This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/8E6CF9C8E59911E98D355932C4F9AE02.roa File: 8E6CF9C8E59911E98D355932C4F9AE02.roa (raw, json) Hash identifier: u3hqsVF2IxROae06RgQqau4TwcmQ2hfIoS0ycS2ZYYk= Subject key identifier: 7B:58:2A:89:73:2C:F4:88:A5:55:90:A2:20:B0:9B:84:D6:87:A9:00 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 138C Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/8E6CF9C8E59911E98D355932C4F9AE02.roa Signing time: Sat 20 Dec 2025 17:14:36 +0000 ROA not before: Sat 20 Dec 2025 17:14:36 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139702 IP address blocks: 2403:cfc0:1015::/48 maxlen: 48 2403:cfc0:101c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5004 (0x138c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 20 17:14:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6946d97c-20c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9a:2b:60:2a:41:2b:3f:53:64:03:d0:8d:b1: 05:1c:9d:7d:4f:e6:54:c4:b7:d1:72:90:65:18:71: 5b:98:f9:d6:ea:75:c7:81:d0:97:82:a0:e5:4d:71: ab:90:6c:b3:dd:cf:8c:67:06:87:48:42:3f:8a:65: 99:af:64:90:29:fe:9f:9c:fb:65:31:1f:87:db:89: 5b:a9:a3:21:f8:5c:e7:92:a8:74:2a:ed:69:38:bf: 80:f2:da:1d:dc:9e:b3:fe:3a:b6:93:3a:4a:e5:c0: 60:6f:b9:f5:39:66:77:4c:5f:df:6f:79:b5:9a:5a: ec:30:a2:b3:2a:53:2a:3b:9c:c1:33:0a:20:33:2d: 16:4e:be:9e:6a:03:a8:3d:a6:dd:6e:4c:a0:b2:18: 00:db:0f:b3:b1:aa:f0:ee:c9:b0:e2:3f:22:37:ec: d9:cd:e6:e5:46:19:dd:45:41:69:d3:56:d0:2f:db: 2a:b0:cc:aa:48:30:03:93:bd:d1:50:5f:1a:b4:fe: 93:ec:c9:32:9d:64:ca:fc:f0:6c:cf:97:5e:6c:62: 2a:91:58:39:bf:58:a2:6e:a1:3a:c4:9c:1f:3c:2c: ca:8f:b9:75:ce:5a:6c:81:3e:5c:79:5a:c8:6a:7a: 64:ab:54:a3:a3:36:7a:b2:9b:80:8a:da:5e:98:0f: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:58:2A:89:73:2C:F4:88:A5:55:90:A2:20:B0:9B:84:D6:87:A9:00 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/8E6CF9C8E59911E98D355932C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:1015::/48 2403:cfc0:101c::/48 Signature Algorithm: sha256WithRSAEncryption 3a:a8:91:e3:f0:a7:2c:40:f8:b0:5c:d0:1a:1c:6b:31:c4:9c: b8:b6:8c:28:8b:52:e9:63:b2:e3:72:86:64:1a:96:05:06:08: ba:cf:30:7e:aa:96:18:e3:c1:26:c2:4c:ae:54:db:fd:7f:53: c4:2d:80:06:e8:7d:91:93:0f:ed:32:7d:2d:e3:ec:a0:61:98: 6d:30:52:a1:e2:91:ed:07:1a:0c:f3:eb:eb:26:53:3c:af:39: 4f:5d:b6:8d:e9:6e:c4:fb:ea:bb:09:f3:51:3e:36:ec:f0:bc: af:64:84:45:7d:6f:cd:e6:e0:41:5f:b9:35:ff:55:d7:19:06: 0c:23:da:20:4d:1b:c7:35:71:ba:fb:bd:3f:42:9f:c4:fd:20: 34:f4:5c:5a:a0:a2:13:58:25:d4:e8:d6:d7:a7:e7:02:eb:f4: b5:95:d4:f7:86:06:77:d5:92:e4:27:6e:88:14:0d:3f:1f:e4: eb:dd:d8:7b:e9:e0:ce:bb:8a:c9:5c:0c:06:98:20:70:7b:0e: 54:91:2a:c8:f1:e9:8a:d1:ab:d8:3a:1f:13:34:2e:19:fa:2f: ef:46:df:b7:54:11:f3:4f:bf:a2:fd:3c:41:d4:20:f8:c8:1c: 9c:5b:b5:17:12:c6:a7:8d:c2:a3:eb:91:ba:20:47:62:3d:91: a4:66:8c:d9 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICE4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjUxMjIwMTcxNDM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ2ZDk3Yy0yMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZorYCpBKz9TZAPQjbEFHJ19T+ZUxLfRcpBlGHFbmPnW6nXHgdCXgqDlTXGr kGyz3c+MZwaHSEI/imWZr2SQKf6fnPtlMR+H24lbqaMh+Fznkqh0Ku1pOL+A8tod 3J6z/jq2kzpK5cBgb7n1OWZ3TF/fb3m1mlrsMKKzKlMqO5zBMwogMy0WTr6eagOo PabdbkygshgA2w+zsarw7smw4j8iN+zZzeblRhndRUFp01bQL9sqsMyqSDADk73R UF8atP6T7MkynWTK/PBsz5debGIqkVg5v1iibqE6xJwfPCzKj7l1zlpsgT5ceVrI anpkq1SjozZ6spuAitpemA8ZcwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHtYKolz LPSIpVWQoiCwm4TWh6kAMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvOEU2Q0Y5QzhF NTk5MTFFOThEMzU1OTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkA8/AEBUDBwAkA8/AEBwwDQYJKoZIhvcNAQELBQADggEB ADqokePwpyxA+LBc0BocazHEnLi2jCiLUuljsuNyhmQalgUGCLrPMH6qlhjjwSbC TK5U2/1/U8QtgAbofZGTD+0yfS3j7KBhmG0wUqHike0HGgzz6+smUzyvOU9dto3p bsT76rsJ81E+NuzwvK9khEV9b83m4EFfuTX/VdcZBgwj2iBNG8c1cbr7vT9Cn8T9 IDT0XFqgohNYJdTo1ten5wLr9LWV1PeGBnfVkuQnbogUDT8f5Ovd2Hvp4M67islc DAaYIHB7DlSRKsjx6YrRq9g6HxM0Lhn6L+9G37dUEfNPv6L9PEHUIPjIHJxbtRcS xqeNwqPrkbogR2I9kaRmjNk= -----END CERTIFICATE-----Generated at Wed Dec 24 11:14:32 2025 by rpki-client