This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/FD88540EF5E311F0AB8204204D6F56BC.roa File: FD88540EF5E311F0AB8204204D6F56BC.roa (raw, json) Hash identifier: 9afs8tNluN+honO+1NuyXqJsKe1j49dlf661XCnaIf4= Subject key identifier: F3:AF:28:88:C0:71:BD:31:2C:49:FA:B7:37:D5:11:5B:1D:CE:A4:2A Certificate issuer: /CN=A91BF2DB/serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED Certificate serial: 25 Authority key identifier: CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/FD88540EF5E311F0AB8204204D6F56BC.roa Signing time: Tue 20 Jan 2026 09:49:15 +0000 ROA not before: Tue 20 Jan 2026 09:49:15 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137211 IP address blocks: 138.252.228.0/23 maxlen: 23 138.252.228.0/24 maxlen: 24 138.252.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2DB, serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED Validity Not Before: Jan 20 09:49:15 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=696f4f9a-b5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:dd:6a:49:9d:b7:c2:a4:23:60:53:5c:f5:1c: 6d:28:fb:47:73:4f:71:90:6c:a3:54:cd:c2:78:fb: 4d:df:26:b3:fe:3c:ec:76:00:70:41:fd:ee:d7:8a: f5:f1:ce:3c:22:f2:58:a9:6a:5d:28:47:ba:60:af: b7:ff:4f:98:76:5c:39:d9:59:6b:79:f5:91:d5:df: d7:1a:2f:dc:33:03:e7:8e:35:72:af:b1:fe:73:bd: 12:62:b8:cb:8f:2a:20:ed:0b:ee:a2:1c:1a:de:a8: f5:89:2b:9d:23:10:93:9a:ad:3e:22:e0:c8:ba:80: 40:ea:79:72:fc:fb:11:01:f8:92:0d:0d:03:72:dc: 66:3f:9b:68:23:34:95:34:04:f9:66:d8:97:63:23: c7:d5:3b:89:97:c8:4a:5f:b9:a3:c0:a2:bd:6c:b0: 45:75:18:86:3b:0d:cb:a5:52:61:71:57:60:47:4a: 31:1d:8c:63:dd:06:da:d8:35:ab:a0:82:5a:c7:7d: 7b:0e:26:be:6c:d7:70:4e:c5:a7:28:7d:0e:a8:27: 58:2e:85:7a:13:f4:2e:84:d5:3f:3a:8f:15:3d:08: 25:d9:83:50:d0:2e:71:e2:d6:12:1d:70:51:77:95: ab:c5:45:b2:c0:dd:84:65:2c:dc:9c:70:27:ee:57: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AF:28:88:C0:71:BD:31:2C:49:FA:B7:37:D5:11:5B:1D:CE:A4:2A X509v3 Authority Key Identifier: keyid:CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/FD88540EF5E311F0AB8204204D6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.228.0/23 Signature Algorithm: sha256WithRSAEncryption b5:9c:72:e7:56:f2:02:60:44:25:cf:19:8d:75:52:74:8f:43: 2a:1c:12:26:45:77:30:b7:a8:0a:e3:d3:56:6f:64:ac:1c:08: 26:95:f5:d5:9f:23:97:c6:f2:f5:60:5f:25:ba:8e:01:13:6a: b8:66:e9:1e:fa:86:b7:08:ec:1f:8f:ec:cb:0e:2a:6e:2c:ac: a3:15:a1:54:82:b4:b4:10:a8:e4:0a:b5:9a:03:02:65:e7:58: c6:f6:22:13:b9:87:19:44:ad:54:a7:20:9e:80:98:4d:30:6b: c2:1b:39:17:a1:71:42:fe:cb:cc:66:dd:a7:c4:77:55:66:97: 31:34:b4:dc:53:92:b1:85:bd:61:07:9a:4f:cd:26:1d:6d:85: 0b:57:fa:5c:30:70:81:3a:77:ee:78:f4:34:68:b4:81:fe:72: 97:90:53:05:85:fe:f6:eb:2d:42:f3:fb:21:61:dc:33:56:3c: f5:29:04:48:b3:9a:ab:91:06:9b:f1:14:48:52:c8:be:4c:aa: 97:2b:17:5c:0c:e4:78:d4:d8:0b:4e:46:cc:f0:ab:c4:64:23: ee:f3:87:34:08:7f:37:4d:4e:ea:03:03:ad:e8:2b:1a:e9:73: 86:1e:de:4a:71:92:cd:4f:8f:18:7e:cb:60:95:b5:8c:88:47: 5c:b2:46:1f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjJEQjExMC8GA1UEBRMoQ0YyMTVBQzkxMUNBQTUyMDY1QzdFQzRBQzc5NTc4MzUz ODJCRTNFRDAeFw0yNjAxMjAwOTQ5MTVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NmY0ZjlhLWI1YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDr3WpJnbfCpCNgU1z1HG0o+0dzT3GQbKNUzcJ4+03fJrP+POx2AHBB/e7XivXx zjwi8lipal0oR7pgr7f/T5h2XDnZWWt59ZHV39caL9wzA+eONXKvsf5zvRJiuMuP KiDtC+6iHBreqPWJK50jEJOarT4i4Mi6gEDqeXL8+xEB+JINDQNy3GY/m2gjNJU0 BPlm2JdjI8fVO4mXyEpfuaPAor1ssEV1GIY7DculUmFxV2BHSjEdjGPdBtrYNaug glrHfXsOJr5s13BOxacofQ6oJ1guhXoT9C6E1T86jxU9CCXZg1DQLnHi1hIdcFF3 lavFRbLA3YRlLNyccCfuVy4zAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU868oiMBx vTEsSfq3N9URWx3OpCowHwYDVR0jBBgwFoAUzyFayRHKpSBlx+xKx5V4NTgr4+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGMkRCLzBDQTc3RkQ2QzQz NTExRjA4MTM4RjA3REM0RjlBRTAyL3p5RmF5UkhLcFNCbHgteEt4NVY0TlRncjQt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenlGYXlSSEtwU0JseC14S3g1VjROVGdyNC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJEQi8wQ0E3N0ZENkM0MzUxMUYwODEzOEYwN0RDNEY5QUUwMi9GRDg4NTQwRUY1 RTMxMUYwQUI4MjA0MjA0RDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr85DANBgkqhkiG9w0BAQsFAAOCAQEAtZxy51byAmBEJc8Z jXVSdI9DKhwSJkV3MLeoCuPTVm9krBwIJpX11Z8jl8by9WBfJbqOARNquGbpHvqG twjsH4/syw4qbiysoxWhVIK0tBCo5Aq1mgMCZedYxvYiE7mHGUStVKcgnoCYTTBr whs5F6FxQv7LzGbdp8R3VWaXMTS03FOSsYW9YQeaT80mHW2FC1f6XDBwgTp37nj0 NGi0gf5yl5BTBYX+9ustQvP7IWHcM1Y89SkESLOaq5EGm/EUSFLIvkyqlysXXAzk eNTYC05GzPCrxGQj7vOHNAh/N01O6gMDregrGulzhh7eSnGSzU+PGH7LYJW1jIhH XLJGHw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:57:52 2026 by rpki-client