This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/0FE42DACE16811F0AD117D783A6F56BC.roa File: 0FE42DACE16811F0AD117D783A6F56BC.roa (raw, json) Hash identifier: JsUVmDenlNRs0tfS9whRc7Jzv4Yo+z4hCHKowYgJ6Tk= Subject key identifier: 95:0E:69:84:24:86:C7:92:25:F4:96:2F:69:B1:FB:94:73:6E:2D:2C Certificate issuer: /CN=A914BE8E/serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6 Certificate serial: 0C Authority key identifier: DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/0FE42DACE16811F0AD117D783A6F56BC.roa Signing time: Thu 25 Dec 2025 08:02:31 +0000 ROA not before: Thu 25 Dec 2025 08:02:31 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133851 IP address blocks: 138.252.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 07:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE8E, serialNumber=DB0887E25CC0D0CF7688DB5DDDF4196532CD47A6 Validity Not Before: Dec 25 08:02:31 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694cef97-aa89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:24:a2:a7:a9:03:f3:b1:fd:e6:d5:c7:9a: b3:43:ce:89:13:76:eb:7b:17:ec:fd:c2:d1:d4:22: fe:89:49:63:18:9e:d5:17:f4:79:93:3d:77:97:a1: 68:49:f7:fd:e4:ce:23:26:02:82:67:b7:ce:b0:d4: 45:ae:ff:33:9b:73:dd:19:1b:a1:f5:18:35:3c:e9: 95:80:74:df:44:4e:69:c5:4e:8c:20:4a:41:d4:b1: 35:0b:c7:0a:51:ba:7c:ae:5d:5d:2a:78:c3:fd:77: ba:9e:7e:80:ca:c0:ca:17:0a:ca:ca:dc:c0:5a:95: 94:f5:2c:a1:6f:d4:0e:8d:e6:59:37:fd:32:75:7e: 3a:45:f7:a2:6a:f7:1f:94:f1:52:fe:e4:ed:c7:2a: e0:13:d4:ce:4a:ef:53:1d:48:a8:bb:c3:c4:4b:f4: 76:92:21:79:be:00:36:af:db:bc:f2:f8:8e:89:00: 9e:30:13:9c:41:b7:50:e6:cd:b5:69:80:44:90:73: 6a:89:84:21:40:cc:c5:8f:b9:54:15:a7:0f:fc:fc: e0:ac:57:02:f2:ed:78:c3:13:16:42:4d:f6:3f:9a: 1d:6a:a2:f7:94:3e:d5:db:a2:6e:e7:30:b8:95:d3: 0c:2c:69:20:6b:aa:f4:01:12:1a:2b:d9:dc:5c:20: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0E:69:84:24:86:C7:92:25:F4:96:2F:69:B1:FB:94:73:6E:2D:2C X509v3 Authority Key Identifier: keyid:DB:08:87:E2:5C:C0:D0:CF:76:88:DB:5D:DD:F4:19:65:32:CD:47:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/2wiH4lzA0M92iNtd3fQZZTLNR6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2wiH4lzA0M92iNtd3fQZZTLNR6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE8E/49C77488E14611F09164E0A8716F56BC/0FE42DACE16811F0AD117D783A6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.220.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:ac:7c:57:67:06:09:53:7b:cd:06:9d:9b:05:b4:82:9a:9b: b5:ed:fb:e4:e0:93:20:45:72:5b:8c:eb:9a:a0:5f:82:c6:8f: 70:c5:97:2a:4a:d7:74:b7:dc:5b:86:ea:27:d6:4b:4b:f4:46: 85:37:46:63:60:bb:74:1c:f4:26:c9:55:8e:ce:05:dd:1f:0c: 5b:94:19:cb:7e:b5:4f:16:69:d9:d2:42:7d:79:b1:93:9c:84: a0:16:05:d4:dd:34:5b:5f:5a:13:7a:0e:71:d1:b0:ae:5b:7c: ee:be:6f:35:4e:73:73:c5:00:27:9c:16:cc:98:dd:df:d8:a3: 42:e5:1a:19:33:c2:c5:1b:61:2c:83:78:3c:11:21:d3:71:5c: 2e:4d:df:24:a2:98:ea:8d:af:ab:57:45:2a:80:dc:ca:1a:9d: a8:ff:26:c8:31:d8:27:e0:6a:52:13:b0:3a:33:c8:21:7e:2d: d7:19:06:d3:70:f6:ae:f1:1a:b0:c6:c5:05:e3:bb:02:d0:5a: 3f:1a:49:b8:88:de:a8:5a:ae:aa:67:7d:7a:58:14:5f:99:28: 2b:34:bb:12:90:f4:ea:53:d7:83:8b:37:bd:cd:a1:7e:36:9c: 96:27:a4:f9:6f:b3:b6:70:bb:4c:07:e7:f4:3d:56:ae:20:af: 35:80:9f:b8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE0 QkU4RTExMC8GA1UEBRMoREIwODg3RTI1Q0MwRDBDRjc2ODhEQjVERERGNDE5NjUz MkNENDdBNjAeFw0yNTEyMjUwODAyMzFaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NGNlZjk3LWFhODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUKiSip6kD87H95tXHmrNDzokTdut7F+z9wtHUIv6JSWMYntUX9HmTPXeXoWhJ 9/3kziMmAoJnt86w1EWu/zObc90ZG6H1GDU86ZWAdN9ETmnFTowgSkHUsTULxwpR unyuXV0qeMP9d7qefoDKwMoXCsrK3MBalZT1LKFv1A6N5lk3/TJ1fjpF96Jq9x+U 8VL+5O3HKuAT1M5K71MdSKi7w8RL9HaSIXm+ADav27zy+I6JAJ4wE5xBt1DmzbVp gESQc2qJhCFAzMWPuVQVpw/8/OCsVwLy7XjDExZCTfY/mh1qoveUPtXbom7nMLiV 0wwsaSBrqvQBEhor2dxcIGEVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlQ5phCSG x5Il9JYvabH7lHNuLSwwHwYDVR0jBBgwFoAU2wiH4lzA0M92iNtd3fQZZTLNR6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCRThFLzQ5Qzc3NDg4RTE0 NjExRjA5MTY0RTBBODcxNkY1NkJDLzJ3aUg0bHpBME05MmlOdGQzZlFaWlRMTlI2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMndpSDRsekEwTTkyaU50ZDNmUVpaVExOUjZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkU4RS80OUM3NzQ4OEUxNDYxMUYwOTE2NEUwQTg3MTZGNTZCQy8wRkU0MkRBQ0Ux NjgxMUYwQUQxMTdENzgzQTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr83DANBgkqhkiG9w0BAQsFAAOCAQEAC6x8V2cGCVN7zQad mwW0gpqbte375OCTIEVyW4zrmqBfgsaPcMWXKkrXdLfcW4bqJ9ZLS/RGhTdGY2C7 dBz0JslVjs4F3R8MW5QZy361TxZp2dJCfXmxk5yEoBYF1N00W19aE3oOcdGwrlt8 7r5vNU5zc8UAJ5wWzJjd39ijQuUaGTPCxRthLIN4PBEh03FcLk3fJKKY6o2vq1dF KoDcyhqdqP8myDHYJ+BqUhOwOjPIIX4t1xkG03D2rvEasMbFBeO7AtBaPxpJuIje qFquqmd9elgUX5koKzS7EpD06lPXg4s3vc2hfjacliek+W+ztnC7TAfn9D1WriCv NYCfuA== -----END CERTIFICATE-----Generated at Mon Dec 29 18:38:58 2025 by rpki-client