This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/4A68B404EF5A11EEB09CEA53C4F9AE02.roa File: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (raw, json) Hash identifier: BAiJmhyO7qkPml01yhndNUigENcptBFhNprMefBmUts= Subject key identifier: 91:9A:F4:05:58:6D:5E:42:FB:E7:B6:84:A4:20:A8:CE:10:B1:7C:E7 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A66 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/4A68B404EF5A11EEB09CEA53C4F9AE02.roa Signing time: Sat 08 Nov 2025 19:09:55 +0000 ROA not before: Sat 08 Nov 2025 19:09:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 152194 IP address blocks: 134.122.128.0/17 maxlen: 24 137.220.128.0/17 maxlen: 24 143.92.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2662 (0xa66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Nov 8 19:09:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690f9583-e5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8e:12:85:ac:c9:ac:3d:52:9a:7e:04:2f:64: 8f:d2:7f:ef:f6:41:3c:a5:06:ac:b3:5d:c5:4b:70: 88:2f:f4:fb:f5:1b:f8:2d:5d:b3:f6:d7:bf:ab:14: 16:b7:6e:79:c1:7e:fc:f7:f9:f9:31:55:87:bf:b1: 96:3f:7a:78:e2:4f:06:5f:9b:86:99:b9:7d:78:91: e6:9a:0d:2b:b2:8a:5e:84:e6:9e:d9:ee:e3:4f:9c: 1e:1c:bb:09:0c:af:6e:c3:e5:01:06:14:a2:a1:e9: 84:8d:8a:0e:bf:50:10:0a:63:f6:92:a5:7a:40:d5: f7:73:24:ed:e8:ce:4e:95:54:77:da:b6:04:2d:d3: 00:d3:cf:f3:65:47:3d:39:15:13:8d:50:f1:e9:7d: 8c:b4:7e:de:de:7f:8b:af:f8:45:96:fa:5f:b1:88: 9e:2f:59:c8:54:bd:87:79:db:ff:98:f4:90:81:ab: 8f:49:0a:a0:ce:02:f5:71:53:62:06:cd:83:7a:48: 2b:e5:40:52:81:9a:ba:bc:1a:71:57:6f:ba:33:17: 9a:e5:d5:de:c6:76:3d:e8:6a:d3:4b:ef:3c:bf:2e: b8:6e:98:1b:9d:2e:2f:52:48:0c:73:ee:1c:b5:0a: 7a:92:e5:0d:b9:9e:95:f8:f9:fa:26:4d:5b:14:da: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9A:F4:05:58:6D:5E:42:FB:E7:B6:84:A4:20:A8:CE:10:B1:7C:E7 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/4A68B404EF5A11EEB09CEA53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 134.122.128.0/17 137.220.128.0/17 143.92.32.0/19 Signature Algorithm: sha256WithRSAEncryption 34:12:6d:f1:fc:b4:e1:b2:29:13:12:a0:ef:41:81:01:7e:29: 20:83:e3:6b:63:ee:7b:ee:12:6e:c1:53:c9:4b:98:cd:ad:5f: 54:42:a2:7b:ae:a2:a9:81:72:fb:22:19:30:57:40:6b:85:5f: db:cf:25:7c:46:43:cd:7b:e7:ee:ff:f4:a7:b0:34:01:eb:7c: 64:d8:b9:b6:2b:33:0c:76:ec:ee:3b:c2:94:28:27:31:4a:87: bc:1c:60:d2:17:42:e6:82:56:1c:8d:88:81:7f:16:77:bf:8b: 7d:0a:b5:08:03:58:be:73:ae:22:51:e6:40:61:91:7a:60:cf: 68:05:22:7b:1d:ec:ee:40:e4:d1:c9:02:a8:9a:03:c5:e8:d0: f7:bc:1b:4b:9a:c1:d9:98:44:d2:e9:0a:97:02:b9:8b:32:0d: df:03:fa:59:4a:8f:f7:db:29:54:0d:d2:59:fd:d5:31:b9:f5: 5c:e5:c3:0a:07:6c:37:27:e4:cc:ea:6d:83:d8:2f:0e:12:d8: 00:81:d0:1d:5c:54:46:3d:4b:9e:5a:83:16:8d:1a:d8:1d:78: 6a:db:c1:99:84:35:29:67:84:ff:82:5d:cb:1a:35:49:4c:76: c3:01:54:8b:28:a4:5d:c0:cc:93:a4:62:c8:ce:99:e4:49:a1: 69:6a:42:25 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUxMTA4MTkwOTU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmOTU4My1lNWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3o4ShazJrD1Smn4EL2SP0n/v9kE8pQass13FS3CIL/T79Rv4LV2z9te/qxQW t255wX789/n5MVWHv7GWP3p44k8GX5uGmbl9eJHmmg0rsopehOae2e7jT5weHLsJ DK9uw+UBBhSioemEjYoOv1AQCmP2kqV6QNX3cyTt6M5OlVR32rYELdMA08/zZUc9 ORUTjVDx6X2MtH7e3n+Lr/hFlvpfsYieL1nIVL2Hedv/mPSQgauPSQqgzgL1cVNi Bs2Dekgr5UBSgZq6vBpxV2+6Mxea5dXexnY96GrTS+88vy64bpgbnS4vUkgMc+4c tQp6kuUNuZ6V+Pn6Jk1bFNoQ6QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJGa9AVY bV5C++e2hKQgqM4QsXznMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvNEE2OEI0MDRF RjVBMTFFRUIwOUNFQTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAeGeoADBAeJ3IADBAWPXCAwDQYJKoZIhvcNAQELBQADggEB ADQSbfH8tOGyKRMSoO9BgQF+KSCD42tj7nvuEm7BU8lLmM2tX1RConuuoqmBcvsi GTBXQGuFX9vPJXxGQ8175+7/9KewNAHrfGTYubYrMwx27O47wpQoJzFKh7wcYNIX QuaCVhyNiIF/Fne/i30KtQgDWL5zriJR5kBhkXpgz2gFInsd7O5A5NHJAqiaA8Xo 0Pe8G0uawdmYRNLpCpcCuYsyDd8D+llKj/fbKVQN0ln91TG59VzlwwoHbDcn5Mzq bYPYLw4S2ACB0B1cVEY9S55agxaNGtgdeGrbwZmENSlnhP+CXcsaNUlMdsMBVIso pF3AzJOkYsjOmeRJoWlqQiU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:17 2025 by rpki-client