This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa File: A1FA022EC60C11F08F496250C4F9AE02.roa (raw, json) Hash identifier: QpiAf33FZgMhwGGuEHfq10s771b9Wjyenh0fOxv6MN8= Subject key identifier: 25:A7:B2:00:2F:6B:C2:37:6A:F5:0A:F0:E2:94:11:BF:E0:D3:0D:82 Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 56 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa Signing time: Fri 19 Dec 2025 19:35:52 +0000 ROA not before: Fri 19 Dec 2025 19:35:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 3491 IP address blocks: 72.57.128.0/22 maxlen: 24 72.57.132.0/23 maxlen: 24 72.57.134.0/24 maxlen: 24 72.57.238.0/23 maxlen: 24 72.57.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 19:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Dec 19 19:35:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6945a918-f80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7c:a6:22:2a:80:07:0e:67:8e:dd:ac:3b:a7: 3b:ba:7b:ce:db:f1:4a:b7:80:95:5b:da:13:c9:f5: a3:12:59:14:81:81:e3:49:fd:14:2e:e3:69:d3:4c: 52:dd:53:ab:68:94:94:e9:11:bb:30:43:50:ab:8d: 71:bf:76:cf:bf:9e:59:af:b3:4d:75:1f:73:ed:1d: 22:42:47:6b:53:08:07:c4:7d:45:89:c1:b7:bf:36: 45:d5:f4:b8:93:14:00:1e:a7:05:6a:ed:0b:f7:9e: 52:62:17:58:db:6e:0a:65:23:df:b4:15:92:b2:5d: d4:18:17:53:71:75:85:c6:30:d3:d2:83:27:89:67: f0:52:08:d5:b1:6b:30:64:ea:12:91:0f:d2:b6:2d: 59:8d:44:ec:ec:81:a2:38:0f:55:5f:82:c6:e5:d0: c3:92:a6:6c:38:54:48:33:36:53:58:3c:36:30:75: 51:1a:3a:9f:28:43:e6:69:ed:2f:49:a7:eb:64:4d: 04:02:3d:00:72:c0:6b:9f:a8:2f:15:bf:b8:be:68: 3d:89:b6:f2:cf:b0:02:3e:6e:d2:c3:42:47:1e:13: 0d:85:61:30:cc:07:d6:20:02:ce:79:a1:d3:49:f6: ae:56:5a:2c:fe:12:8a:60:f0:a6:63:09:2f:4d:2f: f8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A7:B2:00:2F:6B:C2:37:6A:F5:0A:F0:E2:94:11:BF:E0:D3:0D:82 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/A1FA022EC60C11F08F496250C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.57.128.0-72.57.134.255 72.57.238.0-72.57.255.255 Signature Algorithm: sha256WithRSAEncryption a1:08:41:47:0d:66:b0:b7:7c:66:c5:1e:2c:41:0e:80:63:4e: 78:40:ec:64:77:14:b2:9a:27:4f:2d:53:9d:31:6b:6b:45:25: b9:b5:23:9c:b1:da:f7:1a:c4:87:09:de:5a:01:38:90:a7:f8: 60:8a:27:e8:47:90:36:20:3a:dc:4a:b3:42:08:c5:08:e6:af: b3:7b:19:35:e7:a6:06:75:90:8d:60:90:b2:3d:ad:4f:5e:e0: 16:d2:80:c3:e6:23:fa:11:8b:d4:0a:b4:51:55:70:44:1a:c9: 54:76:a0:9e:15:6a:ca:ef:21:65:b6:1f:bb:bf:5e:f0:ed:74: f6:2a:90:10:54:cf:a3:53:ff:da:cc:52:92:6b:dd:1d:3a:41: e6:c2:68:1f:73:7d:eb:6e:56:8c:8b:93:e8:5d:be:19:97:e7: e8:f8:41:01:97:b8:72:90:58:20:7d:6a:19:13:52:49:4b:d6: 59:34:3c:cb:ef:21:cf:ee:54:f2:c6:e8:96:38:80:48:9a:7f: b4:0c:92:b3:f3:86:c0:6b:3e:a3:25:5b:3e:5b:ab:bb:9c:b3: 7a:ac:a9:84:a3:0d:c3:11:3b:1d:4a:f3:48:73:d2:c3:12:d2: 4c:3d:ca:05:c6:b6:80:65:ce:32:df:18:75:b0:5a:a2:f4:32: af:a5:46:3c -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0Q2MjE2RDU1Q0I1NEZDOUI1NzBGOUYyNUY5QUREMEYz NzY5QjRERTAeFw0yNTEyMTkxOTM1NTJaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NDVhOTE4LWY4MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxfKYiKoAHDmeO3aw7pzu6e87b8Uq3gJVb2hPJ9aMSWRSBgeNJ/RQu42nTTFLd U6tolJTpEbswQ1CrjXG/ds+/nlmvs011H3PtHSJCR2tTCAfEfUWJwbe/NkXV9LiT FAAepwVq7Qv3nlJiF1jbbgplI9+0FZKyXdQYF1NxdYXGMNPSgyeJZ/BSCNWxazBk 6hKRD9K2LVmNROzsgaI4D1Vfgsbl0MOSpmw4VEgzNlNYPDYwdVEaOp8oQ+Zp7S9J p+tkTQQCPQBywGufqC8Vv7i+aD2JtvLPsAI+btLDQkceEw2FYTDMB9YgAs55odNJ 9q5WWiz+Eopg8KZjCS9NL/hPAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUJaeyAC9r wjdq9Qrw4pQRv+DTDYIwHwYDVR0jBBgwFoAUPWIW1Vy1T8m1cPnyX5rdDzdptN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0M2MkIyOTg2OTM0 MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFdJVzFWeTFUOG0xY1BueVg1cmREemRwdE40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9DNjJCMjk4NjkzNDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9BMUZBMDIyRUM2 MEMxMUYwOEY0OTYyNTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwIQQCAAEwGzAMAwQHSDmAAwQASDmGMAsDBAFIOe4DAwFIODANBgkqhkiG9w0B AQsFAAOCAQEAoQhBRw1msLd8ZsUeLEEOgGNOeEDsZHcUsponTy1TnTFra0UlubUj nLHa9xrEhwneWgE4kKf4YIon6EeQNiA63EqzQgjFCOavs3sZNeemBnWQjWCQsj2t T17gFtKAw+Yj+hGL1Aq0UVVwRBrJVHagnhVqyu8hZbYfu79e8O109iqQEFTPo1P/ 2sxSkmvdHTpB5sJoH3N9625WjIuT6F2+GZfn6PhBAZe4cpBYIH1qGRNSSUvWWTQ8 y+8hz+5U8sboljiASJp/tAySs/OGwGs+oyVbPluru5yzeqyphKMNwxE7HUrzSHPS wxLSTD3KBca2gGXOMt8YdbBaovQyr6VGPA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:03:28 2025 by rpki-client