This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/CA761A36760A11EC8FB55C23C4F9AE02.roa File: CA761A36760A11EC8FB55C23C4F9AE02.roa (raw, json) Hash identifier: ETp781o8T+wZdwMPTqGeE3MpSkYl74AAxIyGewKtm10= Subject key identifier: 4B:AE:CA:81:93:2B:97:61:90:E6:F7:DB:AF:6A:BA:6C:67:9F:12:28 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0DFC Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/CA761A36760A11EC8FB55C23C4F9AE02.roa Signing time: Tue 18 Nov 2025 17:37:02 +0000 ROA not before: Tue 18 Nov 2025 17:37:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55448 IP address blocks: 27.50.4.0/23 maxlen: 24 27.50.6.0/23 maxlen: 24 202.52.56.0/23 maxlen: 23 202.52.56.0/24 maxlen: 24 202.52.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3580 (0xdfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Nov 18 17:37:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691caebe-0250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:65:51:3c:28:84:e1:ce:bf:72:f7:1e:ce: f6:5b:1a:7a:42:06:83:64:2d:87:d2:e7:2c:c8:0f: e0:d0:5f:a5:b6:c9:11:aa:60:66:18:c7:ac:a4:6e: 63:47:b6:ac:72:dc:d9:1d:f4:5a:44:11:5d:b7:e3: fb:db:e8:dd:a9:00:fa:35:f3:a0:e1:8e:f0:f3:03: 50:bc:f0:08:5c:91:78:1d:5e:3b:6e:05:27:d1:63: 5f:d9:a1:9e:b8:8b:24:73:b0:c8:d8:67:85:06:d7: 9c:02:9c:79:96:dd:b5:58:d4:28:d5:3c:7c:ab:69: bd:2e:bc:4c:c1:53:db:a0:c4:ef:22:29:0e:90:ae: d2:e2:ee:0c:35:53:e2:d9:c9:6f:57:ba:cb:d3:51: 40:cc:9b:19:6f:d3:08:f4:e5:fa:6d:a0:77:15:d6: 0e:97:74:44:14:e5:f4:f1:6c:62:38:e5:b0:0b:48: 05:9e:dc:9d:3a:8a:e6:c7:50:7d:9f:27:a2:5c:8d: 5b:8c:72:3f:32:00:5e:17:1d:fa:3a:2a:ad:e3:12: 7c:71:77:b1:23:4d:19:44:9f:2b:9d:5a:02:34:cd: c3:a0:67:20:3b:28:9e:42:a0:cf:f2:d3:ff:f1:a4: 4f:fd:57:73:99:1d:f2:2f:da:05:9e:8c:41:4e:77: 20:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AE:CA:81:93:2B:97:61:90:E6:F7:DB:AF:6A:BA:6C:67:9F:12:28 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/CA761A36760A11EC8FB55C23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.50.4.0/22 202.52.56.0/23 Signature Algorithm: sha256WithRSAEncryption 84:b7:2f:92:7c:47:4d:31:91:51:e2:e4:37:0c:a0:d8:c9:26: 94:a1:4b:1c:fc:28:60:e2:15:16:ad:6e:68:22:5c:a0:24:f7: 00:7e:fa:2e:05:1c:05:9c:8f:ae:00:68:97:72:e7:8f:a5:63: 88:c2:98:38:8e:e4:e4:d8:b7:96:c0:28:8e:93:20:f6:30:8c: 9e:fa:45:90:0c:03:f6:4a:fe:49:22:7c:7f:a1:94:78:7d:7e: f2:52:9c:ed:b5:df:3e:76:f3:fa:54:fb:e6:04:a1:57:8f:40: 95:5c:3c:e5:cb:01:54:02:92:e0:5f:7c:06:74:67:d0:e3:c1: 05:35:61:b5:87:6c:1e:35:91:8e:a8:b1:40:11:ec:ef:e7:e7: 72:2e:83:fa:72:5d:4f:85:fc:6f:75:6f:99:4d:07:42:32:13: 47:96:5b:2b:6c:65:ad:97:11:8b:c9:f1:d7:8d:69:76:0c:bb: f8:f5:4a:da:35:75:07:7b:88:36:a0:87:d3:8d:90:f0:d5:03: ab:db:59:ba:93:c7:ea:c4:c4:f2:52:28:04:0b:98:be:bd:89: cb:06:26:80:29:53:00:e1:fd:ab:e5:44:91:7d:cf:29:72:e8: c4:14:b3:a2:f2:e3:0b:43:07:85:48:5b:cb:da:9c:b2:4a:98: 60:bd:e6:82 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjUxMTE4MTczNzAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFjYWViZS0wMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhxlUTwohOHOv3L3Hs72Wxp6QgaDZC2H0ucsyA/g0F+ltskRqmBmGMespG5j R7asctzZHfRaRBFdt+P72+jdqQD6NfOg4Y7w8wNQvPAIXJF4HV47bgUn0WNf2aGe uIskc7DI2GeFBtecApx5lt21WNQo1Tx8q2m9LrxMwVPboMTvIikOkK7S4u4MNVPi 2clvV7rL01FAzJsZb9MI9OX6baB3FdYOl3REFOX08WxiOOWwC0gFntydOormx1B9 nyeiXI1bjHI/MgBeFx36Oiqt4xJ8cXexI00ZRJ8rnVoCNM3DoGcgOyieQqDP8tP/ 8aRP/VdzmR3yL9oFnoxBTncgywIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEuuyoGT K5dhkOb3269qumxnnxIoMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjRCRDMvMEU0RDg2N0FDNjhEMTFFOTlCNDUyRDEzQzRGOUFFMDIvQ0E3NjFBMzY3 NjBBMTFFQzhGQjU1QzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIbMgQDBAHKNDgwDQYJKoZIhvcNAQELBQADggEBAIS3L5J8 R00xkVHi5DcMoNjJJpShSxz8KGDiFRatbmgiXKAk9wB++i4FHAWcj64AaJdy54+l Y4jCmDiO5OTYt5bAKI6TIPYwjJ76RZAMA/ZK/kkifH+hlHh9fvJSnO213z528/pU ++YEoVePQJVcPOXLAVQCkuBffAZ0Z9DjwQU1YbWHbB41kY6osUAR7O/n53Iug/py XU+F/G91b5lNB0IyE0eWWytsZa2XEYvJ8deNaXYMu/j1Sto1dQd7iDagh9ONkPDV A6vbWbqTx+rExPJSKAQLmL69icsGJoApUwDh/avlRJF9zyly6MQUs6Ly4wtDB4VI W8vanLJKmGC95oI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:45:26 2025 by rpki-client