This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/8F8FBABCDF1511F0B37EABD4606F56BC.roa File: 8F8FBABCDF1511F0B37EABD4606F56BC.roa (raw, json) Hash identifier: u/OLPGMElabZPW4UyiGfUDoV0QmUcfwqYaVveMP9c7o= Subject key identifier: 74:AC:23:36:11:5F:2A:40:F1:93:D2:3F:21:2A:DB:20:4D:AE:04:C7 Certificate issuer: /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D Certificate serial: 09 Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/8F8FBABCDF1511F0B37EABD4606F56BC.roa Signing time: Mon 22 Dec 2025 09:06:54 +0000 ROA not before: Mon 22 Dec 2025 09:06:54 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 154418 IP address blocks: 2402:3ea0:4000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D Validity Not Before: Dec 22 09:06:54 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69490a2e-537c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:26:d0:bf:33:2b:4a:50:a2:b5:94:7e:85: d6:46:81:a6:d2:a7:a8:ae:fe:2e:3e:49:b6:11:7c: bf:55:5d:78:b9:9d:bc:65:6f:b2:c8:39:e7:e6:08: 50:fe:b7:48:00:ab:f3:9f:c3:22:44:75:fd:d0:3f: 95:d5:37:02:be:4d:ca:7d:66:c2:05:47:ea:58:cc: a4:77:c5:4d:e3:9d:1b:16:09:0b:4f:72:24:61:6e: ec:b5:b0:0f:e1:25:5c:bb:84:4e:ae:f7:3a:44:43: 5f:73:41:14:6b:27:f4:03:22:f8:1f:3e:cc:7b:7c: 20:7c:5a:49:80:48:0c:c5:da:ff:6f:d8:ae:ce:02: b2:a0:5f:51:a8:e3:94:df:a0:a3:06:b4:79:8a:a2: 7e:e8:ab:94:ca:db:08:32:b9:f0:77:25:84:50:45: 7c:98:b4:d3:bb:c1:83:3d:bd:09:35:60:2e:7b:9e: 42:66:f7:a1:5e:5d:bf:a5:9d:49:2a:33:76:ea:8d: fa:36:3d:7f:28:e2:7e:83:74:ab:d1:0a:ad:f5:05: 84:69:cc:35:4d:2a:18:37:ac:d1:00:10:7f:93:f9: 11:17:05:2e:11:c8:49:6a:11:65:94:0c:90:cd:31: e9:5e:d5:79:ee:8a:1a:ce:d4:8a:4e:b4:5c:7b:01: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AC:23:36:11:5F:2A:40:F1:93:D2:3F:21:2A:DB:20:4D:AE:04:C7 X509v3 Authority Key Identifier: keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/8F8FBABCDF1511F0B37EABD4606F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3ea0:4000::/35 Signature Algorithm: sha256WithRSAEncryption 16:23:86:b8:59:3b:72:74:ea:39:8b:04:95:a6:83:64:92:2c: 36:61:49:7e:cb:a7:12:d1:a0:82:2c:2f:8d:05:b0:34:b6:cd: 2c:e5:e7:40:4e:67:2d:dc:06:f7:65:7c:1f:78:ad:1c:e8:84: d4:5f:46:dd:25:ba:12:6e:f0:3f:55:1a:73:84:e7:ba:2a:65: 86:18:19:9f:9a:ae:17:9c:cc:af:0e:41:da:5b:f5:89:97:e1: c7:00:4c:90:ef:c1:b4:26:b9:f9:7c:e9:6a:03:10:c3:f1:8b: 6f:d0:74:d1:d7:f9:5f:d0:24:24:64:e0:e0:1b:f4:d5:eb:06: b5:c5:ca:e3:dc:b5:ac:c6:c4:18:90:bb:66:30:e7:74:43:96: e2:e5:e2:85:00:b9:ae:ec:c4:d9:30:b8:eb:17:51:98:18:63: 34:aa:28:09:83:45:7c:64:ef:0c:63:83:48:41:33:66:f0:5e: 17:31:65:de:33:5c:d5:00:63:b6:af:32:3a:4b:3f:c2:6b:8e: db:84:e0:d6:c9:27:90:dc:cc:12:38:59:0f:6c:0f:72:d2:27: 19:8c:f3:e3:a6:09:99:57:7f:55:05:b4:04:b3:cb:c9:fa:12: 0b:6a:6b:14:f5:b3:cb:4f:32:9e:58:d8:b3:40:51:b6:7e:23: e6:28:35:8b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkJGMzExMC8GA1UEBRMoQjkxMzM0N0U2QjlENzdBOTFCQjA3NDgyQUU0NUNENzQx MTZCMDIyRDAeFw0yNTEyMjIwOTA2NTRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NDkwYTJlLTUzN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm5SbQvzMrSlCitZR+hdZGgabSp6iu/i4+SbYRfL9VXXi5nbxlb7LIOefmCFD+ t0gAq/OfwyJEdf3QP5XVNwK+Tcp9ZsIFR+pYzKR3xU3jnRsWCQtPciRhbuy1sA/h JVy7hE6u9zpEQ19zQRRrJ/QDIvgfPsx7fCB8WkmASAzF2v9v2K7OArKgX1Go45Tf oKMGtHmKon7oq5TK2wgyufB3JYRQRXyYtNO7wYM9vQk1YC57nkJm96FeXb+lnUkq M3bqjfo2PX8o4n6DdKvRCq31BYRpzDVNKhg3rNEAEH+T+REXBS4RyElqEWWUDJDN Mele1XnuihrO1IpOtFx7AU99AgMBAAGjggKXMIICkzAdBgNVHQ4EFgQUdKwjNhFf KkDxk9I/ISrbIE2uBMcwHwYDVR0jBBgwFoAUuRM0fmudd6kbsHSCrkXNdBFrAi0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGQkYzL0VFNjI5Njk0RDY2 MDExRjBCMkE1NEI5NTBCQjQzRTEzL3VSTTBmbXVkZDZrYnNIU0Nya1hOZEJGckFp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdVJNMGZtdWRkNmtic0hTQ3JrWE5kQkZyQWkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkJGMy9FRTYyOTY5NEQ2NjAxMUYwQjJBNTRCOTUwQkI0M0UxMy84RjhGQkFCQ0RG MTUxMUYwQjM3RUFCRDQ2MDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAhBggrBgEFBQcBBwEB/wQS MBAwDgQCAAIwCAMGBSQCPqBAMA0GCSqGSIb3DQEBCwUAA4IBAQAWI4a4WTtydOo5 iwSVpoNkkiw2YUl+y6cS0aCCLC+NBbA0ts0s5edATmct3Ab3ZXwfeK0c6ITUX0bd JboSbvA/VRpzhOe6KmWGGBmfmq4XnMyvDkHaW/WJl+HHAEyQ78G0Jrn5fOlqAxDD 8Ytv0HTR1/lf0CQkZODgG/TV6wa1xcrj3LWsxsQYkLtmMOd0Q5bi5eKFALmu7MTZ MLjrF1GYGGM0qigJg0V8ZO8MY4NIQTNm8F4XMWXeM1zVAGO2rzI6Sz/Ca47bhODW ySeQ3MwSOFkPbA9y0icZjPPjpgmZV39VBbQEs8vJ+hILamsU9bPLTzKeWNizQFG2 fiPmKDWL -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:25 2025 by rpki-client