This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/BAFD2318E01B11F088B1D0FE636F56BC.roa File: BAFD2318E01B11F088B1D0FE636F56BC.roa (raw, json) Hash identifier: SsGtmabLdMPrBGy68Dof0Pux/JtXNt+BMoA3i1gZPZA= Subject key identifier: 58:8B:BA:CC:8E:EF:60:38:F7:59:71:BB:95:E8:0D:63:3C:B3:86:9D Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 014D Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/BAFD2318E01B11F088B1D0FE636F56BC.roa Signing time: Tue 23 Dec 2025 16:23:35 +0000 ROA not before: Tue 23 Dec 2025 16:23:35 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152689 IP address blocks: 2001:df3:aa40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Dec 23 16:23:35 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=694ac207-fd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:fe:c9:e8:be:09:aa:41:6f:32:ab:ac:61: dd:05:22:64:1c:33:91:56:5b:e6:51:18:03:c2:99: e1:62:0a:b7:be:b6:ae:9b:a1:d0:c9:0b:c3:ad:26: 34:d2:16:43:4f:76:60:23:f7:6a:30:76:ed:2b:65: 7a:34:44:a7:bf:01:a8:09:53:31:be:99:2f:ce:35: 11:01:e6:79:36:dd:66:0f:51:c7:f5:6b:ff:8a:3a: 84:4d:30:8f:0a:a5:f6:eb:b1:52:0d:9e:47:52:81: f6:be:e9:03:f3:8a:c5:73:98:a0:5a:16:a6:5d:37: c2:63:ef:fe:a1:ca:06:9d:21:bf:02:fc:65:80:ed: d8:57:63:12:71:77:fe:9c:64:8c:9c:d5:7b:f9:0e: a5:67:ed:35:22:73:1e:52:c2:aa:11:21:7e:82:4f: 67:0d:67:5b:e4:37:3d:93:85:c5:74:b8:c1:80:e2: b8:51:e4:ea:33:80:f8:46:29:47:70:48:ad:8e:7f: 15:5d:51:b5:27:e3:97:da:1e:28:a2:1c:94:21:9a: d4:cb:d2:7b:dc:f0:bf:f3:c2:2c:67:99:60:80:4f: 35:1c:c4:47:14:46:dc:b2:c7:87:f2:75:2f:a3:e2: e3:e3:55:84:c2:57:14:63:78:24:0e:99:8c:c9:91: b0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8B:BA:CC:8E:EF:60:38:F7:59:71:BB:95:E8:0D:63:3C:B3:86:9D X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/BAFD2318E01B11F088B1D0FE636F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:aa40::/48 Signature Algorithm: sha256WithRSAEncryption 81:85:df:1d:28:6c:97:27:2c:7f:e6:dc:86:c6:c8:4a:d4:01: 48:d0:4d:4d:7b:b1:0c:37:ae:4f:1a:f3:20:fe:20:41:39:64: 95:0a:a8:fa:c0:27:fa:63:c6:4e:c1:23:08:4c:4e:e7:38:ba: 41:d8:6c:11:3e:01:2a:90:a0:7c:ab:6d:4e:22:ab:22:1a:df: a1:4b:89:7b:50:11:78:32:63:bd:84:97:4d:cd:de:5a:e1:35: 10:43:2a:46:a6:e1:3d:0e:23:74:f7:e9:ee:b5:77:6c:47:20: 7f:68:97:b6:78:52:70:43:dc:a8:41:c0:9b:6d:d3:da:f9:c5: 3d:ee:e7:61:7a:a0:4b:42:01:a2:20:1c:b8:b0:a7:f9:65:b4: 17:0c:3d:d9:bf:a0:b1:b6:22:68:76:4a:d7:05:3a:51:dc:46: 85:28:14:dd:0d:06:7a:eb:1e:4d:4b:96:8b:5c:14:b4:77:c6: 2b:d2:cc:53:07:3b:8d:d6:06:5f:ba:b0:84:71:fe:18:c1:87: 84:b2:66:50:c5:b8:4a:56:02:db:92:df:64:69:2c:0e:ba:04: 51:39:02:18:08:03:56:9a:e8:53:a0:d4:05:75:b3:f5:d2:9c: 56:0c:bc:56:e1:04:46:50:4c:bf:0c:74:0f:c0:23:e2:1c:8d: 25:61:0c:cd -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjUxMjIzMTYyMzM1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTRhYzIwNy1mZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybb+yei+CapBbzKrrGHdBSJkHDORVlvmURgDwpnhYgq3vraum6HQyQvDrSY0 0hZDT3ZgI/dqMHbtK2V6NESnvwGoCVMxvpkvzjURAeZ5Nt1mD1HH9Wv/ijqETTCP CqX267FSDZ5HUoH2vukD84rFc5igWhamXTfCY+/+ocoGnSG/AvxlgO3YV2MScXf+ nGSMnNV7+Q6lZ+01InMeUsKqESF+gk9nDWdb5Dc9k4XFdLjBgOK4UeTqM4D4RilH cEitjn8VXVG1J+OX2h4oohyUIZrUy9J73PC/88IsZ5lggE81HMRHFEbcsseH8nUv o+Lj41WEwlcUY3gkDpmMyZGwMwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFiLusyO 72A491lxu5XoDWM8s4adMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTgyMkYvNTg0MkQzMDRGN0YwMTFFRTk4QzhDOTJCQzRGOUFFMDIvQkFGRDIzMThF MDFCMTFGMDg4QjFEMEZFNjM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ3zqkAwDQYJKoZIhvcNAQELBQADggEBAIGF3x0obJcn LH/m3IbGyErUAUjQTU17sQw3rk8a8yD+IEE5ZJUKqPrAJ/pjxk7BIwhMTuc4ukHY bBE+ASqQoHyrbU4iqyIa36FLiXtQEXgyY72El03N3lrhNRBDKkam4T0OI3T36e61 d2xHIH9ol7Z4UnBD3KhBwJtt09r5xT3u52F6oEtCAaIgHLiwp/lltBcMPdm/oLG2 Imh2StcFOlHcRoUoFN0NBnrrHk1LlotcFLR3xivSzFMHO43WBl+6sIRx/hjBh4Sy ZlDFuEpWAtuS32RpLA66BFE5AhgIA1aa6FOg1AV1s/XSnFYMvFbhBEZQTL8MdA/A I+IcjSVhDM0= -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:11 2026 by rpki-client