This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/75431F44F12311F09E054F8D4F6F56BC.roa File: 75431F44F12311F09E054F8D4F6F56BC.roa (raw, json) Hash identifier: iBIYNyeUkoupOA2AKZcEx68TEpke4G90iHPCdBZl/tA= Subject key identifier: 85:12:E2:AB:66:D5:79:79:85:1E:36:43:DD:83:69:45:84:1F:6F:2C Certificate issuer: /CN=A91D2B9A/serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD Certificate serial: 02 Authority key identifier: 89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/75431F44F12311F09E054F8D4F6F56BC.roa Signing time: Wed 14 Jan 2026 08:31:44 +0000 ROA not before: Wed 14 Jan 2026 08:31:44 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 142207 IP address blocks: 2402:4820::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=890268FD25C779E36FBB872F6013F30415FFA2DD Validity Not Before: Jan 14 08:31:44 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69675470-caa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:86:08:2b:3f:c8:d0:06:46:93:5a:70:ee:31: c2:11:15:5f:a3:f8:d6:c7:15:b7:89:42:fd:5d:70: da:83:3c:5d:86:3a:a4:2a:d1:53:c2:3b:44:4e:d2: 5a:79:09:48:14:ce:73:1f:df:7e:2e:57:a6:0a:dc: d7:e0:8f:dd:55:fe:54:06:65:49:cd:f0:06:b8:08: fc:43:57:c9:6a:54:43:87:42:7e:87:36:f5:51:de: 26:6f:0f:2c:23:17:ab:ef:e9:d3:ca:72:dd:86:7b: 82:51:e3:17:47:0d:f9:3e:c9:0b:a2:6d:a0:f0:71: dc:66:2a:f6:e8:43:70:91:52:ce:f9:0c:a6:ec:8e: ec:15:1c:e1:53:06:76:62:f7:5f:65:cb:23:28:8c: 10:15:d8:99:8f:e5:b6:f1:81:66:98:6d:c9:11:a9: 65:26:c3:dc:c0:f9:ad:05:20:30:24:19:a3:d5:48: fa:e7:68:f8:5b:c7:33:b9:fc:1f:ae:bc:22:96:8a: ca:1c:bd:2a:20:94:42:c8:38:03:f6:37:51:01:0b: 59:71:b9:6a:b1:cc:ea:36:25:d3:8f:34:69:12:5e: 81:c9:9b:a8:0e:f2:ff:2a:5b:61:b0:3b:ec:a4:27: a8:f3:36:01:5e:c4:2b:34:92:53:53:bf:c4:23:1e: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:12:E2:AB:66:D5:79:79:85:1E:36:43:DD:83:69:45:84:1F:6F:2C X509v3 Authority Key Identifier: keyid:89:02:68:FD:25:C7:79:E3:6F:BB:87:2F:60:13:F3:04:15:FF:A2:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/iQJo_SXHeeNvu4cvYBPzBBX_ot0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJo_SXHeeNvu4cvYBPzBBX_ot0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/5EA3462AF12211F0AC5CDA7E4E6F56BC/75431F44F12311F09E054F8D4F6F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:4820::/32 Signature Algorithm: sha256WithRSAEncryption 30:63:72:c4:a8:02:fd:67:d4:47:4d:52:a8:ff:89:5b:a8:d0: 9f:98:02:d9:93:83:bc:1b:41:62:94:f5:89:dd:a6:64:e6:8b: 81:4f:81:c2:b6:53:03:04:f9:7a:4c:c2:11:ad:ba:45:f1:c1: 96:66:96:a1:d6:a5:b0:55:9c:50:2b:a1:37:0c:2d:b4:ff:82: 65:be:2a:85:34:2b:4d:f7:1c:52:79:78:a2:7b:c8:51:0e:b1: f8:8e:c6:7e:da:ad:b7:dc:11:f3:b4:a8:db:d2:6f:81:8a:9b: 5e:e4:49:75:83:a4:76:a5:c0:83:98:29:1b:17:b1:53:fe:27: d2:36:0a:29:ff:24:46:6c:69:8e:da:70:5b:81:de:32:f0:ce: 65:11:a7:40:b6:4a:5e:41:07:0f:6b:fb:c2:66:e3:b7:c8:20: c3:87:f8:62:73:d7:fe:23:28:fe:f1:dc:ca:10:44:d3:90:4b: fa:ae:39:c7:0f:c8:97:8e:31:94:06:89:9c:5f:37:32:c4:21: 94:93:8b:22:66:a2:76:d7:64:21:51:0a:6e:98:7f:b0:19:8d: c9:dc:93:f0:47:d8:2c:00:25:01:84:4b:12:45:53:0a:e8:6e: ba:7a:11:aa:eb:fa:dd:4b:71:08:90:30:60:ce:c6:04:54:8b: be:d2:50:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE MkI5QTExMC8GA1UEBRMoODkwMjY4RkQyNUM3NzlFMzZGQkI4NzJGNjAxM0YzMDQx NUZGQTJERDAeFw0yNjAxMTQwODMxNDRaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5Njc1NDcwLWNhYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfhggrP8jQBkaTWnDuMcIRFV+j+NbHFbeJQv1dcNqDPF2GOqQq0VPCO0RO0lp5 CUgUznMf334uV6YK3Nfgj91V/lQGZUnN8Aa4CPxDV8lqVEOHQn6HNvVR3iZvDywj F6vv6dPKct2Ge4JR4xdHDfk+yQuibaDwcdxmKvboQ3CRUs75DKbsjuwVHOFTBnZi 919lyyMojBAV2JmP5bbxgWaYbckRqWUmw9zA+a0FIDAkGaPVSPrnaPhbxzO5/B+u vCKWisocvSoglELIOAP2N1EBC1lxuWqxzOo2JdOPNGkSXoHJm6gO8v8qW2GwO+yk J6jzNgFexCs0klNTv8QjHuURAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUhRLiq2bV eXmFHjZD3YNpRYQfbywwHwYDVR0jBBgwFoAUiQJo/SXHeeNvu4cvYBPzBBX/ot0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzVFQTM0NjJBRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL2lRSm9fU1hIZWVOdnU0Y3ZZQlB6QkJYX290 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVFKb19TWEhlZU52dTRjdllCUHpCQlhfb3QwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkI5QS81RUEzNDYyQUYxMjIxMUYwQUM1Q0RBN0U0RTZGNTZCQy83NTQzMUY0NEYx MjMxMUYwOUUwNTRGOEQ0RjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCSCAwDQYJKoZIhvcNAQELBQADggEBADBjcsSoAv1n1EdN Uqj/iVuo0J+YAtmTg7wbQWKU9YndpmTmi4FPgcK2UwME+XpMwhGtukXxwZZmlqHW pbBVnFAroTcMLbT/gmW+KoU0K033HFJ5eKJ7yFEOsfiOxn7arbfcEfO0qNvSb4GK m17kSXWDpHalwIOYKRsXsVP+J9I2Cin/JEZsaY7acFuB3jLwzmURp0C2Sl5BBw9r +8Jm47fIIMOH+GJz1/4jKP7x3MoQRNOQS/quOccPyJeOMZQGiZxfNzLEIZSTiyJm onbXZCFRCm6Yf7AZjcnck/BH2CwAJQGESxJFUwrobrp6Earr+t1LcQiQMGDOxgRU i77SUCk= -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:03 2026 by rpki-client