This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/1BB90D46DABA11F0A08D9BA06CD3641D.roa File: 1BB90D46DABA11F0A08D9BA06CD3641D.roa (raw, json) Hash identifier: W208+/AZnsORqdbbJvVBW/6jMidrM1a1vXE+rl2w2zg= Subject key identifier: 92:91:00:91:6E:3C:FB:50:04:E7:A0:EE:70:E7:6C:3E:11:FC:8A:A3 Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Certificate serial: 02E1 Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/1BB90D46DABA11F0A08D9BA06CD3641D.roa Signing time: Tue 16 Dec 2025 20:02:11 +0000 ROA not before: Tue 16 Dec 2025 20:02:11 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 153606 IP address blocks: 2402:3b60:8006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Validity Not Before: Dec 16 20:02:11 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6941bac3-bc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:9d:74:5e:03:16:3d:63:96:74:80:79:04: 63:70:39:e0:0c:fb:03:03:ba:0b:77:5c:6b:75:cc: 02:dd:3a:a2:59:58:f0:9f:f4:7e:17:0a:f1:3c:ab: 25:0d:23:4f:29:06:50:d8:23:02:13:f8:01:45:91: 75:1f:fd:ee:92:4e:80:a3:83:2a:e2:73:e1:a0:a8: e5:c8:6f:d4:c4:fd:42:e7:68:81:22:95:f1:b4:08: 8f:36:d7:3f:52:bd:60:77:ca:ac:a1:3a:ec:67:0d: e5:c4:a7:47:43:b4:61:a6:c6:8d:87:af:6a:2c:07: b3:c4:ea:b4:d7:ba:ce:f8:cc:60:10:dd:b1:62:07: 79:9a:ad:e4:4f:b9:90:3a:0c:86:1a:ef:33:b6:af: aa:48:5a:08:b5:66:05:c6:d3:02:ce:7a:7c:4e:71: 50:40:ab:d1:5c:c0:5d:f1:72:e6:75:6c:2a:55:e8: 47:f0:3d:61:29:02:dc:59:31:3c:dd:7e:fa:64:30: e9:dd:d0:4e:e1:3f:ce:f0:0a:cf:45:43:4e:5b:76: 2a:31:5d:1a:ed:19:05:a6:a5:5d:cb:c4:a2:33:b7: cc:e3:93:84:83:ef:79:85:3b:c7:8b:3f:d3:23:7c: 66:a3:4f:ef:6b:29:52:60:df:58:69:a3:78:97:17: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:91:00:91:6E:3C:FB:50:04:E7:A0:EE:70:E7:6C:3E:11:FC:8A:A3 X509v3 Authority Key Identifier: keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/1BB90D46DABA11F0A08D9BA06CD3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3b60:8006::/48 Signature Algorithm: sha256WithRSAEncryption a3:0b:51:92:af:4a:f9:66:93:57:3c:d5:de:64:0b:d5:b0:c0: 9f:1a:77:22:7d:d5:81:7f:6c:a1:e4:0d:40:61:6f:f4:f8:96: 9e:78:86:a3:e4:2a:90:a9:36:19:65:7b:85:de:37:0b:a9:18: 32:83:24:a9:f0:35:19:1e:a8:0c:ae:c7:cd:05:65:9a:38:81: 92:6a:d8:d6:89:79:01:45:ed:5c:6e:49:f5:f4:80:4f:02:5d: fc:2f:38:94:f8:78:40:2d:41:20:c8:88:62:1e:d5:7b:48:0c: f4:28:af:89:42:f2:58:f0:be:6e:20:6a:62:39:04:56:d1:ba: 04:b2:f1:8c:cc:1d:66:4b:b6:ba:20:f6:ea:98:7f:46:ff:ff: 67:0e:86:86:3a:da:45:b2:6e:45:68:3b:1d:c3:95:a1:76:c5: 4e:4c:44:b4:da:09:9b:32:df:2f:37:95:de:ea:99:ef:8a:ca: 54:84:9c:73:47:a7:b2:0b:d4:79:0f:3f:d7:f6:06:d2:cb:4c: 84:82:1c:ac:00:0d:19:1d:d4:41:f8:b9:56:af:38:62:0e:87: c0:fe:a5:66:69:fc:e1:f1:ff:5b:af:15:b9:a4:a6:6d:f4:28: 35:4f:09:6e:68:b7:b4:bd:5d:28:e9:db:b7:4c:5b:95:0b:2f: 29:18:c3:df -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1QUQxMTAvBgNVBAUTKEY1MTJBRDY2M0E2MzMyNjM1NUNBOEQ4RTkxMDBCM0NF QUIzQ0I5RkIwHhcNMjUxMjE2MjAwMjExWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQxYmFjMy1iYzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyGddF4DFj1jlnSAeQRjcDngDPsDA7oLd1xrdcwC3TqiWVjwn/R+FwrxPKsl DSNPKQZQ2CMCE/gBRZF1H/3ukk6Ao4Mq4nPhoKjlyG/UxP1C52iBIpXxtAiPNtc/ Ur1gd8qsoTrsZw3lxKdHQ7RhpsaNh69qLAezxOq017rO+MxgEN2xYgd5mq3kT7mQ OgyGGu8ztq+qSFoItWYFxtMCznp8TnFQQKvRXMBd8XLmdWwqVehH8D1hKQLcWTE8 3X76ZDDp3dBO4T/O8ArPRUNOW3YqMV0a7RkFpqVdy8SiM7fM45OEg+95hTvHiz/T I3xmo0/vaylSYN9YaaN4lxdeEwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJKRAJFu PPtQBOeg7nDnbD4R/IqjMB8GA1UdIwQYMBaAFPUSrWY6YzJjVcqNjpEAs86rPLn7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVBRC85NUJFM0JENjFE MzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1tTlZ5bzJPa1FDenpxczh1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSS3RaanBqTW1OVnlvMk9rUUN6enFzOHVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzA1QUQvOTVCRTNCRDYxRDMzMTFFRDk2QTEwQTYwQzRGOUFFMDIvMUJCOTBENDZE QUJBMTFGMEEwOEQ5QkEwNkNEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAjtggAYwDQYJKoZIhvcNAQELBQADggEBAKMLUZKvSvlm k1c81d5kC9WwwJ8adyJ91YF/bKHkDUBhb/T4lp54hqPkKpCpNhlle4XeNwupGDKD JKnwNRkeqAyux80FZZo4gZJq2NaJeQFF7VxuSfX0gE8CXfwvOJT4eEAtQSDIiGIe 1XtIDPQor4lC8ljwvm4gamI5BFbRugSy8YzMHWZLtrog9uqYf0b//2cOhoY62kWy bkVoOx3DlaF2xU5MRLTaCZsy3y83ld7qme+KylSEnHNHp7IL1HkPP9f2BtLLTISC HKwADRkd1EH4uVavOGIOh8D+pWZp/OHx/1uvFbmkpm30KDVPCW5ot7S9XSjp27dM W5ULLykYw98= -----END CERTIFICATE-----Generated at Wed Dec 24 19:22:35 2025 by rpki-client