32:c0:27:6d:d4: b2:59:c2:01:f6:f0:b2:d8:67:9f:ed:9d:3d:32:f6:a4:e9:3f: e9:08:cd:de:cd:49:e0:e7:28:49:8c:f3:a6:77:eb:be:1e:1b: 13:5f:44:13:87:85:24:18:b4:9d:fe:61:a5:1c:1d:c0:db:bc: e7:f0:f6:ae:c7:1e:ac:aa:67:26:71:74:c3:39:8a:df:74:46: 05:ec:14:5f:28:c9:3a:65:fc:8c:7e:29:4f:12:fd:46:12:24: c4:65:84:7e -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDdERTYwN0M0NjE1RDdBMDFGQkRENEE4NkFENTQ1OTQw MUE3NTk5MjEwHhcNMjUxMjAyMjM1ODUwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmN2QzYS1hNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFMaPtubpRIDDDSVMc94PGnSa1tK6zP21vZNFZ9B82MqIOufj3a85qwgMXop djuImBBzI+QuqdRWYDxZkznOXCog2TeyOmvdM74jcbxiRtLazHKOYZ65+31gn82y jsLJrRPqsucTzETCvXo/a8IrIFn5XVgOGzUKKs4M+FWSMxoleXAWwTFlUiiYueem e6sHh+xRSvbiA1N0hbN988eJ9MqKyaP/+Vkd3Cq1zFHonlOEXQ/OS9sCGH1GGjRL 278R4BlohMM+moVtB5LreiTqVLk61GEnWm7LuN51msmiNkb2y1SYGDxva5D3Al17 3WD/DWChF18VSxay9mr+w8sZdQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLKqnwIk nX3L/ZxCCc1g4QorZyuHMB8GA1UdIwQYMBaAFH3mB8RhXXoB+91Khq1UWUAadZkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS9FN0M0RjlERUY2 MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9mZVlIeEdGZGVnSDczVXFHclZSWlFCcDFt U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2ZlWUh4R0ZkZWdINzNVcUdyVlJaUUJwMW1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvRTdDNEY5REVGNjI1MTFFRThEQUQ4RTM1QzRGOUFFMDIvQjM3NENDRjQ3 NjRGMTFFRkEzNDMxMDREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABVzP0DBABZJ1sDBABZL14wDQYJKoZIhvcNAQELBQADggEB ALGG+iwv8p5QwD9gJndgZdvigISj8CcywfRmERmtjiqMWW7AoCP87hmFi5fwmf3o Uf6HFQsoNSFi+XUh+BIf/sHZ3i8afm442NL0mc83e3+r8rHe+u6/SmxKj4Hqw99K eS4gvVEVQ5heVVi68FqyVjo1T+5kMKJmwmHXJs+s2Iq77osqvYJ7ZFoY86iYaUnu mJopxV14BQgAmet+yoIywCdt1LJZwgH28LLYZ5/tnT0y9qTpP+kIzd7NSeDnKEmM 86Z3674eGxNfRBOHhSQYtJ3+YaUcHcDbvOfw9q7HHqyqZyZxdMM5it90RgXsFF8o yTpl/Ix+KU8S/UYSJMRlhH4= -----END CERTIFICATE-----Generated at Sun Dec 7 12:43:20 2025 by rpki-client