This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/603EEC5ED0F811F0A0F75447C4F9AE02.roa File: 603EEC5ED0F811F0A0F75447C4F9AE02.roa (raw, json) Hash identifier: +CbZpgm+4vyB8fOl/TuKcq6Ycobk7P+jIHSjzgCG4eI= Subject key identifier: A0:CA:B7:35:3D:87:43:AF:01:4A:BF:9B:D1:9C:29:95:DD:48:31:11 Certificate issuer: /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Certificate serial: 20 Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/603EEC5ED0F811F0A0F75447C4F9AE02.roa Signing time: Thu 04 Dec 2025 10:02:43 +0000 ROA not before: Thu 04 Dec 2025 10:02:43 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141988 IP address blocks: 138.252.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C Validity Not Before: Dec 4 10:02:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69315c43-3554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d6:8a:4e:58:90:ec:7d:d7:6c:20:c6:bc:77: b8:ce:f1:38:61:bb:e6:8b:63:08:6d:12:35:64:4f: 9f:a0:0a:cb:6d:cc:70:2b:f8:c0:9c:33:c4:b9:44: 82:5f:59:74:a7:b8:c0:45:27:91:3b:a9:45:da:4e: f0:04:de:f6:a7:b7:65:a9:44:f8:b9:f2:0e:94:e7: 1c:9b:b6:c4:45:5f:94:6e:c3:1f:fd:32:27:f5:5b: 8c:07:64:5b:f3:24:56:dd:6c:95:c4:c1:d1:08:5c: f5:90:33:dc:05:f7:1d:2c:03:f4:71:38:63:8c:2d: 60:aa:69:4a:46:64:1b:7e:60:5a:9d:4a:d1:c0:1d: cd:69:57:a7:ef:ce:5d:b2:78:6b:99:81:5d:2e:9f: 2c:2c:84:1d:88:4b:3c:e0:fa:03:9e:fb:aa:10:4e: c3:1c:c0:ce:18:3c:df:40:ad:30:07:78:91:4e:70: d0:45:38:35:14:f9:40:ef:7e:b9:65:83:14:c8:df: d1:c1:ac:99:46:c3:4f:d9:2d:01:bf:b9:c5:b4:0e: 0e:03:0c:77:1d:6b:9b:f8:88:33:ea:07:f1:43:d6: 64:7c:f6:1e:c9:df:cf:97:1c:b6:55:7f:71:57:5e: 98:22:4f:c6:61:ef:bb:da:7a:0c:ac:91:c7:aa:86: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CA:B7:35:3D:87:43:AF:01:4A:BF:9B:D1:9C:29:95:DD:48:31:11 X509v3 Authority Key Identifier: keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/603EEC5ED0F811F0A0F75447C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.31.0/24 Signature Algorithm: sha256WithRSAEncryption 51:76:5c:e4:d3:3d:e0:b5:b8:50:b7:0a:c5:1f:6d:6f:9f:a3: 24:3c:30:7a:45:1d:0a:54:9d:50:8e:d4:68:cf:59:99:7c:e0: d4:48:bf:f9:c6:d7:95:4e:07:3d:f5:0d:aa:7b:c2:c8:a6:0a: b8:c0:b8:64:16:b0:2d:c8:90:8a:09:25:ac:09:35:5e:7a:53: 23:50:2f:31:e4:0b:ef:42:fb:cf:33:b9:1a:f9:56:d7:b3:b4: 4b:f5:70:d7:ea:25:32:91:43:23:7d:cd:d4:db:70:0a:a3:09: d9:a0:ff:f5:e7:44:65:4c:e7:f9:9b:fa:4c:2a:dc:06:8b:31: d1:a8:74:a3:1a:2a:40:b2:bf:13:1f:e8:59:8f:9c:3a:2e:af: d5:88:ef:ed:89:1d:f2:35:6a:26:0f:5f:d4:6e:75:c1:4c:a7: 22:d7:ad:0a:07:ac:c4:c4:22:6d:8f:27:cd:61:9f:70:87:57: eb:91:83:60:71:a1:48:ff:ab:f1:e0:df:87:93:88:fb:01:fc: a3:d6:5e:0f:eb:f7:aa:cc:e3:5f:9b:81:5d:70:79:85:f3:da: f8:86:9e:eb:16:4e:fd:44:54:3f:d3:e0:e6:0c:dc:46:2b:24: 22:b3:7d:ad:d4:3b:91:d3:13:e7:3f:d0:f3:8b:a2:5c:33:6c: df:87:43:2d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjlENzExMC8GA1UEBRMoRkE1QkFGNDZCN0NCMkM4RTM0NjM4M0FBODBDQjM5NkIy QjgxQzY0QzAeFw0yNTEyMDQxMDAyNDNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MzE1YzQzLTM1NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa1opOWJDsfddsIMa8d7jO8Thhu+aLYwhtEjVkT5+gCsttzHAr+MCcM8S5RIJf WXSnuMBFJ5E7qUXaTvAE3vant2WpRPi58g6U5xybtsRFX5Ruwx/9Mif1W4wHZFvz JFbdbJXEwdEIXPWQM9wF9x0sA/RxOGOMLWCqaUpGZBt+YFqdStHAHc1pV6fvzl2y eGuZgV0unywshB2ISzzg+gOe+6oQTsMcwM4YPN9ArTAHeJFOcNBFODUU+UDvfrll gxTI39HBrJlGw0/ZLQG/ucW0Dg4DDHcda5v4iDPqB/FD1mR89h7J38+XHLZVf3FX XpgiT8Zh77vaegyskceqhrYNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUoMq3NT2H Q68BSr+b0Zwpld1IMREwHwYDVR0jBBgwFoAU+luvRrfLLI40Y4OqgMs5ayuBxkww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOUQ3L0YyM0M0REYyQUQ3 MzExRjBBRjY1MDI1NEM0RjlBRTAyLy1sdXZScmZMTEk0MFk0T3FnTXM1YXl1Qnhr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWx1dlJyZkxMSTQwWTRPcWdNczVheXVCeGt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlENy9GMjNDNERGMkFENzMxMUYwQUY2NTAyNTRDNEY5QUUwMi82MDNFRUM1RUQw RjgxMUYwQTBGNzU0NDdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIr8HzANBgkqhkiG9w0BAQsFAAOCAQEAUXZc5NM94LW4ULcK xR9tb5+jJDwwekUdClSdUI7UaM9ZmXzg1Ei/+cbXlU4HPfUNqnvCyKYKuMC4ZBaw LciQigklrAk1XnpTI1AvMeQL70L7zzO5GvlW17O0S/Vw1+olMpFDI33N1NtwCqMJ 2aD/9edEZUzn+Zv6TCrcBosx0ah0oxoqQLK/Ex/oWY+cOi6v1Yjv7Ykd8jVqJg9f 1G51wUynItetCgesxMQibY8nzWGfcIdX65GDYHGhSP+r8eDfh5OI+wH8o9ZeD+v3 qszjX5uBXXB5hfPa+Iae6xZO/URUP9Pg5gzcRiskIrN9rdQ7kdMT5z/Q84uiXDNs 34dDLQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:13:41 2025 by rpki-client