This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4C5D09F0C62B11F0869A2726C4F9AE02.roa File: 4C5D09F0C62B11F0869A2726C4F9AE02.roa (raw, json) Hash identifier: 1M3k8Yl2U4HldPYa3iww9qZn/b09vWmt8zJytr7BANM= Subject key identifier: 80:CE:39:AE:6D:78:62:D7:41:B1:25:6B:20:41:76:47:B2:B2:7F:64 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0748 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4C5D09F0C62B11F0869A2726C4F9AE02.roa Signing time: Wed 17 Dec 2025 10:07:50 +0000 ROA not before: Wed 17 Dec 2025 10:07:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154339 IP address blocks: 138.252.132.0/23 maxlen: 23 138.252.132.0/24 maxlen: 24 138.252.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Dec 17 10:07:50 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=694280f6-8406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4c:28:87:12:0a:90:de:b8:15:42:76:4d:6e: 08:f6:e2:6f:89:8c:46:1a:10:04:bc:e3:34:85:09: a9:d3:46:cf:8e:9b:dd:a3:f2:68:20:c1:e0:b9:ee: ba:4b:b3:f6:66:0c:1d:96:e7:b8:0d:90:74:04:3b: 13:a8:09:48:11:e5:31:c8:96:05:14:f5:63:57:8a: ef:39:6f:f3:3f:60:2e:5f:03:d7:73:8b:12:83:56: 0e:b2:79:d9:a1:6f:cd:64:99:7a:04:bb:75:9c:04: e3:65:6a:f0:aa:a1:ee:23:d1:5a:d5:a5:12:a5:7b: 15:55:17:ef:0e:82:61:22:77:1e:03:71:67:40:4f: 23:c7:99:15:52:0c:de:0c:b6:ad:d8:50:80:be:22: 24:b8:a1:9b:b0:61:ae:5a:2d:76:7f:08:f5:39:ba: 75:8c:3f:a6:d0:b0:b2:6c:91:16:61:29:10:da:f0: 86:fe:47:a6:f0:ff:3d:26:97:80:c8:bf:31:8a:27: a0:05:02:d2:cf:5f:b7:f4:5a:dc:c0:46:04:3e:22: 27:15:74:a9:c4:c4:31:e8:bd:d7:d4:33:f6:d3:07: 82:44:ba:58:91:85:fd:96:6d:cb:8c:a0:96:27:a6: f4:56:bd:40:c7:98:57:e1:9a:99:c2:ca:f7:bb:2f: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CE:39:AE:6D:78:62:D7:41:B1:25:6B:20:41:76:47:B2:B2:7F:64 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4C5D09F0C62B11F0869A2726C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.132.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:f9:54:71:dd:96:74:a6:6d:bc:c1:b4:d3:30:91:39:ca:a5: 16:ad:90:1c:d7:2b:f1:24:13:5e:1d:e3:ba:bb:f1:94:9e:90: b0:e6:9b:06:9f:3a:f7:66:2b:aa:82:5e:b1:47:87:04:1b:6d: 46:74:1f:8e:71:4b:61:03:4a:51:dd:52:d3:3e:a0:ad:89:71: 82:14:4b:fb:1d:14:eb:3a:5b:79:69:9f:59:08:bc:ac:ef:f3: b6:c5:80:8d:fe:70:3c:e5:f9:61:c5:67:34:55:6e:ee:ec:e6: e0:72:60:fb:41:bd:49:30:cc:cd:da:75:79:4f:14:01:45:8e: 89:7b:3c:c5:a0:61:ed:c0:15:7d:9b:1b:13:08:5e:b4:dc:5a: 0b:0e:e6:dc:a7:72:c7:be:a5:ce:7f:8b:5e:08:de:0e:63:56: 05:3d:87:48:8b:fe:c6:0b:08:57:af:b5:68:48:a4:2b:bc:ac: 00:d4:d3:88:8d:39:18:ab:b8:05:7e:6b:82:d2:51:10:cb:f4: d7:54:a9:e4:64:3c:7f:cf:b2:9e:f8:9e:1a:12:43:57:b2:48: aa:2c:7a:46:07:30:70:1d:f2:3e:ce:b8:33:33:3c:83:2b:26: 3c:b5:f4:41:43:19:cb:72:db:ab:cd:2c:67:2e:25:66:76:fe: ac:a5:de:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMjE3MTAwNzUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyODBmNi04NDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UwohxIKkN64FUJ2TW4I9uJviYxGGhAEvOM0hQmp00bPjpvdo/JoIMHgue66 S7P2Zgwdlue4DZB0BDsTqAlIEeUxyJYFFPVjV4rvOW/zP2AuXwPXc4sSg1YOsnnZ oW/NZJl6BLt1nATjZWrwqqHuI9Fa1aUSpXsVVRfvDoJhInceA3FnQE8jx5kVUgze DLat2FCAviIkuKGbsGGuWi12fwj1Obp1jD+m0LCybJEWYSkQ2vCG/kem8P89JpeA yL8xiiegBQLSz1+39FrcwEYEPiInFXSpxMQx6L3X1DP20weCRLpYkYX9lm3LjKCW J6b0Vr1Ax5hX4ZqZwsr3uy/jAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIDOOa5t eGLXQbElayBBdkeysn9kMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNEM1RDA5RjBD NjJCMTFGMDg2OUEyNzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGK/IQwDQYJKoZIhvcNAQELBQADggEBAHr5VHHdlnSmbbzB tNMwkTnKpRatkBzXK/EkE14d47q78ZSekLDmmwafOvdmK6qCXrFHhwQbbUZ0H45x S2EDSlHdUtM+oK2JcYIUS/sdFOs6W3lpn1kIvKzv87bFgI3+cDzl+WHFZzRVbu7s 5uByYPtBvUkwzM3adXlPFAFFjol7PMWgYe3AFX2bGxMIXrTcWgsO5tyncse+pc5/ i14I3g5jVgU9h0iL/sYLCFevtWhIpCu8rADU04iNORiruAV+a4LSURDL9NdUqeRk PH/Psp74nhoSQ1eySKosekYHMHAd8j7OuDMzPIMrJjy19EFDGcty26vNLGcuJWZ2 /qyl3uk= -----END CERTIFICATE-----Generated at Sat Dec 20 21:43:48 2025 by rpki-client