This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/BFE98870D00911F08B3BE011C4F9AE02.roa File: BFE98870D00911F08B3BE011C4F9AE02.roa (raw, json) Hash identifier: KEDuB0fCQDUlpa61Kum8U1+z81WHmNVyBobvxXJKyg8= Subject key identifier: 71:12:7B:94:B8:40:96:F1:42:9A:6F:94:A1:D4:C6:FC:7A:F7:4A:8C Certificate issuer: /CN=A917BEDF/serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701 Certificate serial: 02 Authority key identifier: 45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/BFE98870D00911F08B3BE011C4F9AE02.roa Signing time: Wed 03 Dec 2025 05:34:35 +0000 ROA not before: Wed 03 Dec 2025 05:34:35 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132103 IP address blocks: 2001:df6:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701 Validity Not Before: Dec 3 05:34:35 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=692fcbeb-0231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:54:44:a7:48:e8:bd:ad:7c:6d:47:09:12:3a: 69:ef:6f:7a:e7:9d:ff:71:af:b5:dd:3a:8b:cb:9f: 10:65:d9:8d:46:7c:26:72:bc:28:81:ce:ab:ef:83: 06:44:c4:32:8d:f6:09:91:2e:33:21:c2:a9:6c:82: 40:07:e7:5e:57:14:a6:63:91:c3:3e:28:fc:07:db: 00:aa:07:ae:ea:d1:fa:2a:fd:6e:92:f2:82:ec:70: 67:8e:d8:e5:c7:b3:9c:b8:d5:77:72:04:28:7f:4a: 94:06:b9:71:9e:b6:4a:e7:fb:bc:46:71:14:b8:9c: 11:da:23:78:4a:81:af:ab:67:67:32:0b:c3:e3:ee: ca:c8:6c:b8:4e:72:64:04:45:61:0f:13:07:9b:e2: b7:9b:f2:4e:c9:f3:14:22:41:09:c2:12:32:b1:95: 93:89:e9:e5:ce:09:68:1f:89:38:42:e4:b6:95:24: cd:4a:b0:ba:5c:06:28:3b:86:36:03:e9:24:43:f8: 90:82:9e:a7:21:72:65:2a:1c:d5:53:81:59:67:b1: 88:a5:8c:df:ec:2a:e6:17:bd:d6:5c:f9:00:29:2e: 05:47:2a:72:29:d0:02:bf:4b:d2:6f:31:b0:80:1d: fc:f1:23:b3:0c:f9:96:e9:36:c4:ab:18:38:26:5e: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:12:7B:94:B8:40:96:F1:42:9A:6F:94:A1:D4:C6:FC:7A:F7:4A:8C X509v3 Authority Key Identifier: keyid:45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/BFE98870D00911F08B3BE011C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:6040::/48 Signature Algorithm: sha256WithRSAEncryption 5e:ab:22:7e:f7:d9:8a:50:ae:30:99:7a:8a:c5:3b:dc:c9:82: bf:1e:a0:e0:44:93:84:e9:00:71:fd:29:db:9a:de:12:be:39: cf:0c:8d:4f:7d:dc:cf:a7:0c:24:2a:24:4e:1c:81:a6:3b:6d: 6b:cf:2e:f1:0f:73:37:a1:0c:c6:31:3c:bc:5b:9f:e6:48:70: ec:4d:f5:20:8c:00:6d:9c:ca:52:b4:55:14:7c:07:8d:a0:46: 17:a3:0b:eb:52:f0:cb:a7:3d:1e:06:99:85:fb:0b:f3:b9:ae: 1f:c8:97:4b:a1:76:90:9f:7d:8b:47:47:8b:e3:c1:7d:09:0f: f1:30:f8:57:ed:b0:ec:9c:40:48:e3:00:61:21:48:25:5e:32: b2:cf:c3:3c:71:1e:38:86:4a:89:7b:bf:68:a8:1f:2f:2e:c8: 75:f1:9c:f0:94:65:5a:98:07:28:9b:0d:0e:be:0f:3f:42:3c: 32:3a:3c:7f:4d:cb:96:e6:63:23:62:9f:77:16:eb:7f:59:70: 7e:47:a5:96:03:a1:ba:e4:d5:9c:7b:79:8d:1c:7d:fb:8f:27: 51:ec:33:07:c6:e5:20:e4:99:77:94:8a:84:21:69:bb:ea:0a: d2:6d:cb:5a:0c:3c:eb:e9:5e:25:e5:c5:4b:f6:a2:80:48:0d: fb:8b:ba:41 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoNDUzNUNGMUQxMjIxQjcxNDA3QzE0MUNFNkJCNTczQThC NkJFODcwMTAeFw0yNTEyMDMwNTM0MzVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MmZjYmViLTAyMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5VESnSOi9rXxtRwkSOmnvb3rnnf9xr7XdOovLnxBl2Y1GfCZyvCiBzqvvgwZE xDKN9gmRLjMhwqlsgkAH515XFKZjkcM+KPwH2wCqB67q0foq/W6S8oLscGeO2OXH s5y41XdyBCh/SpQGuXGetkrn+7xGcRS4nBHaI3hKga+rZ2cyC8Pj7srIbLhOcmQE RWEPEweb4reb8k7J8xQiQQnCEjKxlZOJ6eXOCWgfiThC5LaVJM1KsLpcBig7hjYD 6SRD+JCCnqchcmUqHNVTgVlnsYiljN/sKuYXvdZc+QApLgVHKnIp0AK/S9JvMbCA HfzxI7MM+ZbpNsSrGDgmXiKlAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUcRJ7lLhA lvFCmm+UodTG/Hr3SowwHwYDVR0jBBgwFoAURTXPHRIhtxQHwUHOa7VzqLa+hwEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzJFODEyNzlFRDAw OTExRjA4MzcwMEU2QkM0RjlBRTAyL1JUWFBIUklodHhRSHdVSE9hN1Z6cUxhLWh3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUlRYUEhSSWh0eFFId1VIT2E3VnpxTGEtaHdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVERi8yRTgxMjc5RUQwMDkxMUYwODM3MDBFNkJDNEY5QUUwMi9CRkU5ODg3MEQw MDkxMUYwOEIzQkUwMTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfZgQDANBgkqhkiG9w0BAQsFAAOCAQEAXqsifvfZilCu MJl6isU73MmCvx6g4ESThOkAcf0p25reEr45zwyNT33cz6cMJCokThyBpjtta88u 8Q9zN6EMxjE8vFuf5khw7E31IIwAbZzKUrRVFHwHjaBGF6ML61Lwy6c9HgaZhfsL 87muH8iXS6F2kJ99i0dHi+PBfQkP8TD4V+2w7JxASOMAYSFIJV4yss/DPHEeOIZK iXu/aKgfLy7IdfGc8JRlWpgHKJsNDr4PP0I8Mjo8f03LluZjI2Kfdxbrf1lwfkel lgOhuuTVnHt5jRx9+48nUewzB8blIOSZd5SKhCFpu+oK0m3LWgw86+leJeXFS/ai gEgN+4u6QQ== -----END CERTIFICATE-----Generated at Wed Dec 3 16:30:42 2025 by rpki-client