This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/FDEA040CE47611F0AE86B87D3F6F56BC.roa File: FDEA040CE47611F0AE86B87D3F6F56BC.roa (raw, json) Hash identifier: 2MZi+hpvz3YYAhpdUGbLpVDRl+NfyQMYJTbUBbvB9kg= Subject key identifier: 7A:D8:CD:1F:23:C7:32:C7:A0:7B:35:88:D9:E0:0E:6C:BD:6D:93:83 Certificate issuer: /CN=A9193C07/serialNumber=E71C07F165E7CEAC5967066416E7A5272698EF0E Certificate serial: 04 Authority key identifier: E7:1C:07:F1:65:E7:CE:AC:59:67:06:64:16:E7:A5:27:26:98:EF:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xwH8WXnzqxZZwZkFuelJyaY7w4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/FDEA040CE47611F0AE86B87D3F6F56BC.roa Signing time: Mon 29 Dec 2025 05:30:14 +0000 ROA not before: Mon 29 Dec 2025 05:30:14 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 154462 IP address blocks: 2402:4320::/32 maxlen: 32 2402:4320:1::/48 maxlen: 48 2402:4320:2::/48 maxlen: 48 2402:4320:3::/48 maxlen: 48 2402:4320:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.crl rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xwH8WXnzqxZZwZkFuelJyaY7w4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 07:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C07, serialNumber=E71C07F165E7CEAC5967066416E7A5272698EF0E Validity Not Before: Dec 29 05:30:14 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=695211e6-33eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:ef:a1:41:a6:64:4e:46:25:b0:e5:3a:3c: 3d:06:18:e3:aa:05:06:ab:6e:8c:91:fd:4c:3f:22: 74:08:bd:57:86:1b:45:7f:62:cf:3c:82:44:8f:c3: 93:cc:41:96:5b:0e:96:41:1b:bd:99:76:f7:a3:8b: 2b:42:3e:bf:13:0c:44:51:3a:6c:f9:5d:1e:7e:e3: 0a:7e:cb:10:8a:c5:29:26:ae:55:3b:fc:68:66:a9: e9:37:c0:14:45:38:7a:09:2b:00:3f:e0:d3:a7:49: 46:72:10:e5:60:3e:c0:75:31:fb:fc:2c:4b:09:f8: e8:76:69:c6:7c:aa:ed:02:2c:be:4d:6a:5e:cb:a3: 93:c6:ca:c4:48:25:bf:96:42:42:93:fb:74:53:3d: 71:bb:c4:bc:d9:a3:bc:77:b9:b7:53:3c:5a:3a:15: 5f:5f:ea:31:d1:0d:d9:f4:26:ad:f4:b1:99:a7:40: b7:64:39:cd:77:1f:7c:a9:5c:d1:f7:e7:85:65:56: 62:93:6d:c1:be:ae:28:08:08:b1:8f:fa:37:5e:74: a1:b9:4f:b3:e2:33:27:0b:d8:ae:1f:34:b8:f0:51: 3e:40:59:85:84:c3:1a:7d:1f:f5:60:e9:c6:6f:6a: 6d:7e:8e:5b:41:d0:cb:e6:90:02:c3:24:27:7e:78: 16:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D8:CD:1F:23:C7:32:C7:A0:7B:35:88:D9:E0:0E:6C:BD:6D:93:83 X509v3 Authority Key Identifier: keyid:E7:1C:07:F1:65:E7:CE:AC:59:67:06:64:16:E7:A5:27:26:98:EF:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/5xwH8WXnzqxZZwZkFuelJyaY7w4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xwH8WXnzqxZZwZkFuelJyaY7w4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C07/EA7A0FEEE47511F0BD6001353F6F56BC/FDEA040CE47611F0AE86B87D3F6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:4320::/32 