This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/346B68D2C5B311F08AB01C2DC4F9AE02.roa File: 346B68D2C5B311F08AB01C2DC4F9AE02.roa (raw, json) Hash identifier: 7b809MtdVxQZa3RrAAdljRTw+wj2N5amx06TBiSeigY= Subject key identifier: 56:E9:66:30:EC:E0:AA:E8:AC:A0:AE:6F:CA:B4:81:79:02:E8:4D:6D Certificate issuer: /CN=A91652B5/serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54 Certificate serial: 02 Authority key identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/346B68D2C5B311F08AB01C2DC4F9AE02.roa Signing time: Thu 20 Nov 2025 01:49:52 +0000 ROA not before: Thu 20 Nov 2025 01:49:52 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154315 IP address blocks: 2402:33e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652B5, serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54 Validity Not Before: Nov 20 01:49:52 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691e73c0-fe60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:72:c2:45:58:ea:57:18:bb:71:9d:ce:af: 03:2b:00:6f:1d:80:1a:b4:5a:e8:d5:97:50:51:16: 2c:68:d8:08:a5:5a:97:d2:c4:ce:b8:12:79:96:11: 63:20:28:a6:b3:79:49:fa:59:84:55:c2:28:47:4c: a7:fd:df:9d:56:fb:33:18:97:c9:03:04:64:de:77: a7:11:90:22:b7:57:49:58:19:44:27:84:d7:63:1a: 92:e2:9a:6f:7c:bf:93:25:66:20:1d:5f:0a:ca:63: af:72:77:99:fc:a0:e4:d5:b6:8a:ef:9c:b2:d5:57: 9e:a5:63:8d:07:77:6b:f7:04:15:c2:1c:2d:f9:ce: db:6e:17:e4:e1:94:b6:ff:6f:12:4b:e3:54:cc:93: a9:9d:77:77:63:46:2f:f1:8a:d1:7c:02:e2:11:97: c2:08:24:30:e1:2f:7a:31:4a:f2:8e:74:7d:a6:de: dc:92:69:b0:a5:81:71:93:d3:5f:65:85:d7:20:55: 80:60:d0:2f:b2:d9:77:e6:35:8b:9f:32:9e:6b:15: 40:17:a0:07:35:e9:1e:cc:8e:12:b5:6b:28:c8:bf: 2e:18:83:a1:ec:50:11:1d:ff:52:77:b5:e2:07:04: a5:75:cf:72:b0:04:91:04:3b:38:74:47:95:76:9a: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E9:66:30:EC:E0:AA:E8:AC:A0:AE:6F:CA:B4:81:79:02:E8:4D:6D X509v3 Authority Key Identifier: keyid:ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/346B68D2C5B311F08AB01C2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:33e0::/32 Signature Algorithm: sha256WithRSAEncryption 69:76:08:a7:ab:24:c6:80:08:8c:29:c0:8b:20:9b:0a:f7:ca: 69:b4:79:f0:f6:b2:f1:c0:1c:19:af:69:0d:02:08:90:45:65: 0a:bd:0b:9e:02:76:0a:2c:02:f2:7e:e0:fe:04:53:30:84:6f: 00:be:bf:b9:e8:d0:6e:7e:ae:78:b2:8e:e9:0e:cc:8b:83:c3: 22:ec:27:9c:21:d8:d6:10:b7:11:14:9a:d0:c5:09:eb:78:0c: d0:7c:fc:3e:a5:2b:d1:f8:2b:af:53:42:24:04:48:a5:ba:ac: 82:f8:52:83:f6:27:2a:d0:5a:86:a3:2d:bd:5b:e9:db:74:d1: 0c:ec:0a:c0:19:38:60:26:b7:4f:02:81:46:28:e9:d1:e0:07: 5f:3a:1f:db:eb:54:ab:74:e9:75:0a:92:20:8c:c1:1d:ed:98: 73:a7:4b:b4:86:49:b1:a0:ca:8b:07:e5:a7:e7:d0:ab:f1:7b: 7c:36:5a:1a:5f:29:e7:d3:47:ab:ef:b9:9d:ec:b2:73:cd:5d: 05:9d:37:a6:90:16:3b:8e:5d:a4:90:ba:c5:d5:33:0c:ea:04: 4c:63:00:2e:ee:b0:bb:f3:7a:d3:c5:32:de:81:d8:e1:c6:25: 4e:40:6d:12:5b:ec:bb:bb:71:4c:a1:23:7d:a7:96:a4:69:37: 3a:6c:87:ba -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTJCNTExMC8GA1UEBRMoRUQyM0E4RTg5RTU2QkNCREExQzAwRTQ5N0M0ODgzRDc5 NUU1MkQ1NDAeFw0yNTExMjAwMTQ5NTJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MWU3M2MwLWZlNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC59nLCRVjqVxi7cZ3OrwMrAG8dgBq0WujVl1BRFixo2AilWpfSxM64EnmWEWMg KKazeUn6WYRVwihHTKf9351W+zMYl8kDBGTed6cRkCK3V0lYGUQnhNdjGpLimm98 v5MlZiAdXwrKY69yd5n8oOTVtorvnLLVV56lY40Hd2v3BBXCHC35zttuF+ThlLb/ bxJL41TMk6mdd3djRi/xitF8AuIRl8IIJDDhL3oxSvKOdH2m3tySabClgXGT019l hdcgVYBg0C+y2XfmNYufMp5rFUAXoAc16R7MjhK1ayjIvy4Yg6HsUBEd/1J3teIH BKV1z3KwBJEEOzh0R5V2mtbBAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUVulmMOzg quisoK5vyrSBeQLoTW0wHwYDVR0jBBgwFoAU7SOo6J5WvL2hwA5JfEiD15XlLVQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MkI1LzZGRkI2MjRBQzVC MjExRjA5NEEwNzkyQkM0RjlBRTAyLzdTT282SjVXdkwyaHdBNUpmRWlEMTVYbExW US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1NPbzZKNVd2TDJod0E1SmZFaUQxNVhsTFZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJCNS82RkZCNjI0QUM1QjIxMUYwOTRBMDc5MkJDNEY5QUUwMi8zNDZCNjhEMkM1 QjMxMUYwOEFCMDFDMkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCM+AwDQYJKoZIhvcNAQELBQADggEBAGl2CKerJMaACIwp wIsgmwr3ymm0efD2svHAHBmvaQ0CCJBFZQq9C54CdgosAvJ+4P4EUzCEbwC+v7no 0G5+rniyjukOzIuDwyLsJ5wh2NYQtxEUmtDFCet4DNB8/D6lK9H4K69TQiQESKW6 rIL4UoP2JyrQWoajLb1b6dt00QzsCsAZOGAmt08CgUYo6dHgB186H9vrVKt06XUK kiCMwR3tmHOnS7SGSbGgyosH5afn0Kvxe3w2WhpfKefTR6vvuZ3ssnPNXQWdN6aQ FjuOXaSQusXVMwzqBExjAC7usLvzetPFMt6B2OHGJU5AbRJb7Lu7cUyhI32nlqRp Nzpsh7o= -----END CERTIFICATE-----Generated at Wed Dec 3 16:34:21 2025 by rpki-client