This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/3061C022F1F211F0B442E9B1456F56BC.roa File: 3061C022F1F211F0B442E9B1456F56BC.roa (raw, json) Hash identifier: nk+xIw4hwi/42r4J428xc1CGYBa8kQDM/BVSEZQffBc= Subject key identifier: 95:85:93:DA:76:1F:93:01:39:72:B5:6A:00:8F:8B:47:BA:78:00:30 Certificate issuer: /CN=A91DA5F7/serialNumber=D7DDBD0BBE634F67FF58CB6A6612FAAD33F87047 Certificate serial: 02 Authority key identifier: D7:DD:BD:0B:BE:63:4F:67:FF:58:CB:6A:66:12:FA:AD:33:F8:70:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/3061C022F1F211F0B442E9B1456F56BC.roa Signing time: Thu 15 Jan 2026 09:11:34 +0000 ROA not before: Thu 15 Jan 2026 09:11:34 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 142210 IP address blocks: 2001:df6:96c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=D7DDBD0BBE634F67FF58CB6A6612FAAD33F87047 Validity Not Before: Jan 15 09:11:34 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6968af46-e666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:8a:b4:b7:d3:39:f4:fd:ca:a6:97:01:88: 05:c2:0a:72:66:1b:f1:ba:d3:b1:fb:00:31:13:e9: ac:d4:5f:2b:74:49:a9:c5:62:5e:d3:43:fd:44:4f: 30:62:08:c6:12:34:8a:ea:b1:78:3e:94:52:be:12: 3f:a1:0b:2a:d3:af:94:b7:8c:24:eb:1e:c2:a9:bd: 3d:b4:aa:d9:7c:f0:fb:50:d3:de:53:12:00:2e:f9: f4:a0:0b:e3:f0:81:6b:f6:c0:1f:43:40:6d:a2:74: 68:a7:d9:e0:09:72:78:0a:02:8e:79:65:e3:9e:7b: 3a:db:2c:f9:47:a7:60:fc:a4:e1:f1:8d:5e:93:87: 68:53:d6:63:a8:bb:43:d1:fd:bc:4d:03:2b:45:41: 31:5b:28:52:ac:28:65:da:d9:b4:6e:44:07:aa:b5: 88:49:f1:14:83:56:71:75:60:8e:8d:08:87:72:75: b5:d2:7d:1d:1a:2b:ea:df:43:26:a0:23:38:b1:ec: 0b:05:e8:48:7d:98:ff:b8:2e:03:87:6f:a2:41:a8: 29:a9:77:1c:81:04:ee:77:8a:d9:fd:34:d8:cc:7e: f5:03:2b:bc:3c:6d:38:6a:e6:ce:1c:65:a7:b6:ab: 7d:8e:b5:6d:57:cd:36:d7:6d:4f:60:9f:ce:16:76: 33:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:85:93:DA:76:1F:93:01:39:72:B5:6A:00:8F:8B:47:BA:78:00:30 X509v3 Authority Key Identifier: keyid:D7:DD:BD:0B:BE:63:4F:67:FF:58:CB:6A:66:12:FA:AD:33:F8:70:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/3061C022F1F211F0B442E9B1456F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:96c0::/48 Signature Algorithm: sha256WithRSAEncryption 38:ed:01:05:b2:69:49:5a:39:4c:1c:55:e6:cf:6c:a4:62:4b: ec:9b:4d:5a:bd:35:5b:36:d1:75:32:fa:dd:47:cc:4b:ce:be: f3:2d:22:4f:1f:86:8a:a8:ee:d4:4b:14:73:9b:af:28:f6:d5: 65:81:84:51:01:2b:42:f6:2e:c5:fc:2f:97:d1:aa:6f:40:71: 3b:b1:4f:6a:45:a5:5b:6a:06:a5:31:cf:8c:32:79:44:38:11: f8:35:a1:42:d6:bf:b4:a9:5e:82:dc:46:ee:97:93:69:34:22: f0:ee:8f:4e:fe:ee:a2:aa:d8:60:28:67:75:e0:fd:e3:48:84: 9d:83:07:a7:55:98:5b:ef:45:8a:d2:f5:f3:28:62:6e:f8:ad: 82:2b:ca:89:41:de:ea:c8:ee:e6:f5:e2:93:3d:ee:4b:2e:62: ed:3f:b3:41:86:93:e9:24:95:1a:60:68:e7:7f:b4:90:44:da: 4b:37:29:74:35:8a:d0:a5:90:22:50:b8:2d:9a:c4:9d:2f:4c: 41:47:1a:11:03:a0:5f:f5:3e:75:cf:57:df:1d:38:ee:02:50: a8:df:0b:02:4a:56:0b:c7:09:b9:f0:1f:97:c5:ef:e1:33:9c: 57:97:e5:f1:e8:15:26:50:d7:61:0d:06:4f:cb:19:fd:f0:e8: 17:ee:41:38 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE QTVGNzExMC8GA1UEBRMoRDdEREJEMEJCRTYzNEY2N0ZGNThDQjZBNjYxMkZBQUQz M0Y4NzA0NzAeFw0yNjAxMTUwOTExMzRaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NjhhZjQ2LWU2NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCZIq0t9M59P3KppcBiAXCCnJmG/G607H7ADET6azUXyt0SanFYl7TQ/1ETzBi CMYSNIrqsXg+lFK+Ej+hCyrTr5S3jCTrHsKpvT20qtl88PtQ095TEgAu+fSgC+Pw gWv2wB9DQG2idGin2eAJcngKAo55ZeOeezrbLPlHp2D8pOHxjV6Th2hT1mOou0PR /bxNAytFQTFbKFKsKGXa2bRuRAeqtYhJ8RSDVnF1YI6NCIdydbXSfR0aK+rfQyag Izix7AsF6Eh9mP+4LgOHb6JBqCmpdxyBBO53itn9NNjMfvUDK7w8bThq5s4cZae2 q32OtW1XzTbXbU9gn84WdjNzAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUlYWT2nYf kwE5crVqAI+LR7p4ADAwHwYDVR0jBBgwFoAU1929C75jT2f/WMtqZhL6rTP4cEcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNUY3L0Q2REY1QURDRjFG MTExRjBBQjIxRjkzQjQ1NkY1NkJDLzE5MjlDNzVqVDJmX1dNdHFaaEw2clRQNGNF Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTkyOUM3NWpUMmZfV010cVpoTDZyVFA0Y0VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTVGNy9ENkRGNUFEQ0YxRjExMUYwQUIyMUY5M0I0NTZGNTZCQy8zMDYxQzAyMkYx RjIxMUYwQjQ0MkU5QjE0NTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfaWwDANBgkqhkiG9w0BAQsFAAOCAQEAOO0BBbJpSVo5 TBxV5s9spGJL7JtNWr01WzbRdTL63UfMS86+8y0iTx+Giqju1EsUc5uvKPbVZYGE UQErQvYuxfwvl9Gqb0BxO7FPakWlW2oGpTHPjDJ5RDgR+DWhQta/tKlegtxG7peT aTQi8O6PTv7uoqrYYChndeD940iEnYMHp1WYW+9FitL18yhibvitgivKiUHe6sju 5vXikz3uSy5i7T+zQYaT6SSVGmBo53+0kETaSzcpdDWK0KWQIlC4LZrEnS9MQUca EQOgX/U+dc9X3x047gJQqN8LAkpWC8cJufAfl8Xv4TOcV5fl8egVJlDXYQ0GT8sZ /fDoF+5BOA== -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:01 2026 by rpki-client