This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/8C5382D6DEF511F0A9861D4A586F56BC.roa File: 8C5382D6DEF511F0A9861D4A586F56BC.roa (raw, json) Hash identifier: vjfsamXqkXFmxfFh/f0yvWlnKb+B5x6VvVnf5hM9bVM= Subject key identifier: 9A:88:CF:A2:CF:24:0C:DA:9A:6D:D4:C6:5C:E8:DF:26:79:E2:69:43 Certificate issuer: /CN=A91E4EEF/serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4 Certificate serial: 02 Authority key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/8C5382D6DEF511F0A9861D4A586F56BC.roa Signing time: Mon 22 Dec 2025 05:17:45 +0000 ROA not before: Mon 22 Dec 2025 05:17:45 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 154449 IP address blocks: 2001:df6:7a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4 Validity Not Before: Dec 22 05:17:45 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6948d479-b750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5d:79:78:7e:7e:e3:a4:b1:12:24:62:6f:c9: 34:78:94:c3:81:46:2c:66:07:ad:6b:d3:fc:b1:bd: ef:d0:db:f6:3c:c4:1c:bc:86:0b:c7:49:33:43:d3: 64:91:c7:2f:63:a2:fc:2b:4e:a1:ed:57:46:05:75: 22:75:cd:de:02:89:75:92:d3:21:9a:e2:49:10:67: ec:4a:cd:2d:4b:da:13:22:88:48:df:79:30:da:9c: c6:0b:df:18:7b:4e:bc:f5:1e:98:88:f4:25:4c:04: 21:1a:f1:7f:78:5b:3c:d7:bb:9a:c6:7d:7f:be:5c: df:38:6b:ad:34:06:cd:c8:3f:5a:cd:05:e3:57:d4: 89:a3:00:54:64:24:0f:81:64:38:12:7b:e5:3d:de: 2b:7a:6e:78:10:60:87:6c:90:a8:e9:23:cd:9e:f1: 9a:31:4b:08:b4:b4:c2:a2:e7:d3:37:78:f7:66:0c: a4:26:d2:01:a0:88:13:00:12:6b:85:b7:98:d2:fa: fa:e9:4a:af:ec:ce:ff:4e:a9:bc:8d:25:93:94:fd: 67:8c:e3:49:ea:c6:3d:42:12:88:4b:a7:4e:03:b1: 68:33:7c:f9:aa:1f:bb:17:97:e7:d3:a0:d3:4b:e1: a0:bb:fc:6c:d9:8f:7c:fe:d9:05:0e:ae:28:42:df: 7b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:CF:A2:CF:24:0C:DA:9A:6D:D4:C6:5C:E8:DF:26:79:E2:69:43 X509v3 Authority Key Identifier: keyid:BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/8C5382D6DEF511F0A9861D4A586F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:7a40::/48 Signature Algorithm: sha256WithRSAEncryption 0a:2f:0d:ef:33:22:82:04:56:23:1f:17:ac:2b:3a:9b:22:64: ab:2a:d3:1f:a9:c9:52:00:b7:f1:4b:8b:48:51:37:04:53:a8: 1d:dc:6c:d7:27:a8:14:b0:90:51:cf:69:c2:a2:84:98:6f:66: 23:1c:ad:24:de:f8:76:34:b1:cc:3d:fe:f0:2d:30:a3:08:86: 94:17:81:a1:fc:29:e7:56:06:0e:44:25:64:9f:91:f6:f7:dc: ae:04:2c:dc:b3:5b:d3:af:d0:17:86:cc:f2:ca:d3:86:38:37: e5:42:bd:bc:81:b5:0e:a0:fc:9e:6d:79:ba:16:6f:51:17:40: 72:b7:1b:23:24:10:9e:dd:4d:c4:ba:c7:8f:38:9e:06:b3:b0: c2:62:48:fe:47:35:e3:03:56:e0:4c:6e:2d:02:50:4a:40:18: 47:b2:cd:67:a9:f6:5f:d5:ac:c7:be:c0:60:8e:67:7a:da:a0: e3:f5:52:55:7f:2e:ad:38:18:9c:e4:a0:a2:1c:ba:60:eb:01: ed:ba:f4:c3:26:43:63:ea:e0:57:a4:65:2f:0c:9d:76:db:02: 72:2d:98:ef:97:87:72:bd:74:f7:b0:b7:c8:34:33:1c:bb:65: ca:94:db:27:e9:d5:be:07:36:02:a7:08:b0:5c:2d:1e:c9:65: 5a:9b:a1:be -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF NEVFRjExMC8GA1UEBRMoQkNFQTkxMTRERjkzNkNERTg5NEZDMDg0RjgwOENGRDA5 RTE0RjRCNDAeFw0yNTEyMjIwNTE3NDVaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NDhkNDc5LWI3NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvXXl4fn7jpLESJGJvyTR4lMOBRixmB61r0/yxve/Q2/Y8xBy8hgvHSTND02SR xy9jovwrTqHtV0YFdSJ1zd4CiXWS0yGa4kkQZ+xKzS1L2hMiiEjfeTDanMYL3xh7 Trz1HpiI9CVMBCEa8X94WzzXu5rGfX++XN84a600Bs3IP1rNBeNX1ImjAFRkJA+B ZDgSe+U93it6bngQYIdskKjpI82e8ZoxSwi0tMKi59M3ePdmDKQm0gGgiBMAEmuF t5jS+vrpSq/szv9OqbyNJZOU/WeM40nqxj1CEohLp04DsWgzfPmqH7sXl+fToNNL 4aC7/GzZj3z+2QUOrihC33utAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUmojPos8k DNqabdTGXOjfJnniaUMwHwYDVR0jBBgwFoAUvOqRFN+TbN6JT8CE+AjP0J4U9LQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RUVGL0Q3MTA1QkI2REVG MzExRjA5RUQ0MTI5NjU3NkY1NkJDL3ZPcVJGTi1UYk42SlQ4Q0UtQWpQMEo0VTlM US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9xUkZOLVRiTjZKVDhDRS1BalAwSjRVOUxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVFRi9ENzEwNUJCNkRFRjMxMUYwOUVENDEyOTY1NzZGNTZCQy84QzUzODJENkRF RjUxMUYwQTk4NjFENEE1ODZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfZ6QDANBgkqhkiG9w0BAQsFAAOCAQEACi8N7zMiggRW Ix8XrCs6myJkqyrTH6nJUgC38UuLSFE3BFOoHdxs1yeoFLCQUc9pwqKEmG9mIxyt JN74djSxzD3+8C0wowiGlBeBofwp51YGDkQlZJ+R9vfcrgQs3LNb06/QF4bM8srT hjg35UK9vIG1DqD8nm15uhZvURdAcrcbIyQQnt1NxLrHjzieBrOwwmJI/kc14wNW 4ExuLQJQSkAYR7LNZ6n2X9Wsx77AYI5netqg4/VSVX8urTgYnOSgohy6YOsB7br0 wyZDY+rgV6RlLwyddtsCci2Y75eHcr1097C3yDQzHLtlypTbJ+nVvgc2AqcIsFwt HsllWpuhvg== -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:24 2025 by rpki-client