This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/49B14A284A5B11F0BB8BCD26C4F9AE02.roa File: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (raw, json) Hash identifier: z4R5as/wY1NXJnurtifYAAgszDyIwiQjjqeZ9ks0TAI= Subject key identifier: AC:BE:B8:69:EE:5B:EE:41:65:B2:05:E1:BC:62:E7:9D:75:33:25:44 Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Certificate serial: 67 Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/49B14A284A5B11F0BB8BCD26C4F9AE02.roa Signing time: Sun 21 Dec 2025 06:25:58 +0000 ROA not before: Sun 21 Dec 2025 06:25:58 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 38722 IP address blocks: 2001:df3:1b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Validity Not Before: Dec 21 06:25:58 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=694792f6-a2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:c5:f1:9c:ad:18:f7:ab:6d:7e:7a:85:55: e2:06:f4:d1:6e:35:6e:10:9d:ba:0c:6a:1a:00:72: c9:80:93:e6:9d:b7:a1:6a:b1:47:01:83:4b:86:57: 87:1e:56:c6:e7:97:41:81:c1:c1:c4:61:09:96:44: a1:9a:4a:ce:1f:48:5d:1d:95:88:78:f5:cd:77:ee: a6:a0:df:05:d4:97:09:27:d2:9c:67:70:27:99:3c: 28:9b:9b:b0:b5:ec:bc:60:01:06:21:74:40:21:16: 8a:ef:f4:5d:7a:a0:e3:32:c2:f9:dc:d8:52:87:55: d5:96:a6:a0:2e:67:48:03:14:eb:e5:0c:68:a7:a6: d2:d9:c7:e6:78:06:ef:c9:58:da:f4:a1:74:56:fc: fa:9e:06:db:a5:c7:82:1b:15:d9:06:f3:ab:cf:eb: c6:41:14:64:91:2c:c1:89:da:2a:89:92:29:32:81: cf:95:13:68:55:5d:5f:7f:e5:76:f0:f2:af:01:d8: 53:13:cd:33:47:91:fd:d7:c3:7d:9c:07:c0:49:c2: ef:27:db:03:96:1e:ec:08:84:28:f0:a4:19:00:1d: b3:de:ff:bd:10:f6:80:fa:78:88:bd:7d:73:78:56: 9d:19:d0:65:82:5d:4a:73:98:5d:50:77:4f:8b:aa: e2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BE:B8:69:EE:5B:EE:41:65:B2:05:E1:BC:62:E7:9D:75:33:25:44 X509v3 Authority Key Identifier: keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/49B14A284A5B11F0BB8BCD26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:1b80::/48 Signature Algorithm: sha256WithRSAEncryption 90:28:0c:dc:2e:0e:98:44:73:03:5e:8c:ed:31:a4:c6:81:dd: 7e:2d:eb:5b:ac:df:d3:f8:9a:cf:17:e4:a7:ce:f6:29:65:d1: 6a:11:91:b9:e1:c4:b4:01:9c:73:c0:8a:70:fa:8a:9e:f5:cb: c7:dc:bb:c3:23:37:4f:7b:9a:cb:83:b3:78:c4:81:79:e3:d4: 09:84:5f:80:00:f9:7d:f9:bb:07:49:01:2a:6e:dd:71:3f:70: f1:db:93:b4:d7:ad:09:e9:48:d3:57:7c:f3:da:93:70:64:38: b6:a8:6f:1b:d3:81:0a:38:13:19:8e:72:8f:b1:69:39:f4:1e: fe:95:9d:bf:6e:9f:f1:69:a9:8c:e4:ad:bb:e6:46:49:b6:d7: 26:6f:c3:0f:99:8b:54:b6:dd:de:58:e5:e3:4d:a7:b4:70:ed: 54:e9:06:2f:eb:43:20:27:9c:80:34:6d:8c:5a:5a:62:4b:1d: 28:74:4a:52:88:b4:57:30:1d:4e:da:ac:2c:f6:af:ec:3f:cb: 41:88:3f:50:64:c5:9e:a7:99:15:0f:ca:ba:9d:2b:d0:6c:74: b2:86:24:38:d8:3a:7e:6d:53:c2:11:d2:91:98:07:e8:5f:da: d0:7c:67:9d:af:92:55:b0:5f:c4:6a:9b:d2:af:28:89:36:70: 5a:0a:ef:a8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEz NUEyNzExMC8GA1UEBRMoOTI4RThBQTgwRDk5QTcyM0Y2QTkwMjFBRTVFN0IwMzJB Q0VEREI3QTAeFw0yNTEyMjEwNjI1NThaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NDc5MmY2LWEyYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6VsXxnK0Y96ttfnqFVeIG9NFuNW4QnboMahoAcsmAk+adt6FqsUcBg0uGV4ce Vsbnl0GBwcHEYQmWRKGaSs4fSF0dlYh49c137qag3wXUlwkn0pxncCeZPCibm7C1 7LxgAQYhdEAhForv9F16oOMywvnc2FKHVdWWpqAuZ0gDFOvlDGinptLZx+Z4Bu/J WNr0oXRW/PqeBtulx4IbFdkG86vP68ZBFGSRLMGJ2iqJkikygc+VE2hVXV9/5Xbw 8q8B2FMTzTNHkf3Xw32cB8BJwu8n2wOWHuwIhCjwpBkAHbPe/70Q9oD6eIi9fXN4 Vp0Z0GWCXUpzmF1Qd0+LquIPAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUrL64ae5b 7kFlsgXhvGLnnXUzJUQwHwYDVR0jBBgwFoAUko6KqA2ZpyP2qQIa5eewMqzt23ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1QTI3LzlEQzIyMDU0NEE1 ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQMnFRSWE1ZWV3TXF6dDIz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva282S3FBMlpweVAycVFJYTVlZXdNcXp0MjNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUEyNy85REMyMjA1NDRBNTgxMUYwQjk3NzMxODBDNEY5QUUwMi80OUIxNEEyODRB NUIxMUYwQkI4QkNEMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfMbgDANBgkqhkiG9w0BAQsFAAOCAQEAkCgM3C4OmERz A16M7TGkxoHdfi3rW6zf0/iazxfkp872KWXRahGRueHEtAGcc8CKcPqKnvXLx9y7 wyM3T3uay4OzeMSBeePUCYRfgAD5ffm7B0kBKm7dcT9w8duTtNetCelI01d889qT cGQ4tqhvG9OBCjgTGY5yj7FpOfQe/pWdv26f8WmpjOStu+ZGSbbXJm/DD5mLVLbd 3ljl402ntHDtVOkGL+tDICecgDRtjFpaYksdKHRKUoi0VzAdTtqsLPav7D/LQYg/ UGTFnqeZFQ/Kup0r0Gx0soYkONg6fm1TwhHSkZgH6F/a0Hxnna+SVbBfxGqb0q8o iTZwWgrvqA== -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:05 2025 by rpki-client