This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/095A440652B311F0B25AA911C4F9AE02.roa File: 095A440652B311F0B25AA911C4F9AE02.roa (raw, json) Hash identifier: SCCnd/SD2uyESiij/xgMm9LGvYUgxJ9IcJwnyMk6Qmc= Subject key identifier: 40:0F:2B:F8:11:A5:4A:F1:1D:2D:C9:53:31:3D:9E:05:C5:2C:10:0F Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 03B5 Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/095A440652B311F0B25AA911C4F9AE02.roa Signing time: Sat 08 Nov 2025 23:45:47 +0000 ROA not before: Sat 08 Nov 2025 23:45:47 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 31898 IP address blocks: 2407:30c0:200::/48 maxlen: 48 2407:30c0:201::/48 maxlen: 48 2407:30c0:202::/48 maxlen: 48 2407:30c0:203::/48 maxlen: 48 2407:30c0:204::/48 maxlen: 48 2407:30c0:205::/48 maxlen: 48 2407:30c0:206::/48 maxlen: 48 2407:30c0:207::/48 maxlen: 48 2407:30c0:208::/48 maxlen: 48 2407:30c0:20a::/48 maxlen: 48 2407:30c0:20b::/48 maxlen: 48 2407:30c0:20c::/48 maxlen: 48 2407:30c0:20d::/48 maxlen: 48 2407:30c0:20e::/48 maxlen: 48 2407:30c0:20f::/48 maxlen: 48 2407:30c0:211::/48 maxlen: 48 2407:30c0:212::/48 maxlen: 48 2407:30c0:213::/48 maxlen: 48 2407:30c0:214::/48 maxlen: 48 2407:30c0:215::/48 maxlen: 48 2407:30c0:216::/48 maxlen: 48 2407:30c0:217::/48 maxlen: 48 2407:30c0:218::/48 maxlen: 48 2407:30c0:219::/48 maxlen: 48 2407:30c0:21a::/48 maxlen: 48 2407:30c0:21b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 949 (0x3b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Nov 8 23:45:47 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690fd62b-00f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:da:8f:1e:05:49:25:2a:79:34:e5:40:40: 3c:8f:56:52:cb:d3:dd:a2:e9:a9:76:63:ce:03:49: 6f:4a:48:53:96:b6:3d:48:ba:6b:66:18:6c:80:48: 16:7e:71:81:a4:88:34:0d:21:e3:93:cd:ff:72:0e: 41:36:19:1c:e6:22:ad:d2:82:a7:9f:78:54:ed:dd: bf:d7:a3:da:37:fe:4d:5e:d4:f1:b8:c8:80:f8:bb: 9a:a9:6f:12:10:61:1d:f7:db:07:87:4d:6d:2d:75: 4b:6a:cf:83:f1:76:c5:43:7c:86:44:6a:ee:91:8c: e5:5f:ea:38:85:d2:c3:01:e5:dc:5c:cf:f6:1a:6b: 0a:fb:16:5f:f7:0f:71:c7:d7:0c:57:1b:8d:22:97: 1b:2b:97:32:9a:ba:0a:7c:e2:c4:1c:38:0b:d3:b7: c3:2f:c0:92:1d:d7:49:8e:4d:06:f9:4c:d3:ba:f8: f3:52:1e:3a:56:69:7d:10:5c:d1:78:8c:11:99:b6: d6:26:e0:05:3f:0b:6f:4f:1f:64:5b:e0:5b:66:87: 6d:9b:d4:9e:32:a9:0f:e6:1a:48:18:63:e5:9e:db: 42:63:24:ef:79:af:4d:74:7e:a3:5b:c2:f3:89:b8: 0c:65:31:54:91:db:41:84:f6:71:96:b7:b8:40:e7: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0F:2B:F8:11:A5:4A:F1:1D:2D:C9:53:31:3D:9E:05:C5:2C:10:0F