This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/7D4302A0BEC811F0AE45220FC4F9AE02.roa File: 7D4302A0BEC811F0AE45220FC4F9AE02.roa (raw, json) Hash identifier: dbVpIHNueZer+oUS1RXNpDIo/TCVZYavEBd3HqBZ7S8= Subject key identifier: 68:6C:68:9E:50:A5:4E:21:79:C3:4D:9A:FF:2A:F3:7A:82:BE:F3:C7 Certificate issuer: /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656 Certificate serial: 06 Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/7D4302A0BEC811F0AE45220FC4F9AE02.roa Signing time: Tue 11 Nov 2025 06:34:35 +0000 ROA not before: Tue 11 Nov 2025 06:34:35 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154355 IP address blocks: 2001:df6:3ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656 Validity Not Before: Nov 11 06:34:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6912d8fb-0baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:5a:c9:00:7b:6a:e0:d1:2a:5a:47:34:d5: 1d:a1:77:9f:ea:ed:97:cc:d2:e0:b5:b5:2d:14:e1: 21:a8:31:f8:a6:88:66:ff:0c:63:1e:48:24:18:d3: 07:63:d9:8a:dd:c5:d7:6d:19:18:4c:cb:88:ef:6c: 13:eb:b7:b0:4e:1d:1c:76:31:7d:e3:ed:f0:bd:d1: e0:1d:23:80:1b:24:00:a8:89:45:15:b0:73:b9:08: ab:0f:79:d0:1b:a6:c5:c3:51:1a:42:19:f7:d7:6e: f9:de:e6:e0:7a:a6:7e:c1:6a:cc:09:be:2d:ae:14: 50:70:4f:20:d6:ef:d3:88:a7:e3:a2:3a:9b:f0:49: f8:df:c7:6e:96:10:ff:61:25:fa:9e:c1:05:20:f2: 6e:53:f5:75:03:e5:64:71:45:89:a8:dc:d0:b0:1e: dd:5b:87:2f:4c:0a:af:a8:73:9f:7a:61:4a:d5:03: 49:f8:2c:6f:be:e8:5b:34:bd:e3:a1:d4:05:07:5c: 8d:ab:ca:8c:a5:60:73:79:cf:1d:d9:13:ae:35:56: 95:9e:d5:11:56:00:ee:49:20:81:7c:f8:53:e1:39: ae:72:5b:4b:70:f1:55:fa:55:b8:97:dd:40:90:5b: dd:ee:1e:17:97:ba:63:f1:e0:24:d3:86:69:2d:03: f3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6C:68:9E:50:A5:4E:21:79:C3:4D:9A:FF:2A:F3:7A:82:BE:F3:C7 X509v3 Authority Key Identifier: keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/7D4302A0BEC811F0AE45220FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:3ac0::/48 Signature Algorithm: sha256WithRSAEncryption 17:50:f2:64:4c:62:4c:22:f3:f2:43:1b:a4:da:ac:ba:cc:6c: cc:ca:73:b8:97:53:3a:e9:e1:c1:3c:e4:5a:45:ea:dd:5d:c0: 07:b4:49:fc:1e:21:12:c1:55:97:93:eb:0f:d3:40:ed:0d:f5: 66:ef:a2:6c:ad:23:73:04:b1:5f:b7:ee:79:96:ed:03:df:75: 0e:bb:87:f1:00:8a:46:8e:cc:6c:85:a5:d5:ab:d4:89:a3:6a: 82:6b:02:6e:7d:dd:59:62:3c:c0:14:54:7e:ec:3a:bc:ba:47: 9a:4c:fd:e4:6d:84:8a:25:59:93:2d:1a:8e:1c:bc:d7:53:0e: 68:2d:5a:8a:95:9b:5b:8d:5c:2e:45:90:0a:38:d8:fd:8a:f7: d3:94:ee:b5:be:00:1d:72:5e:c5:21:70:0e:54:8f:bd:94:4f: cb:cc:96:9c:58:46:f9:2f:a5:81:50:9e:db:78:95:48:71:60: c1:72:17:46:7e:43:81:77:26:7b:94:a0:b9:f6:87:9d:42:33: e0:48:d6:ba:cd:6b:03:4b:30:ae:55:8b:73:cd:b3:21:32:42: 32:49:f5:86:09:7f:10:5f:09:f5:be:99:a7:a4:d3:16:85:05: f2:6a:6c:f8:91:90:99:5b:8b:03:75:31:88:69:d2:36:d0:33: 52:c6:f8:17 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTEzMTExMC8GA1UEBRMoREE3MkQwQ0VEQUFFMTlBMUVDM0VEQkEwNDY3RDU5OEVC OTkxNTY1NjAeFw0yNTExMTEwNjM0MzVaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MTJkOGZiLTBiYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxelrJAHtq4NEqWkc01R2hd5/q7ZfM0uC1tS0U4SGoMfimiGb/DGMeSCQY0wdj 2YrdxddtGRhMy4jvbBPrt7BOHRx2MX3j7fC90eAdI4AbJACoiUUVsHO5CKsPedAb psXDURpCGffXbvne5uB6pn7BaswJvi2uFFBwTyDW79OIp+OiOpvwSfjfx26WEP9h JfqewQUg8m5T9XUD5WRxRYmo3NCwHt1bhy9MCq+oc596YUrVA0n4LG++6Fs0veOh 1AUHXI2ryoylYHN5zx3ZE641VpWe1RFWAO5JIIF8+FPhOa5yW0tw8VX6VbiX3UCQ W93uHheXumPx4CTThmktA/MzAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUaGxonlCl TiF5w02a/yrzeoK+88cwHwYDVR0jBBgwFoAU2nLQztquGaHsPtugRn1ZjrmRVlYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMTMxLzY1QzM4Qzk4QkMx MjExRjBCNjk2NjA3QkM0RjlBRTAyLzJuTFF6dHF1R2FIc1B0dWdSbjFaanJtUlZs WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMm5MUXp0cXVHYUhzUHR1Z1JuMVpqcm1SVmxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTEzMS82NUMzOEM5OEJDMTIxMUYwQjY5NjYwN0JDNEY5QUUwMi83RDQzMDJBMEJF QzgxMUYwQUU0NTIyMEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfY6wDANBgkqhkiG9w0BAQsFAAOCAQEAF1DyZExiTCLz 8kMbpNqsusxszMpzuJdTOunhwTzkWkXq3V3AB7RJ/B4hEsFVl5PrD9NA7Q31Zu+i bK0jcwSxX7fueZbtA991DruH8QCKRo7MbIWl1avUiaNqgmsCbn3dWWI8wBRUfuw6 vLpHmkz95G2EiiVZky0ajhy811MOaC1aipWbW41cLkWQCjjY/Yr305Tutb4AHXJe xSFwDlSPvZRPy8yWnFhG+S+lgVCe23iVSHFgwXIXRn5DgXcme5SgufaHnUIz4EjW us1rA0swrlWLc82zITJCMkn1hgl/EF8J9b6Zp6TTFoUF8mps+JGQmVuLA3UxiGnS NtAzUsb4Fw== -----END CERTIFICATE-----Generated at Wed Dec 3 16:19:44 2025 by rpki-client