This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/0D83DBA8BE5811F0B151FF78C4F9AE02.roa File: 0D83DBA8BE5811F0B151FF78C4F9AE02.roa (raw, json) Hash identifier: ciBVXi3NuZ9007zCdd3QAQNC4sYFdA5GkfUuea4GHXA= Subject key identifier: 04:7F:E4:C3:34:8B:33:F5:01:00:51:AA:C4:7D:EE:B9:9F:F6:BB:28 Certificate issuer: /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Certificate serial: 57 Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/0D83DBA8BE5811F0B151FF78C4F9AE02.roa Signing time: Mon 10 Nov 2025 17:09:44 +0000 ROA not before: Mon 10 Nov 2025 17:09:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401075 IP address blocks: 2402:1920:f800::/38 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE Validity Not Before: Nov 10 17:09:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69121c58-63b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:90:52:c6:38:d7:00:0c:5a:b8:cf:69:3f: 3c:5d:4e:9a:d3:19:49:09:51:6f:94:05:e6:4a:91: ab:cf:0b:1b:10:44:8e:2b:67:52:30:7c:42:fa:89: e4:c4:d7:b2:92:b8:84:da:1a:2d:7c:1c:9f:e9:44: f5:5c:2c:2e:14:54:57:99:df:5c:79:c3:be:c2:b4: 00:0a:75:7b:ae:2c:05:0b:68:d1:e0:21:23:88:97: 05:2a:b9:00:ac:b4:67:1f:8b:52:a4:93:68:e6:bf: fd:18:e0:df:d8:45:aa:39:a9:40:9b:7c:94:df:69: 8e:49:bc:dd:d7:6a:22:8f:9e:e8:59:3e:7d:f9:35: b8:b3:0c:ce:b8:65:99:ab:32:ac:38:2e:44:80:05: 65:28:2c:c0:65:b4:b0:63:65:5c:87:65:00:ba:46: e6:b3:97:a2:fa:1a:8f:a6:ec:d8:c8:10:3f:46:17: 9e:46:38:f3:91:38:5f:a1:b9:4b:03:68:2b:a7:0a: e7:9e:2c:04:06:51:f7:dc:91:37:7f:c6:21:5a:83: f8:43:17:17:46:64:3a:68:14:71:c2:a6:31:91:28: 68:66:2a:d4:0a:7e:02:9f:28:cb:f9:49:c7:e7:2f: 99:83:c3:2f:57:d7:65:7c:d9:44:0f:c3:3e:42:20: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7F:E4:C3:34:8B:33:F5:01:00:51:AA:C4:7D:EE:B9:9F:F6:BB:28 X509v3 Authority Key Identifier: keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/0D83DBA8BE5811F0B151FF78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:1920:f800::/38 Signature Algorithm: sha256WithRSAEncryption 79:44:e9:79:a1:48:d8:d0:e3:7b:a6:5f:78:e9:c9:02:ad:3c: 5b:4c:9f:4d:59:55:b5:36:29:c9:45:80:7f:07:25:21:dd:69: 69:39:7b:ef:a3:07:36:7f:cb:14:30:83:99:df:e9:90:14:70: 87:5e:b4:61:98:22:32:2f:33:fb:55:d0:44:26:c6:87:b7:61: 2c:dc:6c:bf:d0:84:1c:c9:a2:42:ac:a5:70:7b:2e:60:bb:01: e1:9b:ca:ea:a1:67:aa:0c:d2:8e:db:dc:9a:74:01:97:3f:58: 40:85:97:39:cc:2a:5c:c7:5b:c7:72:52:41:fa:b0:02:38:9d: 47:7b:f0:e1:b6:03:a5:f5:1e:f1:4f:2f:f9:e2:cb:d0:dd:6f: 2d:ad:cc:f6:b8:f7:96:73:8c:60:a5:ec:7d:71:4e:fb:a0:1c: 3d:95:17:d6:5c:ac:13:76:43:44:9a:03:7e:b9:4e:6a:66:98: 06:0c:19:bf:f4:d7:d4:3d:a1:22:8f:07:46:7e:d6:39:73:8a: 72:ac:25:e9:49:eb:1f:57:b8:c1:11:22:0d:be:30:07:db:3d: c2:1e:2f:87:3b:eb:62:13:35:2c:f7:5e:7f:5e:81:4e:82:d9: a1:96:c9:11:58:5b:6a:50:52:2c:20:8b:77:78:f2:cf:32:af: de:9e:f0:0e -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzVCQzExMC8GA1UEBRMoQTE0NTI0MUQ5ODMwQUYyNEE3MTU2NzM1MTI1NUVDOEU3 RUQ1M0VGRTAeFw0yNTExMTAxNzA5NDRaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MTIxYzU4LTYzYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4mpBSxjjXAAxauM9pPzxdTprTGUkJUW+UBeZKkavPCxsQRI4rZ1IwfEL6ieTE 17KSuITaGi18HJ/pRPVcLC4UVFeZ31x5w77CtAAKdXuuLAULaNHgISOIlwUquQCs tGcfi1Kkk2jmv/0Y4N/YRao5qUCbfJTfaY5JvN3XaiKPnuhZPn35NbizDM64ZZmr Mqw4LkSABWUoLMBltLBjZVyHZQC6Ruazl6L6Go+m7NjIED9GF55GOPOROF+huUsD aCunCueeLAQGUffckTd/xiFag/hDFxdGZDpoFHHCpjGRKGhmKtQKfgKfKMv5Scfn L5mDwy9X12V82UQPwz5CIPvbAgMBAAGjggKXMIICkzAdBgNVHQ4EFgQUBH/kwzSL M/UBAFGqxH3uuZ/2uygwHwYDVR0jBBgwFoAUoUUkHZgwrySnFWc1ElXsjn7VPv4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNUJDLzcxRTVEOEJFNTlG MjExRjBCNEZBRTk1RkM0RjlBRTAyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1VVa0haZ3dyeVNuRldjMUVsWHNqbjdWUHY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzVCQy83MUU1RDhCRTU5RjIxMUYwQjRGQUU5NUZDNEY5QUUwMi8wRDgzREJBOEJF NTgxMUYwQjE1MUZGNzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAhBggrBgEFBQcBBwEB/wQS MBAwDgQCAAIwCAMGAiQCGSD4MA0GCSqGSIb3DQEBCwUAA4IBAQB5ROl5oUjY0ON7 pl946ckCrTxbTJ9NWVW1NinJRYB/ByUh3WlpOXvvowc2f8sUMIOZ3+mQFHCHXrRh mCIyLzP7VdBEJsaHt2Es3Gy/0IQcyaJCrKVwey5guwHhm8rqoWeqDNKO29yadAGX P1hAhZc5zCpcx1vHclJB+rACOJ1He/DhtgOl9R7xTy/54svQ3W8trcz2uPeWc4xg pex9cU77oBw9lRfWXKwTdkNEmgN+uU5qZpgGDBm/9NfUPaEijwdGftY5c4pyrCXp SesfV7jBESINvjAH2z3CHi+HO+tiEzUs915/XoFOgtmhlskRWFtqUFIsIIt3ePLP Mq/envAO -----END CERTIFICATE-----Generated at Fri Dec 5 18:48:06 2025 by rpki-client