X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/095A440652B311F0B25AA911C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:30c0:200::-2407:30c0:208:ffff:ffff:ffff:ffff:ffff 2407:30c0:20a::-2407:30c0:20f:ffff:ffff:ffff:ffff:ffff 2407:30c0:211::-2407:30c0:21b:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 19:f0:ba:05:a5:68:5c:81:b0:67:22:e4:02:2e:9c:85:5c:77: 11:f2:fa:9f:8d:e3:25:49:db:45:8e:62:ea:9f:e2:99:b5:e1: f9:18:db:fc:1f:8f:3d:ee:a8:07:a7:7c:53:81:69:37:e4:40: 8c:14:f0:26:dc:af:4d:36:49:b9:dd:ae:bc:21:f4:e4:c0:bf: db:bb:1f:99:9a:90:91:72:4c:aa:bd:8f:f6:e0:aa:f3:5a:94: 5b:39:fb:7a:f3:37:8d:47:35:2e:c2:f6:4d:c0:3f:6b:33:37: 4a:c9:8c:7c:08:7d:0b:55:1d:22:e1:ed:e3:6a:ca:23:69:c9: 3f:fc:52:3d:6b:dd:82:92:53:77:5f:b1:2f:ec:96:7a:5f:07: e3:11:ab:51:65:72:f8:c6:9b:b6:f3:a9:b1:72:50:f0:69:8b: c1:d8:2b:2a:64:62:9b:65:15:6d:cc:09:40:a1:5b:81:de:fc: f8:bb:d5:19:19:6b:4e:cd:1a:e4:f4:47:88:a6:03:d4:1d:8b: 1e:ea:2c:e7:2e:90:88:c6:66:db:4e:cb:33:bd:13:61:f7:27: 66:81:e3:41:05:26:34:28:18:b0:7e:85:0d:b7:40:73:a6:1b: 93:92:cc:a3:e5:08:99:0e:13:03:e1:e5:ce:42:f3:74:2d:10: 70:ce:59:f0 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUxMTA4MjM0NTQ3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBmZDYyYi0wMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvF/ajx4FSSUqeTTlQEA8j1ZSy9PdoumpdmPOA0lvSkhTlrY9SLprZhhsgEgW fnGBpIg0DSHjk83/cg5BNhkc5iKt0oKnn3hU7d2/16PaN/5NXtTxuMiA+LuaqW8S EGEd99sHh01tLXVLas+D8XbFQ3yGRGrukYzlX+o4hdLDAeXcXM/2GmsK+xZf9w9x x9cMVxuNIpcbK5cymroKfOLEHDgL07fDL8CSHddJjk0G+UzTuvjzUh46Vml9EFzR eIwRmbbWJuAFPwtvTx9kW+BbZodtm9SeMqkP5hpIGGPlnttCYyTvea9NdH6jW8Lz ibgMZTFUkdtBhPZxlre4QOfHHwIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFEAPK/gR pUrxHS3JUzE9ngXFLBAPMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYzMDQvMTlFNERGMDZEQjA3MTFFQzk5MjJENzBGQzRGOUFFMDIvMDk1QTQ0MDY1 MkIzMTFGMEIyNUFBOTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E RTBDMEEEAgACMDswEQMGASQHMMACAwcAJAcwwAIIMBIDBwEkBzDAAgoDBwQkBzDA AgAwEgMHACQHMMACEQMHAiQHMMACGDANBgkqhkiG9w0BAQsFAAOCAQEAGfC6BaVo XIGwZyLkAi6chVx3EfL6n43jJUnbRY5i6p/imbXh+Rjb/B+PPe6oB6d8U4FpN+RA jBTwJtyvTTZJud2uvCH05MC/27sfmZqQkXJMqr2P9uCq81qUWzn7evM3jUc1LsL2 TcA/azM3SsmMfAh9C1UdIuHt42rKI2nJP/xSPWvdgpJTd1+xL+yWel8H4xGrUWVy +MabtvOpsXJQ8GmLwdgrKmRim2UVbcwJQKFbgd78+LvVGRlrTs0a5PRHiKYD1B2L Huos5y6QiMZm207LM70TYfcnZoHjQQUmNCgYsH6FDbdAc6Ybk5LMo+UImQ4TA+Hl zkLzdC0QcM5Z8A== -----END CERTIFICATE-----Generated at Fri Dec 5 08:53:53 2025 by rpki-client