This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3958EEC642BB11F0B449BB81C4F9AE02.roa File: 3958EEC642BB11F0B449BB81C4F9AE02.roa (raw, json) Hash identifier: K1TsrB7lXsH/fW2abyndjpFmYzXZ1LPW0tQouW6VlW4= Subject key identifier: 7D:F5:9E:69:2E:9F:99:9C:63:7A:11:CB:63:AC:0F:C4:E2:8E:25:DC Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Certificate serial: A2 Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3958EEC642BB11F0B449BB81C4F9AE02.roa Signing time: Sat 13 Dec 2025 06:25:23 +0000 ROA not before: Sat 13 Dec 2025 06:25:23 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132894 IP address blocks: 2001:df5:acc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Validity Not Before: Dec 13 06:25:23 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=693d06d3-3637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:76:0d:24:50:9a:85:02:a6:97:ba:d6:4e: 49:7e:8e:46:04:fa:9d:d0:ec:4b:b6:b5:ca:39:fc: a5:3e:98:c5:23:3f:90:e1:86:ba:9c:92:7a:88:cc: ce:be:55:0d:e0:2d:cb:2b:c6:17:02:ac:94:25:e3: 96:81:ec:e8:ad:c0:89:bb:1a:5e:88:77:e4:fc:af: 7e:43:7c:25:8f:70:cc:91:1b:59:ad:0a:7c:9b:aa: d1:1b:9f:6f:5d:3e:76:fa:11:76:35:59:7b:78:58: ac:1b:9a:28:32:6f:76:db:b9:9c:10:eb:09:ab:73: 8e:44:60:6f:1d:89:c1:f3:25:5d:c9:50:2d:85:aa: 42:13:b0:56:c9:11:b7:f0:43:18:d4:a6:64:17:a9: cb:f1:2e:2c:15:1a:f2:f0:92:69:57:35:75:fb:83: f0:ac:ef:4c:96:b0:5f:12:b2:f4:aa:50:5c:86:0d: 1f:a6:85:5d:b2:f7:98:11:26:08:5c:56:35:5f:1a: 96:0c:69:b6:ab:a7:08:6b:e1:89:ba:f1:13:f8:90: a4:e7:14:8c:49:84:a7:0a:db:66:ac:4c:18:5d:5a: e9:21:8d:a9:47:6b:3c:ee:47:0e:fc:03:1f:38:78: 6b:65:8b:30:72:04:b8:65:15:14:a6:ea:4d:80:92: e7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F5:9E:69:2E:9F:99:9C:63:7A:11:CB:63:AC:0F:C4:E2:8E:25:DC X509v3 Authority Key Identifier: keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3958EEC642BB11F0B449BB81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:acc0::/48 Signature Algorithm: sha256WithRSAEncryption 20:42:2d:a5:e9:46:7f:3b:d9:5e:4d:82:d9:5d:47:f8:68:39: 83:6c:ff:36:53:b1:80:af:23:ff:1b:e8:ae:a0:b3:8f:96:dc: 77:f8:b7:73:75:68:16:68:8d:8a:5e:1b:1f:ca:00:f3:ac:3c: 51:b3:1e:c1:9f:e0:a9:e7:d5:12:4e:f3:fc:9e:69:6d:e6:2e: 55:01:3b:a9:26:f2:25:3c:ed:c0:5f:cb:95:b6:7a:44:9b:cb: 54:93:5b:bd:2d:e8:c6:d1:a8:61:3c:7a:a8:b6:d6:50:19:ae: 84:67:4e:96:19:30:bc:cd:5b:71:e0:2e:4e:71:8a:ff:92:8d: 11:39:73:c7:05:2c:d2:7d:ba:fb:44:e2:ca:4e:a3:2f:b0:d2: a3:54:04:e3:29:b2:e2:26:86:6c:b8:51:92:1d:33:48:5b:30: 8d:3b:bc:80:bb:02:2c:cd:a7:e1:ae:4f:f6:ea:1b:90:af:53: af:c8:b1:c7:54:a1:86:1c:50:e2:f8:37:90:44:06:8f:36:13: a2:56:c9:27:0a:da:12:55:d5:10:df:e4:64:0c:da:41:34:a4: f3:2f:fa:7d:ca:19:98:23:08:e7:cd:6f:71:26:f5:e2:25:6f: f9:9a:42:24:2a:c7:bd:38:b1:ff:92:f7:94:fb:88:1b:21:e2: d6:75:96:eb -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcyNzMxMTAvBgNVBAUTKEREQTQ5RjQxRjYxOEE1NUY5Q0E3Q0ZDNTVCQUVBN0I2 MTZEOTU3NjIwHhcNMjUxMjEzMDYyNTIzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNkMDZkMy0zNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkhV2DSRQmoUCppe61k5Jfo5GBPqd0OxLtrXKOfylPpjFIz+Q4Ya6nJJ6iMzO vlUN4C3LK8YXAqyUJeOWgezorcCJuxpeiHfk/K9+Q3wlj3DMkRtZrQp8m6rRG59v XT52+hF2NVl7eFisG5ooMm9227mcEOsJq3OORGBvHYnB8yVdyVAthapCE7BWyRG3 8EMY1KZkF6nL8S4sFRry8JJpVzV1+4PwrO9MlrBfErL0qlBchg0fpoVdsveYESYI XFY1XxqWDGm2q6cIa+GJuvET+JCk5xSMSYSnCttmrEwYXVrpIY2pR2s87kcO/AMf OHhrZYswcgS4ZRUUpupNgJLn/QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFH31nmku n5mcY3oRy2OsD8TijiXcMB8GA1UdIwQYMBaAFN2kn0H2GKVfnKfPxVuup7YW2Vdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GQzUwNTAwRUU3 NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBWLWNwOF9GVzY2bnRoYlpW MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhU2ZRZllZcFYtY3A4X0ZXNjZudGhiWlYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcyNzMvRkM1MDUwMEVFNzcxMTFFRjlERkJERDUwQzRGOUFFMDIvMzk1OEVFQzY0 MkJCMTFGMEI0NDlCQjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ31rMAwDQYJKoZIhvcNAQELBQADggEBACBCLaXpRn87 2V5NgtldR/hoOYNs/zZTsYCvI/8b6K6gs4+W3Hf4t3N1aBZojYpeGx/KAPOsPFGz HsGf4Knn1RJO8/yeaW3mLlUBO6km8iU87cBfy5W2ekSby1STW70t6MbRqGE8eqi2 1lAZroRnTpYZMLzNW3HgLk5xiv+SjRE5c8cFLNJ9uvtE4spOoy+w0qNUBOMpsuIm hmy4UZIdM0hbMI07vIC7AizNp+GuT/bqG5CvU6/IscdUoYYcUOL4N5BEBo82E6JW yScK2hJV1RDf5GQM2kE0pPMv+n3KGZgjCOfNb3Em9eIlb/maQiQqx704sf+S95T7 iBsh4tZ1lus= -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:26 2025 by rpki-client