This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/97B11C3CD29411F09264510FC4F9AE02.roa File: 97B11C3CD29411F09264510FC4F9AE02.roa (raw, json) Hash identifier: pdybPXi6LLtTiEGOZPN+WKH3MiV9PGstPF045DEs300= Subject key identifier: 21:48:45:71:01:38:56:C2:54:29:D5:3D:BE:C2:22:E7:31:D4:B6:61 Certificate issuer: /CN=A91E9B39/serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954 Certificate serial: 02 Authority key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/97B11C3CD29411F09264510FC4F9AE02.roa Signing time: Sat 06 Dec 2025 11:13:29 +0000 ROA not before: Sat 06 Dec 2025 11:13:29 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135147 IP address blocks: 138.252.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954 Validity Not Before: Dec 6 11:13:29 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69340fd9-d0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:06:70:71:b3:1c:c8:a9:96:87:97:97:63: 64:42:cf:01:f0:92:d8:23:f8:f2:84:fd:26:b6:74: c5:fc:cb:15:4a:e6:9c:48:42:f5:10:c0:c9:d2:43: b2:7c:44:51:bb:07:de:8e:1f:3c:ca:63:1a:11:57: c0:a2:2a:52:c3:1f:86:ea:f3:66:43:58:99:08:32: 17:da:c3:1e:c3:a2:fd:5a:5c:ca:f2:5e:4e:53:81: 08:87:22:75:55:61:9c:87:af:b7:81:b8:42:0d:9c: b8:46:92:b0:ad:1b:29:3b:37:d7:1f:49:c1:06:19: df:3c:a1:2b:56:02:a3:f9:3a:0c:73:c1:12:d5:cf: 26:c0:a6:ea:cc:6a:f6:00:0e:e9:9e:4a:52:3e:6f: 81:bf:f1:17:c8:f9:f6:de:52:d5:f5:2d:18:05:60: 1e:d3:73:7b:a6:fa:d8:87:43:8d:e5:45:a2:06:15: e8:8f:9f:27:b5:0a:19:5a:d5:79:53:c5:d1:00:29: 6e:b8:b0:b9:ca:f8:13:ff:d2:dd:08:e0:c8:d5:e7: ae:02:bf:bf:05:3f:8c:8c:19:ce:40:7b:3e:00:db: cf:52:06:ee:6e:5a:ad:a4:30:b3:ad:ea:47:1f:6f: 96:9a:bc:63:0d:70:01:66:e1:d6:c3:48:a6:58:ce: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:48:45:71:01:38:56:C2:54:29:D5:3D:BE:C2:22:E7:31:D4:B6:61 X509v3 Authority Key Identifier: keyid:0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/97B11C3CD29411F09264510FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.94.0/24 Signature Algorithm: sha256WithRSAEncryption 38:52:61:c6:e6:32:20:8b:f1:e4:24:a1:a8:91:05:28:92:66: 66:ac:21:fd:63:bc:90:46:20:bf:bb:65:ad:c8:6f:1a:44:8b: 53:38:17:cd:74:11:4d:72:68:05:37:75:92:4a:58:2f:af:cf: d9:f9:10:f8:7c:c7:08:9d:16:be:20:d5:26:2f:6f:19:6f:8b: 6c:77:c3:6c:81:93:ed:3b:76:47:cb:a9:58:cc:ce:b9:73:32: 60:17:81:eb:f7:d6:25:2b:26:40:5c:f8:ed:8b:3e:d1:14:88: aa:61:38:84:e2:a2:67:6c:a4:2d:7f:cf:e1:3a:db:24:e8:20: 6c:49:c6:98:14:56:32:05:2a:f3:ed:5d:af:7e:af:88:f6:69: cd:46:38:23:d0:e6:e3:43:9c:66:16:fa:61:6f:9e:de:25:c7: b6:69:75:22:dc:69:d8:85:73:d6:ff:57:67:c7:fc:0f:93:75: 58:8a:e0:6c:a5:8a:57:02:a4:51:64:53:5e:11:70:f0:47:7b: 90:66:0c:e9:f4:4f:65:29:72:7e:41:a1:56:c8:73:1e:cc:b5: 89:20:2b:b8:8a:ce:e5:36:2d:09:fa:c8:6e:d0:57:fd:76:df: 13:a0:1d:f3:c2:a6:6e:46:dc:98:d6:18:a2:7f:ff:43:99:77: 80:1a:81:59 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUIzOTExMC8GA1UEBRMoMEIwRTRBNEVBQUQxNTBBM0Y2M0U2MTFCMDQ4NDMxMEZF NUZBRjk1NDAeFw0yNTEyMDYxMTEzMjlaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MzQwZmQ5LWQwZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAOwZwcbMcyKmWh5eXY2RCzwHwktgj+PKE/Sa2dMX8yxVK5pxIQvUQwMnSQ7J8 RFG7B96OHzzKYxoRV8CiKlLDH4bq82ZDWJkIMhfawx7Dov1aXMryXk5TgQiHInVV YZyHr7eBuEINnLhGkrCtGyk7N9cfScEGGd88oStWAqP5OgxzwRLVzybApurMavYA DumeSlI+b4G/8RfI+fbeUtX1LRgFYB7Tc3um+tiHQ43lRaIGFeiPnye1Chla1XlT xdEAKW64sLnK+BP/0t0I4MjV564Cv78FP4yMGc5Aez4A289SBu5uWq2kMLOt6kcf b5aavGMNcAFm4dbDSKZYziufAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUIUhFcQE4 VsJUKdU9vsIi5zHUtmEwHwYDVR0jBBgwFoAUCw5KTqrRUKP2PmEbBIQxD+X6+VQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QjM5LzUxQUY5RjY2RDI5 MzExRjA5Qzg2NUQ3N0M0RjlBRTAyL0N3NUtUcXJSVUtQMlBtRWJCSVF4RC1YNi1W US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3c1S1RxclJVS1AyUG1FYkJJUXhELVg2LVZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUIzOS81MUFGOUY2NkQyOTMxMUYwOUM4NjVENzdDNEY5QUUwMi85N0IxMUMzQ0Qy OTQxMUYwOTI2NDUxMEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIr8XjANBgkqhkiG9w0BAQsFAAOCAQEAOFJhxuYyIIvx5CSh qJEFKJJmZqwh/WO8kEYgv7tlrchvGkSLUzgXzXQRTXJoBTd1kkpYL6/P2fkQ+HzH CJ0WviDVJi9vGW+LbHfDbIGT7Tt2R8upWMzOuXMyYBeB6/fWJSsmQFz47Ys+0RSI qmE4hOKiZ2ykLX/P4TrbJOggbEnGmBRWMgUq8+1dr36viPZpzUY4I9Dm40OcZhb6 YW+e3iXHtml1Itxp2IVz1v9XZ8f8D5N1WIrgbKWKVwKkUWRTXhFw8Ed7kGYM6fRP ZSlyfkGhVshzHsy1iSAruIrO5TYtCfrIbtBX/XbfE6Ad88KmbkbcmNYYon//Q5l3 gBqBWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 02:20:51 2025 by rpki-client