This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/38D21898F49411F08DD0DDBA746F56BC.roa File: 38D21898F49411F08DD0DDBA746F56BC.roa (raw, json) Hash identifier: UHMgD5lMT0mCHHaHF/aA4/C0swF3F4LZyTvsNC7S3lo= Subject key identifier: 27:5D:30:0A:BB:43:E9:17:4C:2F:9B:A0:4C:44:CD:D0:E5:54:A0:B0 Certificate issuer: /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Certificate serial: 15 Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/38D21898F49411F08DD0DDBA746F56BC.roa Signing time: Sun 18 Jan 2026 17:36:29 +0000 ROA not before: Sun 18 Jan 2026 17:36:29 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133605 IP address blocks: 144.79.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 07:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Validity Not Before: Jan 18 17:36:29 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=696d1a1d-43ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:23:1c:12:b1:61:f2:6f:1f:36:4b:c3:00:f1: 8f:7f:8f:54:3f:79:cd:3c:f1:d0:9f:9e:e6:1b:58: 67:1a:c0:0a:99:2e:a8:99:da:fb:9b:f1:ae:75:6a: 91:76:d1:2a:23:69:86:18:f4:c2:af:e7:55:8b:8f: 65:2d:73:ab:d9:63:24:8c:ac:3f:45:d5:43:1a:88: 38:65:a9:64:26:65:0f:c4:88:22:9d:96:14:ad:44: 1d:92:56:9e:38:58:9c:b4:de:40:4c:25:75:16:96: 35:91:f5:0c:af:3d:81:c9:51:a6:ad:50:78:77:06: 19:99:d8:78:dd:cc:82:49:1b:96:0f:20:7e:6a:53: d6:71:26:56:6f:59:81:aa:d9:70:31:cd:e0:98:d8: 8c:dc:87:d0:7d:ee:3e:19:f8:47:2f:60:d4:1a:8c: 5a:db:11:c5:21:ad:e0:9c:79:f8:1a:a4:78:96:3b: 5c:57:dd:90:78:c2:5b:bb:3b:2e:09:d2:70:9a:06: 8f:74:94:7c:92:46:6e:9d:b7:77:e7:4c:1f:bc:5e: 38:29:5a:94:fd:c7:e1:46:60:a9:82:14:be:56:48: 09:f5:8f:cc:0f:fc:4c:13:f0:84:e7:7c:f1:b2:fa: a7:ed:ff:14:b5:03:f7:76:83:1e:e1:de:bd:fe:0c: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5D:30:0A:BB:43:E9:17:4C:2F:9B:A0:4C:44:CD:D0:E5:54:A0:B0 X509v3 Authority Key Identifier: keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/38D21898F49411F08DD0DDBA746F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.79.217.0/24 Signature Algorithm: sha256WithRSAEncryption 27:06:9c:c1:5c:0a:7d:d3:66:70:da:ff:8c:45:bb:5b:d4:b9: c7:a8:d8:5f:69:67:3a:a3:22:58:28:96:90:96:57:c3:8c:63: 8f:8b:20:92:6a:23:48:d3:b5:77:fa:ed:57:d4:d3:65:39:f8: cd:fb:b5:5e:9b:04:16:fb:c1:37:0e:31:99:87:b4:fa:a8:28: a1:3d:87:b4:c4:59:95:bc:86:a8:86:15:1f:53:41:8c:85:d7: 34:6e:5a:c3:dc:84:19:bb:ff:45:a7:00:b8:50:70:fa:31:a6: 5f:d4:fe:ec:a2:41:4c:ab:b1:98:e7:94:99:2b:96:ea:74:f4: b0:bd:5f:1f:fd:a2:02:ed:19:94:e8:66:cf:df:a2:1f:bd:3e: 10:46:01:59:4c:4d:73:f4:9d:2e:cd:d9:85:05:a0:f8:b7:63: 44:29:7e:24:f0:a2:de:0f:e0:7b:57:bb:27:1d:9c:a4:c6:86: c6:9f:47:d7:71:02:db:b5:ce:bb:5d:e1:7c:8c:f8:04:0c:ce: 12:c6:b0:93:c0:9e:f7:75:a2:25:96:59:9f:30:cf:c3:f0:33: c3:7e:50:8c:f9:11:31:fc:4b:c3:2c:54:a1:e2:6d:6a:64:1f: e6:0b:c6:f8:f6:c2:5e:bf:69:02:c8:6d:fb:e4:a0:c8:c0:03: e2:4c:d1:08 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE RTMzNDExMC8GA1UEBRMoQUQwNTMyQzZBODZENEEyMzFEMDBBRTUxRkFEODI4RjZB MkI2QUE4QjAeFw0yNjAxMTgxNzM2MjlaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NmQxYTFkLTQzY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUIxwSsWHybx82S8MA8Y9/j1Q/ec088dCfnuYbWGcawAqZLqiZ2vub8a51apF2 0SojaYYY9MKv51WLj2Utc6vZYySMrD9F1UMaiDhlqWQmZQ/EiCKdlhStRB2SVp44 WJy03kBMJXUWljWR9QyvPYHJUaatUHh3BhmZ2HjdzIJJG5YPIH5qU9ZxJlZvWYGq 2XAxzeCY2Izch9B97j4Z+EcvYNQajFrbEcUhreCcefgapHiWO1xX3ZB4wlu7Oy4J 0nCaBo90lHySRm6dt3fnTB+8XjgpWpT9x+FGYKmCFL5WSAn1j8wP/EwT8ITnfPGy +qft/xS1A/d2gx7h3r3+DCzhAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJ10wCrtD 6RdML5ugTETN0OVUoLAwHwYDVR0jBBgwFoAUrQUyxqhtSiMdAK5R+tgo9qK2qosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0JDNUI0QkJFRTU3 OTExRjA4MzZFRUFBMTQxNkY1NkJDL3JRVXl4cWh0U2lNZEFLNVItdGdvOXFLMnFv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclFVeXhxaHRTaU1kQUs1Ui10Z285cUsycW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTMzNC9CQzVCNEJCRUU1NzkxMUYwODM2RUVBQTE0MTZGNTZCQy8zOEQyMTg5OEY0 OTQxMUYwOEREMEREQkE3NDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJBP2TANBgkqhkiG9w0BAQsFAAOCAQEAJwacwVwKfdNmcNr/ jEW7W9S5x6jYX2lnOqMiWCiWkJZXw4xjj4sgkmojSNO1d/rtV9TTZTn4zfu1XpsE FvvBNw4xmYe0+qgooT2HtMRZlbyGqIYVH1NBjIXXNG5aw9yEGbv/RacAuFBw+jGm X9T+7KJBTKuxmOeUmSuW6nT0sL1fH/2iAu0ZlOhmz9+iH70+EEYBWUxNc/SdLs3Z hQWg+LdjRCl+JPCi3g/ge1e7Jx2cpMaGxp9H13EC27XOu13hfIz4BAzOEsawk8Ce 93WiJZZZnzDPw/Azw35QjPkRMfxLwyxUoeJtamQf5gvG+PbCXr9pAsht++SgyMAD 4kzRCA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:06 2026 by rpki-client