Signature Algorithm: sha256WithRSAEncryption 34:50:cf:ab:f7:9c:d4:41:df:ae:44:6e:b8:bb:31:79:cb:62: 61:43:e6:bc:66:d4:8e:01:6e:be:e8:81:4d:02:dc:74:4c:98: b8:86:c6:12:84:ff:99:d9:c4:45:38:e8:49:58:e6:02:00:73: 0c:fe:06:4c:26:0a:51:d9:f2:48:13:08:ee:cd:19:60:a2:5d: 9a:ae:38:a7:b4:ad:66:cc:7b:a4:db:6f:bb:0f:e4:26:db:a6: b5:9a:f6:6a:48:55:2f:c6:3a:92:e8:24:0a:be:1b:43:a4:75: 3d:13:e2:fa:b3:77:58:13:38:cc:12:11:56:90:b3:ec:58:a0: 65:37:90:63:b2:5a:76:b2:6d:d9:f0:f1:68:6a:3f:26:18:9a: ef:6e:f8:8d:63:a4:bb:f0:1d:63:62:6b:4b:9f:db:d8:f5:96: 0d:03:1c:7e:71:be:07:49:d3:8d:f1:5f:53:1c:49:95:c1:19: 82:93:62:93:8f:68:7f:3c:5e:e0:79:bb:0d:88:9f:3a:0f:d7: ab:8e:fc:0e:d3:77:c4:9e:ea:8f:65:cc:fe:95:91:91:3d:c8: 35:27:d9:50:39:c2:25:64:65:cc:a7:87:18:29:15:eb:38:4e: 16:aa:38:65:f9:db:70:a6:f6:84:7d:bb:ad:af:bb:a3:e8:c7: d0:20:aa:b4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE5 M0MwNzExMC8GA1UEBRMoRTcxQzA3RjE2NUU3Q0VBQzU5NjcwNjY0MTZFN0E1Mjcy Njk4RUYwRTAeFw0yNTEyMjkwNTMwMTRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NTIxMWU2LTMzZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwRu+hQaZkTkYlsOU6PD0GGOOqBQarboyR/Uw/InQIvVeGG0V/Ys88gkSPw5PM QZZbDpZBG72ZdvejiytCPr8TDERROmz5XR5+4wp+yxCKxSkmrlU7/Ghmqek3wBRF OHoJKwA/4NOnSUZyEOVgPsB1Mfv8LEsJ+Oh2acZ8qu0CLL5Nal7Lo5PGysRIJb+W QkKT+3RTPXG7xLzZo7x3ubdTPFo6FV9f6jHRDdn0Jq30sZmnQLdkOc13H3ypXNH3 54VlVmKTbcG+rigICLGP+jdedKG5T7PiMycL2K4fNLjwUT5AWYWEwxp9H/Vg6cZv am1+jltB0MvmkALDJCd+eBbfAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUetjNHyPH MsegezWI2eAObL1tk4MwHwYDVR0jBBgwFoAU5xwH8WXnzqxZZwZkFuelJyaY7w4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQzA3L0VBN0EwRkVFRTQ3 NTExRjBCRDYwMDEzNTNGNkY1NkJDLzV4d0g4V1huenF4Wlp3WmtGdWVsSnlhWTd3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXh3SDhXWG56cXhaWndaa0Z1ZWxKeWFZN3c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0MwNy9FQTdBMEZFRUU0NzUxMUYwQkQ2MDAxMzUzRjZGNTZCQy9GREVBMDQwQ0U0 NzYxMUYwQUU4NkI4N0QzRjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCQyAwDQYJKoZIhvcNAQELBQADggEBADRQz6v3nNRB365E bri7MXnLYmFD5rxm1I4Bbr7ogU0C3HRMmLiGxhKE/5nZxEU46ElY5gIAcwz+Bkwm ClHZ8kgTCO7NGWCiXZquOKe0rWbMe6Tbb7sP5CbbprWa9mpIVS/GOpLoJAq+G0Ok dT0T4vqzd1gTOMwSEVaQs+xYoGU3kGOyWnaybdnw8WhqPyYYmu9u+I1jpLvwHWNi a0uf29j1lg0DHH5xvgdJ043xX1McSZXBGYKTYpOPaH88XuB5uw2InzoP16uO/A7T d8Se6o9lzP6VkZE9yDUn2VA5wiVkZcynhxgpFes4ThaqOGX523Cm9oR9u62vu6Po x9AgqrQ= -----END CERTIFICATE-----Generated at Thu Jan 8 09:14:08 2026 by rpki-client