This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/B34C91C4B14311EF8479AA21C4F9AE02.roa File: B34C91C4B14311EF8479AA21C4F9AE02.roa (raw, json) Hash identifier: eH7lKxC1fSAwRwADOegzWnR0eN8xp2QzqcA2Q9e7qkk= Subject key identifier: 72:B1:48:F8:13:CE:56:2D:3B:4C:27:BF:C4:7F:A4:35:9B:A3:6F:8F Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B7B Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/B34C91C4B14311EF8479AA21C4F9AE02.roa Signing time: Sun 14 Dec 2025 18:56:03 +0000 ROA not before: Sun 14 Dec 2025 18:56:03 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 131243 IP address blocks: 2001:df3:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: Dec 14 18:56:03 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693f0843-b15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:4e:a5:6f:ce:24:77:c2:b9:c9:09:4d:dd: 9e:8a:b6:c2:08:e8:ed:a5:7c:56:39:59:93:ae:7b: f1:3f:7e:8b:76:fa:88:af:32:cc:91:8f:ea:0b:cf: 54:5f:d4:c8:f1:c0:57:9c:d8:1d:7f:54:8e:db:48: 3b:5a:2e:52:96:97:c2:8f:e0:ba:c0:29:2d:e0:e7: ed:b7:03:5b:8b:e6:41:0c:5f:1b:bd:40:09:48:1b: 34:36:9b:21:d4:45:62:f9:00:9b:26:41:8d:34:e3: 07:c4:36:fe:b6:3e:a5:b1:2a:ea:b1:c6:10:39:39: d9:b3:aa:61:b6:f1:cc:87:30:cf:26:df:e9:09:c8: ce:a0:da:21:2a:d9:09:c3:f1:de:1b:19:d7:4a:35: 2e:e5:09:eb:4c:a4:36:a1:6a:a7:26:ac:e0:9d:a4: d8:fb:ef:0f:b1:93:7e:8a:45:df:29:00:d5:85:1c: d9:53:67:41:d6:03:14:3d:3f:7a:65:92:55:4c:20: 96:48:b9:bd:81:f7:0c:99:ce:99:92:31:55:37:e9: c0:c0:cf:26:07:4d:23:51:c9:99:e8:2a:b8:bc:e6: ac:da:6f:d1:5e:13:6b:97:62:46:58:7f:5f:f4:41: 8b:64:06:70:b0:28:e2:fb:ba:09:90:4d:23:69:2c: ac:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B1:48:F8:13:CE:56:2D:3B:4C:27:BF:C4:7F:A4:35:9B:A3:6F:8F X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/B34C91C4B14311EF8479AA21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:500::/48 Signature Algorithm: sha256WithRSAEncryption 51:7e:94:ff:d1:a5:12:6d:d3:15:0d:89:30:cf:61:b9:83:dd: 0e:3f:fe:9b:98:4d:5e:a8:d6:6e:3e:18:27:39:a8:a4:cc:ac: fc:72:93:03:f3:81:ce:e5:a4:7f:23:1a:f2:89:1e:b0:62:4b: 6a:a5:6e:58:93:05:6f:23:ca:c7:e3:34:2a:1b:f0:8b:59:f6: f8:8f:d0:93:50:03:23:a5:c1:9c:04:08:86:15:b0:4d:15:73: 05:88:d6:51:d6:8e:f9:c3:fb:f8:e0:ec:45:46:c2:b4:ef:6f: 45:f0:0a:b3:84:ff:fe:d5:3b:48:43:c2:67:fc:cc:e1:27:15: 96:4c:8f:ec:e9:ef:0a:0a:b2:1f:8e:bb:54:f7:95:44:6a:ee: be:3e:02:06:de:4f:c0:6c:d4:e5:b4:0f:b7:4b:93:5f:e4:5b: c8:8a:81:4d:5e:2c:63:95:00:ec:67:9c:0d:13:9e:14:2d:61: 8f:91:bc:01:26:34:d6:9b:c8:10:d3:df:e5:89:33:a7:78:4f: 10:74:98:de:e0:f1:0d:0a:e9:0e:70:e9:0a:5e:31:18:dc:5a: de:3a:23:24:3c:b0:ef:76:85:9b:03:6f:e5:c8:47:95:f6:e1: b1:26:21:44:2a:a0:64:a0:e8:f4:2b:60:3c:76:f2:7a:8e:8e: 6b:7e:ef:6f -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUxMjE0MTg1NjAzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNmMDg0My1iMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqtOpW/OJHfCuckJTd2eirbCCOjtpXxWOVmTrnvxP36LdvqIrzLMkY/qC89U X9TI8cBXnNgdf1SO20g7Wi5SlpfCj+C6wCkt4OfttwNbi+ZBDF8bvUAJSBs0Npsh 1EVi+QCbJkGNNOMHxDb+tj6lsSrqscYQOTnZs6phtvHMhzDPJt/pCcjOoNohKtkJ w/HeGxnXSjUu5QnrTKQ2oWqnJqzgnaTY++8PsZN+ikXfKQDVhRzZU2dB1gMUPT96 ZZJVTCCWSLm9gfcMmc6ZkjFVN+nAwM8mB00jUcmZ6Cq4vOas2m/RXhNrl2JGWH9f 9EGLZAZwsCji+7oJkE0jaSyssQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHKxSPgT zlYtO0wnv8R/pDWbo2+PMB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTIyRTAvQzlCOTBGRjg0Njg4MTFFQUFDRjE4QTI4QzRGOUFFMDIvQjM0QzkxQzRC MTQzMTFFRjg0NzlBQTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zBQAwDQYJKoZIhvcNAQELBQADggEBAFF+lP/RpRJt 0xUNiTDPYbmD3Q4//puYTV6o1m4+GCc5qKTMrPxykwPzgc7lpH8jGvKJHrBiS2ql bliTBW8jysfjNCob8ItZ9viP0JNQAyOlwZwECIYVsE0VcwWI1lHWjvnD+/jg7EVG wrTvb0XwCrOE//7VO0hDwmf8zOEnFZZMj+zp7woKsh+Ou1T3lURq7r4+AgbeT8Bs 1OW0D7dLk1/kW8iKgU1eLGOVAOxnnA0TnhQtYY+RvAEmNNabyBDT3+WJM6d4TxB0 mN7g8Q0K6Q5w6QpeMRjcWt46IyQ8sO92hZsDb+XIR5X24bEmIUQqoGSg6PQrYDx2 8nqOjmt+728= -----END CERTIFICATE-----Generated at Tue Dec 23 20:06:22 2025 by rpki-client