This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/042373B2CF5A11F08A42EF16C4F9AE02.roa File: 042373B2CF5A11F08A42EF16C4F9AE02.roa (raw, json) Hash identifier: EggkpcVOgI9lqzWLNGUO4SNdA0AExjaPLsB6eR+b1dk= Subject key identifier: 5D:3D:35:75:AB:90:FC:26:C6:98:25:08:BF:4B:3B:C9:68:57:52:C0 Certificate issuer: /CN=A9145E01/serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534 Certificate serial: 02 Authority key identifier: 44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/042373B2CF5A11F08A42EF16C4F9AE02.roa Signing time: Tue 02 Dec 2025 08:36:37 +0000 ROA not before: Tue 02 Dec 2025 08:36:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133922 IP address blocks: 2001:df6:5540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E01, serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534 Validity Not Before: Dec 2 08:36:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692ea515-bad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:8a:fa:4d:e1:1a:f8:b9:bc:14:70:2b:ce: 1f:9d:f5:c5:f2:01:55:b1:fc:cc:e5:aa:70:98:3f: 59:c5:00:23:59:e0:f0:17:e9:fe:8c:ce:ab:a4:3a: c4:15:fb:31:f2:fb:af:36:b2:bb:98:47:4d:33:77: 82:33:82:6c:87:7f:17:4b:5c:7e:ec:f5:17:f1:9b: ae:db:12:80:05:8e:2e:4f:06:7c:0c:37:10:73:ff: 6f:81:a4:b2:55:77:44:d0:9a:0c:de:b8:d8:2c:1f: 4d:e3:99:cb:51:4b:e4:7b:94:2b:75:a9:68:80:f0: 26:29:a3:9f:bc:41:0c:b0:18:55:0b:34:58:6e:80: fc:cc:f0:07:1e:4d:08:8e:59:e9:63:6a:a2:20:f4: 3e:33:1d:79:ac:7a:fa:29:81:fa:b4:26:09:b1:90: 6b:c1:0a:b1:12:ba:4f:41:69:9d:01:d9:e1:7c:cd: 16:c9:d5:a8:0c:7d:ad:1f:e9:74:34:df:8c:90:fc: 52:1f:59:94:c3:7c:f2:a5:69:8c:e1:bf:1f:26:49: 3c:15:b1:e3:fb:dc:fd:07:94:fa:24:7b:ba:78:17: a0:30:6c:0c:b0:bd:0a:65:a6:1f:e0:37:ca:0e:55: 3d:42:8a:06:bc:9d:54:2e:30:4c:8d:67:41:cc:16: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3D:35:75:AB:90:FC:26:C6:98:25:08:BF:4B:3B:C9:68:57:52:C0 X509v3 Authority Key Identifier: keyid:44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/042373B2CF5A11F08A42EF16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:5540::/48 Signature Algorithm: sha256WithRSAEncryption 75:ed:13:24:a2:c0:e2:43:85:2a:f2:50:a3:3d:6d:24:b9:ed: 3d:c1:88:43:d5:d2:ef:9d:83:28:e8:10:ca:7f:59:ee:fd:eb: 5f:36:cd:06:46:ca:58:93:63:99:a6:e3:d2:d1:bb:86:53:23: 9b:69:c4:d6:f7:ad:18:87:93:79:56:16:d4:4e:ab:cb:a4:b5: e2:33:d3:a2:34:6e:fb:6b:04:43:48:39:84:6f:54:85:c2:5e: 2e:d6:94:07:69:2d:0a:14:8e:68:e4:40:54:cc:ec:31:f0:ab: ae:f6:3f:c8:f9:c4:9d:b0:78:2f:63:14:23:16:ab:39:6b:9e: 20:73:fa:d0:02:c9:81:4d:a5:02:7a:e5:99:a8:6d:d6:a7:cb: 69:e2:15:51:d3:9a:57:4a:64:67:da:d9:ed:65:7d:d3:fe:86: 6e:f1:0b:b1:4b:08:de:fa:c8:af:9c:5d:a3:7b:2a:f2:81:90: 38:b3:bc:22:ea:49:c5:e9:04:06:be:63:a7:bc:dc:43:4d:44: 48:95:a3:06:1c:81:e5:17:29:f1:f4:3f:b6:7c:17:4d:bf:fb: 35:3a:56:69:1f:6b:e1:6e:62:80:ab:27:49:5e:26:ed:f7:fe: 86:1d:2c:d3:ae:a9:df:60:d8:01:4e:4e:9c:74:38:69:aa:70: 16:a4:18:b2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUUwMTExMC8GA1UEBRMoNDQyRUFBMkZBQ0E4NUM2Q0VGODFDNDRBNjVBNjM3RTg2 N0VEMzUzNDAeFw0yNTEyMDIwODM2MzdaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MmVhNTE1LWJhZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC05Ir6TeEa+Lm8FHArzh+d9cXyAVWx/MzlqnCYP1nFACNZ4PAX6f6MzqukOsQV +zHy+682sruYR00zd4IzgmyHfxdLXH7s9Rfxm67bEoAFji5PBnwMNxBz/2+BpLJV d0TQmgzeuNgsH03jmctRS+R7lCt1qWiA8CYpo5+8QQywGFULNFhugPzM8AceTQiO WeljaqIg9D4zHXmsevopgfq0JgmxkGvBCrESuk9BaZ0B2eF8zRbJ1agMfa0f6XQ0 34yQ/FIfWZTDfPKlaYzhvx8mSTwVseP73P0HlPoke7p4F6AwbAywvQplph/gN8oO VT1Ciga8nVQuMEyNZ0HMFkafAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUXT01dauQ /CbGmCUIv0s7yWhXUsAwHwYDVR0jBBgwFoAURC6qL6yoXGzvgcRKZaY36GftNTQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1RTAxLzRGQzEzRUUwQ0Y1 OTExRjA4NDkyREQxMUM0RjlBRTAyL1JDNnFMNnlvWEd6dmdjUktaYVkzNkdmdE5U US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkM2cUw2eW9YR3p2Z2NSS1phWTM2R2Z0TlRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUUwMS80RkMxM0VFMENGNTkxMUYwODQ5MkREMTFDNEY5QUUwMi8wNDIzNzNCMkNG NUExMUYwOEE0MkVGMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfZVQDANBgkqhkiG9w0BAQsFAAOCAQEAde0TJKLA4kOF KvJQoz1tJLntPcGIQ9XS752DKOgQyn9Z7v3rXzbNBkbKWJNjmabj0tG7hlMjm2nE 1vetGIeTeVYW1E6ry6S14jPTojRu+2sEQ0g5hG9UhcJeLtaUB2ktChSOaORAVMzs MfCrrvY/yPnEnbB4L2MUIxarOWueIHP60ALJgU2lAnrlmaht1qfLaeIVUdOaV0pk Z9rZ7WV90/6GbvELsUsI3vrIr5xdo3sq8oGQOLO8IupJxekEBr5jp7zcQ01ESJWj BhyB5Rcp8fQ/tnwXTb/7NTpWaR9r4W5igKsnSV4m7ff+hh0s066p32DYAU5OnHQ4 aapwFqQYsg== -----END CERTIFICATE-----Generated at Wed Dec 3 16:19:32 2025 by rpki-client