This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/3130A9B4681011EEB552C65BC4F9AE02.roa File: 3130A9B4681011EEB552C65BC4F9AE02.roa (raw, json) Hash identifier: SfgdNLe8TjsNAAHj/4mi3g/Uo1yjbeHu7qslr0iDVUw= Subject key identifier: D5:AF:90:44:36:EF:B2:48:00:71:5C:EA:30:AC:BA:E7:C2:EB:80:28 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A6A Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/3130A9B4681011EEB552C65BC4F9AE02.roa Signing time: Sat 08 Nov 2025 19:09:58 +0000 ROA not before: Sat 08 Nov 2025 19:09:58 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 64050 IP address blocks: 134.122.128.0/17 maxlen: 24 137.220.128.0/17 maxlen: 24 143.92.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2666 (0xa6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Nov 8 19:09:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690f9586-7ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:83:c0:28:d7:ab:e9:61:15:70:93:ed:f5:46: f0:a6:56:55:49:8d:f8:cd:15:e0:f9:c2:5b:91:b9: 88:35:25:b2:13:17:02:63:60:01:29:bb:a8:de:19: f2:71:58:75:43:b9:b8:fb:a1:17:00:7b:a3:f4:8c: a7:14:3c:d8:82:37:99:c3:5a:d3:43:95:70:2c:66: 06:72:61:8f:11:fc:57:63:82:6e:96:c9:62:c4:38: 20:4a:57:56:cd:03:c9:7a:ee:d8:86:c6:cf:38:24: f0:ac:07:5e:db:27:50:02:86:b1:de:71:82:f9:27: 66:a2:44:63:27:49:b0:1c:78:67:b6:98:4e:6f:25: 6c:c0:82:54:14:83:9e:a4:c4:91:61:9a:8e:78:29: 55:ff:5c:86:55:16:65:5f:4a:d8:ff:f2:c0:ca:e4: bb:f5:ac:be:a4:e6:5c:03:d9:a7:55:60:56:8f:65: 70:92:37:00:06:2d:92:0a:cb:0c:1f:9b:78:a3:2e: 9a:76:d4:32:c7:1f:39:95:6e:c2:f8:df:2b:a4:63: 02:04:3e:67:b4:f1:68:b6:e9:5d:aa:25:13:60:23: da:d2:43:14:43:f2:98:4c:e7:08:bc:84:5a:c9:75: 83:e5:d3:da:1c:29:e9:40:2d:cb:68:62:39:c7:0f: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AF:90:44:36:EF:B2:48:00:71:5C:EA:30:AC:BA:E7:C2:EB:80:28 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/3130A9B4681011EEB552C65BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 134.122.128.0/17 137.220.128.0/17 143.92.32.0/19 Signature Algorithm: sha256WithRSAEncryption 49:c1:db:f8:5b:23:4e:6b:9c:11:b2:64:13:4b:e9:1a:92:cd: 24:9a:03:53:72:f6:3e:69:2f:d2:0b:23:c1:d2:37:ad:39:6f: 84:83:1d:f9:e5:13:07:3c:a2:76:87:ee:79:08:14:9e:6b:2f: 2b:0b:1e:14:85:06:66:84:e6:0a:74:b3:a8:a8:2f:f8:3f:89: 8c:25:27:8a:c5:32:c1:c1:47:86:4e:8b:25:86:64:0b:18:86: ed:75:88:8d:6f:78:e6:e9:bf:ea:c0:70:63:d0:41:73:6a:1d: b8:31:be:32:6b:53:f2:d1:5d:96:53:0a:f3:67:e8:45:80:3f: 34:4c:aa:68:aa:9a:7b:e8:3b:c6:30:be:ee:94:0f:5f:8b:ff: c0:45:89:8b:7e:27:a3:5f:68:ba:07:27:8b:ab:4a:34:ad:a7: da:d7:90:4a:d4:4e:b5:de:be:3b:4d:26:03:54:fe:1c:39:e5: 65:89:31:bf:7c:cf:9c:7f:f9:77:1d:ae:2b:0e:1f:81:f5:65: 6c:d3:d8:d9:55:38:cf:36:7d:fb:4e:f7:05:5b:f9:3b:ae:84: 13:62:7d:5f:85:21:b0:69:a3:5b:be:72:75:14:2a:a2:5b:2e: e0:58:af:7e:ce:d5:cf:27:89:87:ce:6f:6d:e8:eb:17:f6:32: 5a:68:5a:9d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUxMTA4MTkwOTU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmOTU4Ni03ZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8oPAKNer6WEVcJPt9UbwplZVSY34zRXg+cJbkbmINSWyExcCY2ABKbuo3hny cVh1Q7m4+6EXAHuj9IynFDzYgjeZw1rTQ5VwLGYGcmGPEfxXY4JulslixDggSldW zQPJeu7YhsbPOCTwrAde2ydQAoax3nGC+SdmokRjJ0mwHHhntphObyVswIJUFIOe pMSRYZqOeClV/1yGVRZlX0rY//LAyuS79ay+pOZcA9mnVWBWj2VwkjcABi2SCssM H5t4oy6adtQyxx85lW7C+N8rpGMCBD5ntPFotuldqiUTYCPa0kMUQ/KYTOcIvIRa yXWD5dPaHCnpQC3LaGI5xw9ZPQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNWvkEQ2 77JIAHFc6jCsuufC64AoMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvMzEzMEE5QjQ2 ODEwMTFFRUI1NTJDNjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAeGeoADBAeJ3IADBAWPXCAwDQYJKoZIhvcNAQELBQADggEB AEnB2/hbI05rnBGyZBNL6RqSzSSaA1Ny9j5pL9ILI8HSN605b4SDHfnlEwc8onaH 7nkIFJ5rLysLHhSFBmaE5gp0s6ioL/g/iYwlJ4rFMsHBR4ZOiyWGZAsYhu11iI1v eObpv+rAcGPQQXNqHbgxvjJrU/LRXZZTCvNn6EWAPzRMqmiqmnvoO8Ywvu6UD1+L /8BFiYt+J6NfaLoHJ4urSjStp9rXkErUTrXevjtNJgNU/hw55WWJMb98z5x/+Xcd risOH4H1ZWzT2NlVOM82fftO9wVb+TuuhBNifV+FIbBpo1u+cnUUKqJbLuBYr37O 1c8niYfOb23o6xf2MlpoWp0= -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:16 2025 by rpki-client