This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/3C2B0A98259911EFB9393E2EC4F9AE02.roa File: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (raw, json) Hash identifier: 7KfiMIrqCDMway6OtiafKLI6sq8wx9tSGpkCPK/N/Zw= Subject key identifier: E8:D4:04:69:29:48:75:5C:F5:16:AB:44:C3:79:E0:FA:64:24:CB:21 Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Certificate serial: 0191 Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/3C2B0A98259911EFB9393E2EC4F9AE02.roa Signing time: Mon 01 Dec 2025 02:30:19 +0000 ROA not before: Mon 01 Dec 2025 02:30:19 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138346 IP address blocks: 115.84.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Validity Not Before: Dec 1 02:30:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692cfdba-1a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:2c:b4:11:49:51:0f:fd:72:c3:a1:fc:16: bc:b5:07:ce:f5:45:f0:81:14:09:c9:5a:de:cb:15: 69:ee:93:ba:be:a1:84:53:89:84:e8:2e:cd:37:25: 75:5f:f1:28:44:f1:16:36:c1:7b:81:f2:e4:af:a7: 00:4f:a2:49:a2:57:eb:c3:cb:52:b0:52:e5:be:e8: d2:1f:cc:50:f2:7a:82:05:73:81:a4:43:ff:6b:af: 32:8a:75:97:f8:e4:36:4c:81:3d:63:bd:c7:83:75: d9:9a:ef:b5:ad:df:c9:df:57:8f:d4:f0:6e:fc:0b: 3a:19:b1:7a:f1:6f:18:3d:f6:92:f9:02:c9:2a:ba: fa:d0:56:1d:4e:15:05:ca:b4:81:9e:68:47:01:3f: fe:58:de:a6:62:ce:c9:27:ff:20:6c:c3:62:ee:c7: eb:f8:ef:74:b4:12:06:30:34:49:78:3a:af:3a:ef: 52:ce:55:f1:66:d6:34:28:4a:c5:ce:3d:a0:b7:73: cc:9e:fd:b8:da:8b:a5:e8:b4:fb:13:ca:68:22:3e: 0f:ee:03:7d:4c:78:ad:7d:e4:0b:bd:b0:5b:5a:bf: 1b:0d:79:3a:26:ae:dc:0d:71:97:af:c1:7a:61:6e: be:a4:a0:93:d5:d2:2c:03:5d:12:c5:8a:d4:f1:88: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D4:04:69:29:48:75:5C:F5:16:AB:44:C3:79:E0:FA:64:24:CB:21 X509v3 Authority Key Identifier: keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/3C2B0A98259911EFB9393E2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.84.168.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:01:7b:52:97:a2:b2:76:4a:13:07:5f:63:82:a2:61:27:72: fd:ee:b4:5b:77:d0:12:d5:71:96:e1:f8:61:ee:45:72:06:1a: 6d:e1:38:6c:ae:46:2c:f2:e1:e3:c3:ee:c3:c7:6e:c9:82:f8: 56:37:15:e4:92:a7:c6:01:89:a7:f7:36:44:af:63:99:22:b9: 59:70:e1:59:b5:31:d1:a9:52:99:47:18:0a:0f:14:6b:42:a3: 65:21:e5:9a:32:fd:f3:a1:e1:6c:2e:24:33:3e:fc:8b:6f:c2: 3c:98:ec:86:5f:63:d8:28:e4:14:4f:60:9d:97:75:b4:9a:ea: c9:76:7c:eb:51:4b:f0:3b:c2:7f:1b:5f:41:f5:b2:47:c2:48: a6:b8:67:cf:23:2c:cb:03:1a:c0:89:a7:43:14:2e:c8:26:c7: 04:3b:0a:a8:69:53:71:07:e6:43:ea:75:7c:6e:a9:1f:68:18: ae:da:cb:26:bb:5d:8d:31:67:fd:ab:7b:10:6d:7f:46:85:b4: 33:62:53:f7:44:64:b4:c1:2c:ec:c3:fb:ae:a1:c1:9f:1f:59: b8:0d:dd:a2:21:22:95:cb:b2:e6:4f:78:da:1b:d1:c5:1b:f9: b9:06:9c:fc:d0:10:64:9f:1a:48:60:2d:47:d5:d8:f3:e4:8c: be:10:c5:14 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2 MUZEQkVBMzIwHhcNMjUxMjAxMDIzMDE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJjZmRiYS0xYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwostBFJUQ/9csOh/Ba8tQfO9UXwgRQJyVreyxVp7pO6vqGEU4mE6C7NNyV1 X/EoRPEWNsF7gfLkr6cAT6JJolfrw8tSsFLlvujSH8xQ8nqCBXOBpEP/a68yinWX +OQ2TIE9Y73Hg3XZmu+1rd/J31eP1PBu/As6GbF68W8YPfaS+QLJKrr60FYdThUF yrSBnmhHAT/+WN6mYs7JJ/8gbMNi7sfr+O90tBIGMDRJeDqvOu9SzlXxZtY0KErF zj2gt3PMnv242oul6LT7E8poIj4P7gN9THitfeQLvbBbWr8bDXk6Jq7cDXGXr8F6 YW6+pKCT1dIsA10SxYrU8YgvpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOjUBGkp SHVc9RarRMN54PpkJMshMB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE1QUQvQjhCOTFDNDY3RTEyMTFFRTlDQjExRjNFQzRGOUFFMDIvM0MyQjBBOTgy NTk5MTFFRkI5MzkzRTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABzVKgwDQYJKoZIhvcNAQELBQADggEBABsBe1KXorJ2ShMH X2OComEncv3utFt30BLVcZbh+GHuRXIGGm3hOGyuRizy4ePD7sPHbsmC+FY3FeSS p8YBiaf3NkSvY5kiuVlw4Vm1MdGpUplHGAoPFGtCo2Uh5Zoy/fOh4WwuJDM+/Itv wjyY7IZfY9go5BRPYJ2XdbSa6sl2fOtRS/A7wn8bX0H1skfCSKa4Z88jLMsDGsCJ p0MULsgmxwQ7CqhpU3EH5kPqdXxuqR9oGK7ayya7XY0xZ/2rexBtf0aFtDNiU/dE ZLTBLOzD+66hwZ8fWbgN3aIhIpXLsuZPeNob0cUb+bkGnPzQEGSfGkhgLUfV2PPk jL4QxRQ= -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:47 2025 by rpki-client