This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/DB9D3A1AE24411F0BBC3E4F5716F56BC.roa File: DB9D3A1AE24411F0BBC3E4F5716F56BC.roa (raw, json) Hash identifier: K7ygeFaOktfvGPimdsYX4harp9rcvQigOPGo1t1xgTA= Subject key identifier: 5C:B5:92:8F:5D:59:E6:52:83:47:53:97:2D:DA:A6:42:7D:B5:44:1D Certificate issuer: /CN=A91F9BB3/serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Certificate serial: 02 Authority key identifier: 42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/DB9D3A1AE24411F0BBC3E4F5716F56BC.roa Signing time: Fri 26 Dec 2025 10:23:02 +0000 ROA not before: Fri 26 Dec 2025 10:23:02 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 154424 IP address blocks: 2001:df6:70c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 07:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB3, serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Validity Not Before: Dec 26 10:23:02 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=694e6206-95f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:0d:47:65:bf:19:01:1f:07:57:d9:ed:0e: 7b:8e:c1:ad:62:11:ca:6e:57:dd:8d:25:b8:6d:fd: c7:fb:ac:51:6d:fa:41:95:3d:a5:2c:8e:85:34:cd: 63:af:a7:93:f0:b7:ed:40:c4:24:17:3b:03:12:61: ef:e2:44:8d:66:77:66:15:d7:99:c9:ab:c9:7c:4d: 67:d0:be:f3:bd:8e:28:a7:3d:a5:74:82:81:d3:3d: 20:60:0d:58:af:a3:6c:0c:cb:d9:cd:aa:84:c8:5a: ab:b2:70:e3:94:2c:e5:0a:ca:d7:e5:d3:df:a5:43: df:f3:a0:d4:87:ab:00:e1:55:9f:74:a9:55:3f:6f: 1a:89:c6:42:bc:8e:40:b4:d3:1a:79:a2:f8:19:69: 27:da:66:80:c7:58:c8:de:0b:e8:4f:ec:35:85:6d: b8:be:07:a4:18:3f:1f:3a:a7:97:7a:bf:2e:a4:ec: 39:24:90:a5:5a:6a:3a:8c:5e:05:42:96:f2:26:f7: 82:d2:99:e0:43:6e:3c:43:f5:77:0a:d7:50:b4:f0: 85:82:ea:ff:14:0d:65:2f:83:f6:e8:db:f8:66:3e: 55:61:3a:1d:d8:b7:09:11:00:22:9e:39:83:02:e7: e6:ea:85:c7:39:f3:cf:54:80:0a:d7:15:56:65:7d: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:92:8F:5D:59:E6:52:83:47:53:97:2D:DA:A6:42:7D:B5:44:1D X509v3 Authority Key Identifier: keyid:42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/DB9D3A1AE24411F0BBC3E4F5716F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:70c0::/48 Signature Algorithm: sha256WithRSAEncryption 54:56:00:f0:93:c9:58:db:88:51:02:f7:99:3a:36:06:cf:e2: cf:fb:0f:c6:ad:5f:7f:b7:75:af:a2:cb:48:4a:1e:d8:bf:9f: 26:60:a4:e2:bf:e7:23:d1:7f:01:56:df:d3:0c:6d:91:b8:5e: 53:84:80:d6:a8:a4:24:7e:95:ea:97:f7:fb:18:c1:8f:49:4d: 51:f7:f0:70:98:05:5b:43:02:b2:84:19:5c:9e:2f:fe:85:a3: 1a:ce:0a:d0:bb:9c:e3:a2:41:5e:35:0e:e8:a3:f8:95:fc:f5: 0a:a1:63:ee:a8:63:ec:63:47:31:7f:43:3d:9b:7a:94:fd:63: 0d:6e:7e:4e:32:c2:5f:3c:7e:92:1f:27:63:ed:26:3d:5a:fb: 33:90:83:a3:98:5c:62:52:4e:5f:28:97:33:32:83:18:03:8d: 57:bd:b6:58:e2:8a:08:72:52:9d:cd:64:38:c4:62:4f:f8:0c: d5:cc:ce:0e:42:4c:a7:d7:c8:a4:86:80:10:b6:c4:ad:f6:9a: d9:e5:21:05:08:8a:21:a8:8c:03:5b:c5:fb:53:e3:91:4d:eb: 91:68:34:f6:09:13:60:3d:b3:75:f4:49:95:23:35:06:46:1d: f2:17:85:34:61:41:3f:50:19:bc:8a:6f:7a:11:c0:0e:ec:bf: 62:34:0a:af -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFG OUJCMzExMC8GA1UEBRMoNDI2RjRBRDU4NUQ3QTU0REQzNjJFM0Y3QjNDOEYzQUY2 QUE2M0MyRTAeFw0yNTEyMjYxMDIzMDJaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NGU2MjA2LTk1ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbsg1HZb8ZAR8HV9ntDnuOwa1iEcpuV92NJbht/cf7rFFt+kGVPaUsjoU0zWOv p5Pwt+1AxCQXOwMSYe/iRI1md2YV15nJq8l8TWfQvvO9jiinPaV0goHTPSBgDViv o2wMy9nNqoTIWquycOOULOUKytfl09+lQ9/zoNSHqwDhVZ90qVU/bxqJxkK8jkC0 0xp5ovgZaSfaZoDHWMjeC+hP7DWFbbi+B6QYPx86p5d6vy6k7DkkkKVaajqMXgVC lvIm94LSmeBDbjxD9XcK11C08IWC6v8UDWUvg/bo2/hmPlVhOh3YtwkRACKeOYMC 5+bqhcc5889UgArXFVZlfd7/AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUXLWSj11Z 5lKDR1OXLdqmQn21RB0wHwYDVR0jBBgwFoAUQm9K1YXXpU3TYuP3s8jzr2qmPC4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QkIzLzgxOThFMDE0RTI0 NDExRjBCOTUzRDg5NjcxNkY1NkJDL1FtOUsxWVhYcFUzVFl1UDNzOGp6cjJxbVBD NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW05SzFZWFhwVTNUWXVQM3M4anpyMnFtUEM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCMy84MTk4RTAxNEUyNDQxMUYwQjk1M0Q4OTY3MTZGNTZCQy9EQjlEM0ExQUUy NDQxMUYwQkJDM0U0RjU3MTZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfZwwDANBgkqhkiG9w0BAQsFAAOCAQEAVFYA8JPJWNuI UQL3mTo2Bs/iz/sPxq1ff7d1r6LLSEoe2L+fJmCk4r/nI9F/AVbf0wxtkbheU4SA 1qikJH6V6pf3+xjBj0lNUffwcJgFW0MCsoQZXJ4v/oWjGs4K0Luc46JBXjUO6KP4 lfz1CqFj7qhj7GNHMX9DPZt6lP1jDW5+TjLCXzx+kh8nY+0mPVr7M5CDo5hcYlJO XyiXMzKDGAONV722WOKKCHJSnc1kOMRiT/gM1czODkJMp9fIpIaAELbErfaa2eUh BQiKIaiMA1vF+1PjkU3rkWg09gkTYD2zdfRJlSM1BkYd8heFNGFBP1AZvIpvehHA Duy/YjQKrw== -----END CERTIFICATE-----Generated at Thu Jan 8 09:14:08 2026 by rpki-client