This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/D0870A60C92211F0B4FDBA21C4F9AE02.roa File: D0870A60C92211F0B4FDBA21C4F9AE02.roa (raw, json) Hash identifier: Xxcnzz4UUYNFed71QsmRkeBUQBijpW8VtIcJqXdOAKk= Subject key identifier: 9B:BD:6F:D4:0C:C2:D8:1A:2A:53:00:BC:AD:45:21:A3:8A:F4:EA:8E Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Certificate serial: 03 Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/D0870A60C92211F0B4FDBA21C4F9AE02.roa Signing time: Mon 24 Nov 2025 10:46:21 +0000 ROA not before: Mon 24 Nov 2025 10:46:21 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 131090 IP address blocks: 2.57.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Validity Not Before: Nov 24 10:46:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6924377d-c544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:82:50:fb:64:fc:28:28:d3:09:43:34:05:31: ba:4d:32:3d:ce:46:84:9e:c3:75:06:f1:75:be:1e: 44:3b:2c:5a:cf:a0:73:0a:54:27:17:46:7d:ba:24: 28:2d:49:22:5d:48:8d:94:1c:e7:f5:72:29:6f:41: 2a:9f:83:aa:a0:db:30:8b:34:3a:b4:8c:ba:ce:c9: a7:1f:a9:9c:eb:47:25:7b:23:3d:cb:94:11:8d:fb: d9:9f:ea:6e:34:21:ab:d1:31:44:44:64:16:a5:b7: 0b:bf:3c:d0:87:97:df:4f:a9:ce:89:59:9f:f2:e0: cb:87:2d:e1:ae:82:2f:68:35:b8:95:23:32:27:fa: c4:23:ea:a1:54:ad:9c:4c:80:97:b5:c0:3e:90:03: 19:77:b2:c7:96:26:4f:74:35:78:09:f6:0a:b7:42: 44:f6:f1:66:81:69:95:43:9c:16:e0:32:db:1e:fb: 4b:ff:a2:15:f2:ce:7c:1b:7c:49:87:81:00:4c:08: 96:c6:aa:9d:12:b3:d0:a4:be:b7:b4:be:1a:a8:05: c1:f3:45:b7:cd:67:10:5d:b2:dc:5b:28:21:a0:08: 11:17:4e:64:84:0d:22:24:1c:ec:55:cf:d2:67:97: a3:4a:9b:9e:80:4a:46:59:15:fe:a5:fc:7f:e1:21: 49:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BD:6F:D4:0C:C2:D8:1A:2A:53:00:BC:AD:45:21:A3:8A:F4:EA:8E X509v3 Authority Key Identifier: keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/D0870A60C92211F0B4FDBA21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 2.57.124.0/22 Signature Algorithm: sha256WithRSAEncryption c2:21:0a:ec:ed:0b:bb:ff:f2:7d:fd:a4:4f:06:6c:9f:13:92: 3d:bc:7c:dd:03:69:b1:14:7b:15:c2:9f:60:21:36:97:11:1a: 1c:02:98:7a:66:77:2e:f3:e2:d2:c0:5a:52:de:b8:4a:22:36: f1:31:fe:7e:d7:57:47:2c:5a:30:74:11:a8:92:73:f4:36:af: 02:3d:00:fd:9d:18:57:0b:c1:60:0a:b7:c2:87:7e:ea:8f:5f: 7b:f0:83:0f:2d:ca:60:e7:0e:7c:22:d0:7b:d2:83:00:fc:3c: 66:4a:3e:df:df:bd:38:9c:ba:f4:96:2c:05:c1:36:89:c8:39: 7f:f6:f1:7d:37:47:4e:b5:1c:09:e7:63:b3:8f:e7:97:fd:14: 33:2a:14:25:0c:cc:b4:12:c8:11:44:c4:b4:dc:47:f7:69:cc: df:e9:db:54:05:5e:c9:cf:62:45:bc:c0:e7:bf:fc:1c:5b:27: 6e:31:d2:4a:b1:52:13:52:2d:8c:c4:14:ef:bb:14:86:78:69: a2:12:9c:2e:8a:1d:48:94:cd:62:c8:70:e2:d3:b1:aa:d0:01: 2d:8c:64:cc:6d:06:ef:8b:dd:a4:92:db:27:44:d7:00:d2:1c: 82:84:fb:c9:8f:5b:f6:41:17:35:9c:52:9e:cc:42:3d:38:aa: 5c:e2:86:2f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoQTI1Njk3NTEyQUEyNjUyN0NFNEFENjFBQ0MwOUExMEJF RDNDOTcxOTAeFw0yNTExMjQxMDQ2MjFaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQzNzdkLWM1NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfglD7ZPwoKNMJQzQFMbpNMj3ORoSew3UG8XW+HkQ7LFrPoHMKVCcXRn26JCgt SSJdSI2UHOf1cilvQSqfg6qg2zCLNDq0jLrOyacfqZzrRyV7Iz3LlBGN+9mf6m40 IavRMUREZBaltwu/PNCHl99Pqc6JWZ/y4MuHLeGugi9oNbiVIzIn+sQj6qFUrZxM gJe1wD6QAxl3sseWJk90NXgJ9gq3QkT28WaBaZVDnBbgMtse+0v/ohXyznwbfEmH gQBMCJbGqp0Ss9Ckvre0vhqoBcHzRbfNZxBdstxbKCGgCBEXTmSEDSIkHOxVz9Jn l6NKm56ASkZZFf6l/H/hIUlzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUm71v1AzC 2BoqUwC8rUUho4r06o4wHwYDVR0jBBgwFoAUolaXUSqiZSfOStYazAmhC+08lxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0UzOUQ4RTBDQzhF QzExRjA4Qzc4QUI0NUM0RjlBRTAyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvb2xhWFVTcWlaU2ZPU3RZYXpBbWhDLTA4bHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9FMzlEOEUwQ0M4RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9EMDg3MEE2MEM5 MjIxMUYwQjRGREJBMjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAgI5fDANBgkqhkiG9w0BAQsFAAOCAQEAwiEK7O0Lu//yff2k TwZsnxOSPbx83QNpsRR7FcKfYCE2lxEaHAKYemZ3LvPi0sBaUt64SiI28TH+ftdX RyxaMHQRqJJz9DavAj0A/Z0YVwvBYAq3wod+6o9fe/CDDy3KYOcOfCLQe9KDAPw8 Zko+39+9OJy69JYsBcE2icg5f/bxfTdHTrUcCedjs4/nl/0UMyoUJQzMtBLIEUTE tNxH92nM3+nbVAVeyc9iRbzA57/8HFsnbjHSSrFSE1ItjMQU77sUhnhpohKcLood SJTNYshw4tOxqtABLYxkzG0G74vdpJLbJ0TXANIcgoT7yY9b9kEXNZxSnsxCPTiq XOKGLw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:28:09 2025 by rpki-client