This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBFB435CEDFA11F08B7882CC3A6F56BC.roa File: BBFB435CEDFA11F08B7882CC3A6F56BC.roa (raw, json) Hash identifier: Z8M+k2nTCNx+wIAzNtGcD2XEW7TnVfr4qY/GQrfL8YY= Subject key identifier: C6:6F:26:CE:0A:3B:C0:A9:EF:F0:AE:49:E4:3D:7A:C8:EC:EF:7D:5B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: CD1E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBFB435CEDFA11F08B7882CC3A6F56BC.roa Signing time: Sat 10 Jan 2026 08:02:40 +0000 ROA not before: Sat 10 Jan 2026 08:02:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135667 IP address blocks: 2001:df6:8a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 11:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52510 (0xcd1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jan 10 08:02:40 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=696207a0-fc42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3d:f7:ec:8d:1a:b1:29:c5:89:5b:d8:84:11: 4d:ad:98:85:c1:b9:82:a6:e5:78:54:00:16:a1:cb: 27:ae:8c:c3:2e:71:a8:d6:d7:3b:68:38:b8:6b:2a: 26:e9:e8:7a:3c:23:2d:1e:c4:88:d5:a7:7e:23:f5: ce:bd:39:ee:71:d4:5f:8d:fc:85:30:fe:c1:ff:ea: 21:21:92:dc:b5:54:8d:0c:09:c4:00:bc:8f:bb:f1: 1e:67:0b:fc:36:82:5d:08:c8:4b:40:03:63:e0:54: 7c:02:f1:34:6f:3b:c0:66:dc:65:37:0e:f0:f3:9b: b9:6e:f4:d3:00:a8:90:ff:47:fd:40:d6:9e:58:79: 43:2f:72:f5:c8:14:cf:28:15:d9:23:ac:e9:dc:ec: 89:e4:2f:58:d2:19:ab:98:df:12:63:94:c7:50:45: 6e:6c:90:54:74:48:52:42:9f:cf:6a:f2:25:f1:e2: 7e:8c:95:68:7c:a0:29:c9:85:c1:fe:c2:06:16:d5: 55:31:7c:7f:7e:7e:24:a3:f3:f1:9c:c5:81:b3:26: 5a:ed:24:84:5d:6b:a6:41:f4:7c:27:3f:52:83:fa: 4f:d3:8e:50:0c:f2:9a:9d:1a:25:2f:e3:2d:d2:62: 4f:4a:f5:95:d7:8c:64:5b:dd:bf:c2:cb:6b:3e:9d: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6F:26:CE:0A:3B:C0:A9:EF:F0:AE:49:E4:3D:7A:C8:EC:EF:7D:5B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BBFB435CEDFA11F08B7882CC3A6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:8a40::/48 Signature Algorithm: sha256WithRSAEncryption 14:35:a1:c4:f6:a6:b1:6c:ef:5c:50:9a:c6:e1:74:02:0c:2a: b6:ff:96:e3:95:3e:2e:04:b1:99:87:bd:ad:04:7d:27:0e:bb: 4b:e6:12:2f:e5:18:82:33:99:a0:5c:2c:df:b8:ef:10:60:c1: 29:8f:f1:41:2c:d2:46:3d:6a:07:41:1f:e5:17:37:d0:51:91: 14:9f:ff:8f:14:67:18:bf:6f:38:b0:ab:e2:94:c2:de:e1:a9: 2b:53:68:e0:b7:c8:30:8e:3b:cd:81:64:16:a9:bf:8f:db:fc: 9f:76:b6:9f:db:66:75:cf:29:1b:6d:c4:e0:5c:93:75:03:50: f8:a9:db:5b:13:f7:f7:80:b4:ca:1d:7f:70:c6:8c:1a:42:ea: b7:e6:5f:58:91:b0:39:04:b1:54:ad:e5:c2:87:c0:5c:14:36: 95:7a:0d:d8:99:a9:1a:75:78:80:11:b6:ee:84:c5:8c:eb:02: 5e:4a:ff:48:a3:36:94:64:ae:a6:2f:9d:ab:f9:20:34:df:c8: 46:e5:b8:8b:f9:bd:07:ed:05:b9:5b:47:0c:18:23:3e:f3:ae: 9e:aa:b3:62:f7:5f:3b:dd:62:da:ea:3b:22:a2:2a:45:4a:d6: 67:7c:a2:12:f6:0b:ea:15:32:36:46:18:53:9b:a8:2f:e4:6f: d4:db:d5:6a -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAM0eMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMMCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDExMDA4MDI0MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAwwNNjk2MjA3YTAtZmM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOo99+yNGrEpxYlb2IQRTa2YhcG5gqbleFQAFqHLJ66Mwy5xqNbXO2g4uGsq JunoejwjLR7EiNWnfiP1zr057nHUX438hTD+wf/qISGS3LVUjQwJxAC8j7vxHmcL /DaCXQjIS0ADY+BUfALxNG87wGbcZTcO8PObuW700wCokP9H/UDWnlh5Qy9y9cgU zygV2SOs6dzsieQvWNIZq5jfEmOUx1BFbmyQVHRIUkKfz2ryJfHifoyVaHygKcmF wf7CBhbVVTF8f35+JKPz8ZzFgbMmWu0khF1rpkH0fCc/UoP6T9OOUAzymp0aJS/j LdJiT0r1ldeMZFvdv8LLaz6dfycCAwEAAaOCApgwggKUMB0GA1UdDgQWBBTGbybO CjvAqe/wrknkPXrI7O99WzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JCRkI0MzVD RURGQTExRjA4Qjc4ODJDQzNBNkY1NkJDLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAIAEN9opAMA0GCSqGSIb3DQEBCwUAA4IBAQAUNaHE9qax bO9cUJrG4XQCDCq2/5bjlT4uBLGZh72tBH0nDrtL5hIv5RiCM5mgXCzfuO8QYMEp j/FBLNJGPWoHQR/lFzfQUZEUn/+PFGcYv284sKvilMLe4akrU2jgt8gwjjvNgWQW qb+P2/yfdraf22Z1zykbbcTgXJN1A1D4qdtbE/f3gLTKHX9wxowaQuq35l9YkbA5 BLFUreXCh8BcFDaVeg3YmakadXiAEbbuhMWM6wJeSv9IozaUZK6mL52r+SA038hG 5biL+b0H7QW5W0cMGCM+866eqrNi91873WLa6jsioipFStZnfKIS9gvqFTI2RhhT m6gv5G/U29Vq -----END CERTIFICATE-----Generated at Mon Jan 19 21:43:10 2026 by rpki-client