This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa File: CDD43C182FFB11F099B57A7CC4F9AE02.roa (raw, json) Hash identifier: VgJA9VQZ16I+eJAsOvY0GYdltmcP2IovQ2JrcqstHq8= Subject key identifier: D6:01:EA:CF:9D:04:21:57:E2:A1:7C:1E:55:8E:F4:2E:42:BD:99:00 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: DF Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa Signing time: Fri 07 Nov 2025 01:11:05 +0000 ROA not before: Fri 07 Nov 2025 01:11:05 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138558 IP address blocks: 2001:df4:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Nov 7 01:11:05 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=690d4729-1e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2f:51:c5:58:06:57:b0:3b:0a:d2:a9:9a:5a: c6:3b:ba:48:5d:2e:41:65:be:61:ab:5c:e8:46:34: 9f:ad:e3:2d:6b:c8:67:03:e2:d9:dd:45:28:7d:82: cd:c7:12:86:17:87:82:bd:13:cc:e8:b6:3e:a9:5e: 54:05:27:91:73:db:03:b2:34:f7:4b:1b:35:e4:78: c3:77:1b:f1:6e:70:11:75:a9:97:1f:8b:10:b8:a9: b0:49:12:c8:ef:e4:26:c9:87:75:4f:5b:dd:f3:b6: 0c:cf:14:39:96:80:61:67:cb:a1:1d:97:d3:95:64: a3:c4:b3:93:ab:20:1d:6d:58:f9:61:bf:01:36:b8: 88:4d:2b:40:de:a0:fe:c2:70:be:6b:4c:c1:cb:1e: a1:2d:84:13:27:56:99:11:ce:65:d2:7a:ba:cb:f6: 70:ff:f0:0d:e2:e2:4c:34:01:a3:78:04:db:e4:8b: a3:f1:72:7c:af:f2:9c:52:a2:93:97:f8:97:6c:34: 32:23:20:c8:f9:96:f3:74:e7:53:74:91:38:68:be: 58:2b:cc:6f:ce:d6:05:be:d9:06:64:0e:f8:69:74: 22:7a:89:ef:02:e3:04:47:69:87:fa:21:8b:92:dd: dd:2b:38:54:6e:a3:81:a2:9f:1a:bb:4d:93:8d:ef: d2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:EA:CF:9D:04:21:57:E2:A1:7C:1E:55:8E:F4:2E:42:BD:99:00 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/CDD43C182FFB11F099B57A7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:3440::/48 Signature Algorithm: sha256WithRSAEncryption 09:9d:e4:da:27:90:73:d2:8a:e1:f5:64:91:2f:83:a1:77:39: c1:5e:98:85:5d:38:53:53:1a:0a:45:a9:a1:ba:ec:88:13:ea: 1d:6c:9f:5d:1f:4c:9e:16:78:b2:fc:f5:01:55:03:1b:bf:99: 97:46:a4:f4:68:95:88:4e:ae:48:7b:7a:b3:7f:89:9f:b1:6a: 66:5a:a6:23:e7:84:b5:8e:59:58:44:d5:8f:7d:a5:2e:51:d2: 59:e4:7b:83:68:10:48:6d:33:23:14:aa:d4:36:88:04:d8:75: a6:c1:78:1f:12:1d:c6:98:ad:46:8c:1a:de:9b:f6:53:de:d1: 3b:f9:59:c8:97:58:e7:5e:e6:0e:d4:1d:66:e5:15:09:2e:da: 70:e3:79:c7:96:5d:c6:88:4c:24:06:6e:9b:cb:73:d5:53:b1: 44:50:7e:19:31:9a:08:ba:c5:a1:0a:3b:b5:cb:72:3b:70:ea: fe:38:a1:15:e5:ef:8d:aa:96:40:38:ea:2d:49:96:59:d7:9d: e1:de:da:3e:35:07:47:4d:6d:88:32:0e:3b:fb:d0:9d:74:70: 0e:00:70:90:54:39:ab:f1:92:d7:8f:87:80:d8:4d:bf:da:74: b9:44:31:05:66:38:19:d9:ee:d4:bb:fe:6e:c6:af:42:61:41: ff:fc:64:f4 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5RDkxMTAvBgNVBAUTKDEzMTU3MEI0NTM1Rjg0MDMwMjUzMEREMTMxNzQ0MjMx NjMwOUMxNzcwHhcNMjUxMTA3MDExMTA1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBkNDcyOS0xZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6i9RxVgGV7A7CtKpmlrGO7pIXS5BZb5hq1zoRjSfreMta8hnA+LZ3UUofYLN xxKGF4eCvRPM6LY+qV5UBSeRc9sDsjT3Sxs15HjDdxvxbnARdamXH4sQuKmwSRLI 7+QmyYd1T1vd87YMzxQ5loBhZ8uhHZfTlWSjxLOTqyAdbVj5Yb8BNriITStA3qD+ wnC+a0zByx6hLYQTJ1aZEc5l0nq6y/Zw//AN4uJMNAGjeATb5Iuj8XJ8r/KcUqKT l/iXbDQyIyDI+ZbzdOdTdJE4aL5YK8xvztYFvtkGZA74aXQieonvAuMER2mH+iGL kt3dKzhUbqOBop8au02Tje/SNwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNYB6s+d BCFX4qF8HlWO9C5CvZkAMB8GA1UdIwQYMBaAFBMVcLRTX4QDAlMN0TF0QjFjCcF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9GNTYwMzdBNjZG NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9FeFZ3dEZOZmhBTUNVdzNSTVhSQ01XTUp3 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5RDkvRjU2MDM3QTY2RjVDMTFFRjgzNUE3QjY2QzRGOUFFMDIvQ0RENDNDMTgy RkZCMTFGMDk5QjU3QTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30NEAwDQYJKoZIhvcNAQELBQADggEBAAmd5NonkHPS iuH1ZJEvg6F3OcFemIVdOFNTGgpFqaG67IgT6h1sn10fTJ4WeLL89QFVAxu/mZdG pPRolYhOrkh7erN/iZ+xamZapiPnhLWOWVhE1Y99pS5R0lnke4NoEEhtMyMUqtQ2 iATYdabBeB8SHcaYrUaMGt6b9lPe0Tv5WciXWOde5g7UHWblFQku2nDjeceWXcaI TCQGbpvLc9VTsURQfhkxmgi6xaEKO7XLcjtw6v44oRXl742qlkA46i1JllnXneHe 2j41B0dNbYgyDjv70J10cA4AcJBUOavxktePh4DYTb/adLlEMQVmOBnZ7tS7/m7G r0JhQf/8ZPQ= -----END CERTIFICATE-----Generated at Wed Dec 3 17:16:44 2025 by rpki-client