This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/C00D9A3C71EE11EFA7DD021EC4F9AE02.roa File: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (raw, json) Hash identifier: O3rcuPzI43gA/b6lPBzohtucBkFVYWI1mOWlKV5v7BU= Subject key identifier: 10:11:55:BD:A5:3C:86:AC:73:E5:BD:51:6E:70:62:56:8B:5D:AA:DA Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Certificate serial: 019E Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/C00D9A3C71EE11EFA7DD021EC4F9AE02.roa Signing time: Tue 23 Dec 2025 03:23:42 +0000 ROA not before: Tue 23 Dec 2025 03:23:42 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152176 IP address blocks: 2001:df3:3d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E Validity Not Before: Dec 23 03:23:42 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=694a0b3d-4add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:ab:2a:bb:15:99:5b:57:ca:6d:29:ef:81: b1:f2:f8:46:53:98:47:ad:25:25:fb:0b:3e:85:1e: 85:51:b2:f9:22:ea:90:5a:1e:28:4e:10:43:be:a3: b9:2c:bd:8e:d2:0d:31:c5:9c:02:9e:e8:d7:86:77: 98:97:bc:0b:cc:f7:48:22:7d:ed:d1:e5:bd:7f:15: 0e:0f:9d:fd:87:3c:7f:1d:7a:93:8b:a3:cb:fd:b5: 86:6f:41:df:1c:14:1e:05:69:3b:4c:ad:91:80:f9: 76:30:83:20:23:b4:07:17:67:3e:76:a1:93:aa:5c: f0:c0:37:da:26:d7:08:43:73:2a:a3:88:42:54:55: 93:13:ac:d9:0a:2a:e9:00:35:87:84:c5:06:dc:1c: c2:67:d7:7d:e6:45:67:13:7d:94:26:7c:9c:c6:3c: 13:ac:b4:cf:d0:a8:83:dc:ba:da:92:dc:e1:ae:41: d3:9e:cc:c1:6f:fa:e1:65:9e:a7:5c:02:f3:f7:6c: c2:ce:09:c4:1f:48:d7:b7:3d:bb:6b:1a:32:0b:53: 42:ab:0b:9e:3b:ea:d1:ad:ff:d8:08:5e:a4:fb:bf: a5:5e:45:e7:ae:05:ec:36:74:85:b9:26:86:03:50: 91:7c:e0:e3:cd:73:3c:1a:ac:c4:3b:6d:26:30:19: 75:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:11:55:BD:A5:3C:86:AC:73:E5:BD:51:6E:70:62:56:8B:5D:AA:DA X509v3 Authority Key Identifier: keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/C00D9A3C71EE11EFA7DD021EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:3d40::/48 Signature Algorithm: sha256WithRSAEncryption a7:e7:65:8b:c2:3d:69:e7:b0:09:63:1b:0b:79:6a:97:76:c2: 48:e2:25:36:dc:ce:4a:3c:8c:b9:0d:fc:67:f3:77:82:7d:b7: 47:e1:a4:20:92:f6:58:0c:7b:4e:1c:d7:e5:69:46:45:71:14: bd:56:89:92:1c:98:2a:61:01:12:66:39:fa:cb:c0:f4:f9:c4: fd:e1:b1:38:03:72:51:c5:a4:91:62:04:62:29:c7:97:42:19: d9:46:73:16:36:50:55:87:da:5a:a4:2e:d8:c7:d5:e3:8b:28: bb:8d:8e:f8:4c:bb:f7:08:e8:09:f4:9f:55:4e:ab:dc:08:c4: d9:86:0c:d6:ca:99:cb:12:4b:9d:be:7e:f4:a7:05:bb:ec:f5: 8f:7b:f3:93:ab:95:0b:dd:2c:31:97:de:60:88:c3:75:d6:b1: d7:e4:60:62:08:47:2d:a1:d8:7c:c9:7b:5f:8d:74:9d:82:b8: 6b:da:aa:57:85:e4:62:7b:2b:6c:b5:8b:bc:ea:36:ad:20:97: a9:2d:88:f6:59:ec:e6:31:bf:dc:50:b1:1e:16:be:53:62:73: b3:1f:9b:6e:61:2e:ba:8a:b9:94:42:5f:6e:7a:01:0c:0d:c2: 17:bf:04:c5:90:e7:d6:66:4e:24:9d:0a:18:cb:13:a0:cf:7b: 0a:81:b3:f3 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD QzI4MjM2NEUwHhcNMjUxMjIzMDMyMzQyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRhMGIzZC00YWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOCrKrsVmVtXym0p74Gx8vhGU5hHrSUl+ws+hR6FUbL5IuqQWh4oThBDvqO5 LL2O0g0xxZwCnujXhneYl7wLzPdIIn3t0eW9fxUOD539hzx/HXqTi6PL/bWGb0Hf HBQeBWk7TK2RgPl2MIMgI7QHF2c+dqGTqlzwwDfaJtcIQ3Mqo4hCVFWTE6zZCirp ADWHhMUG3BzCZ9d95kVnE32UJnycxjwTrLTP0KiD3LraktzhrkHTnszBb/rhZZ6n XALz92zCzgnEH0jXtz27axoyC1NCqwueO+rRrf/YCF6k+7+lXkXnrgXsNnSFuSaG A1CRfODjzXM8GqzEO20mMBl1DQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFBARVb2l PIasc+W9UW5wYlaLXaraMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjI1REIvMTE5MzlEMTA5MDY5MTFFRUIyM0Q3NDI1QzRGOUFFMDIvQzAwRDlBM0M3 MUVFMTFFRkE3REQwMjFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zPUAwDQYJKoZIhvcNAQELBQADggEBAKfnZYvCPWnn sAljGwt5apd2wkjiJTbczko8jLkN/Gfzd4J9t0fhpCCS9lgMe04c1+VpRkVxFL1W iZIcmCphARJmOfrLwPT5xP3hsTgDclHFpJFiBGIpx5dCGdlGcxY2UFWH2lqkLtjH 1eOLKLuNjvhMu/cI6An0n1VOq9wIxNmGDNbKmcsSS52+fvSnBbvs9Y9785OrlQvd LDGX3mCIw3XWsdfkYGIIRy2h2HzJe1+NdJ2CuGvaqleF5GJ7K2y1i7zqNq0gl6kt iPZZ7OYxv9xQsR4WvlNic7Mfm25hLrqKuZRCX256AQwNwhe/BMWQ59ZmTiSdChjL E6DPewqBs/M= -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:00 2025 by rpki-client