This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/353545B8CFF811F0ACBFF23FC4F9AE02.roa File: 353545B8CFF811F0ACBFF23FC4F9AE02.roa (raw, json) Hash identifier: F/Xspa1oiAx+UvYGSaKeSZ6agSyKCFAjbehfFchf1to= Subject key identifier: AF:BC:20:CF:17:78:F9:05:30:7F:F3:40:DD:6E:6F:F3:CD:C4:56:F8 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 072F Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/353545B8CFF811F0ACBFF23FC4F9AE02.roa Signing time: Wed 03 Dec 2025 03:29:00 +0000 ROA not before: Wed 03 Dec 2025 03:29:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154388 IP address blocks: 138.252.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Dec 3 03:29:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=692fae7c-0f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:b0:98:a2:24:70:a4:44:8f:13:ce:95:b7: 0b:6e:94:15:03:ba:78:83:f3:b2:2d:c7:8e:a6:aa: fa:4d:23:35:c1:90:8e:45:80:02:64:65:2f:26:7e: fa:54:5e:46:75:f6:a8:ad:6b:5a:b7:ec:58:2a:15: f4:2e:f4:05:e4:bb:5f:7e:14:65:78:4d:bb:b7:d7: 21:c4:58:39:ce:47:dc:8a:e3:b1:15:bb:94:74:c4: 55:88:21:4d:9e:57:ab:0e:87:24:b5:f1:cb:c2:bd: 15:bf:ba:fa:0b:a3:b0:86:6d:15:88:6b:54:d8:c5: 89:8f:a3:fd:51:bb:fa:c5:9d:f4:b2:7a:56:a6:0c: 20:9b:4d:50:54:3d:b5:56:44:86:0b:a8:b5:f3:cf: 8b:5e:7b:62:1c:bd:40:6b:14:6e:b7:57:f0:ec:6c: 82:b4:77:7a:4c:60:40:8f:98:b5:b2:ba:00:b1:8d: 88:60:0f:9e:d3:ed:90:09:ef:83:df:14:91:c0:a5: 0b:a3:21:a3:79:8c:d5:68:b4:2c:91:92:6d:ab:9a: 52:7f:9f:87:d5:28:4a:06:21:f5:dc:a0:18:e4:03: 13:4d:d6:4d:b0:8e:21:bc:2b:e5:de:98:49:2c:b0: 27:9f:4d:c4:d6:39:85:d2:24:97:e9:f6:26:bc:d9: 38:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BC:20:CF:17:78:F9:05:30:7F:F3:40:DD:6E:6F:F3:CD:C4:56:F8 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/353545B8CFF811F0ACBFF23FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.244.0/23 Signature Algorithm: sha256WithRSAEncryption b4:3f:4a:28:2b:69:f3:50:ad:1c:fe:20:4c:0a:27:f1:f3:e7: f2:1b:8a:07:b2:a9:f1:10:37:bd:48:2b:4a:01:87:3d:60:4a: 30:79:b5:1f:d9:2e:87:33:0b:22:9e:3b:6f:69:82:ea:bd:01: 71:c8:62:15:19:bd:a6:38:ab:55:65:da:e8:25:bd:66:25:c8: d8:84:1b:e4:f6:fc:cf:79:9d:6d:d3:bd:d4:ec:6f:f8:52:93: 07:77:ad:9e:b6:74:82:67:79:ea:bc:d2:f0:55:6c:b2:4d:c5: 09:21:31:4d:c5:ec:65:18:f9:00:3f:26:8e:5e:52:c7:95:9b: 60:01:44:e1:c2:6b:c9:64:70:5b:29:f6:41:ab:20:9d:6f:e1: 78:5a:f9:30:e0:f3:7e:7c:eb:a4:3e:b5:e9:cc:3c:33:bd:88: 01:86:3c:f3:ab:40:4c:ee:52:5d:1b:8f:de:80:c1:81:04:32: ec:f1:11:84:a1:6f:b5:27:e8:1f:4a:87:80:98:12:60:88:6c: b1:dd:16:49:a1:d0:13:b8:cc:5a:7e:28:77:34:7c:75:df:0a: 38:34:88:f8:ca:64:ff:d0:93:f0:f8:31:2c:bd:ab:42:cf:04: 92:d6:a2:b6:0a:08:f7:b9:fb:84:57:b3:f4:b2:a7:58:a3:5f: d9:4d:0f:0a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMjAzMDMyOTAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmYWU3Yy0wZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fywmKIkcKREjxPOlbcLbpQVA7p4g/OyLceOpqr6TSM1wZCORYACZGUvJn76 VF5GdfaorWtat+xYKhX0LvQF5LtffhRleE27t9chxFg5zkfciuOxFbuUdMRViCFN nlerDocktfHLwr0Vv7r6C6Owhm0ViGtU2MWJj6P9Ubv6xZ30snpWpgwgm01QVD21 VkSGC6i188+LXntiHL1AaxRut1fw7GyCtHd6TGBAj5i1sroAsY2IYA+e0+2QCe+D 3xSRwKULoyGjeYzVaLQskZJtq5pSf5+H1ShKBiH13KAY5AMTTdZNsI4hvCvl3phJ LLAnn03E1jmF0iSX6fYmvNk4VQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK+8IM8X ePkFMH/zQN1ub/PNxFb4MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMzUzNTQ1QjhD RkY4MTFGMEFDQkZGMjNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGK/PQwDQYJKoZIhvcNAQELBQADggEBALQ/SigrafNQrRz+ IEwKJ/Hz5/IbigeyqfEQN71IK0oBhz1gSjB5tR/ZLoczCyKeO29pguq9AXHIYhUZ vaY4q1Vl2uglvWYlyNiEG+T2/M95nW3TvdTsb/hSkwd3rZ62dIJneeq80vBVbLJN xQkhMU3F7GUY+QA/Jo5eUseVm2ABROHCa8lkcFsp9kGrIJ1v4Xha+TDg835866Q+ tenMPDO9iAGGPPOrQEzuUl0bj96AwYEEMuzxEYShb7Un6B9Kh4CYEmCIbLHdFkmh 0BO4zFp+KHc0fHXfCjg0iPjKZP/Qk/D4MSy9q0LPBJLWorYKCPe5+4RXs/Syp1ij X9lNDwo= -----END CERTIFICATE-----Generated at Sun Dec 7 00:26:53 2025 by rpki-client