This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/15E884EAF73311ED8E92F45DC4F9AE02.roa File: 15E884EAF73311ED8E92F45DC4F9AE02.roa (raw, json) Hash identifier: Fh2Am2j7U9RrgdFXomlyNwcsWnidXxkcXn7XnXDFM7E= Subject key identifier: 4B:D0:DF:8F:A6:5E:DC:D3:0B:C5:11:74:65:E7:1A:0F:32:42:2E:46 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 04B2 Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/15E884EAF73311ED8E92F45DC4F9AE02.roa Signing time: Fri 28 Nov 2025 22:55:29 +0000 ROA not before: Fri 28 Nov 2025 22:55:29 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 151338 IP address blocks: 2400:8a20:123::/48 maxlen: 48 2400:8a20:124::/48 maxlen: 48 2400:8a20:125::/48 maxlen: 48 2400:8a20:1a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Nov 28 22:55:29 2025 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=692a2861-bfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:2d:85:79:cd:95:70:d2:fb:36:88:97:66: ef:d5:2c:d0:29:5c:35:38:81:cb:2f:ac:fb:66:c0: e8:13:77:99:69:e8:0a:8b:d9:70:84:93:5b:4c:2c: e6:6e:de:6e:50:53:d3:95:7f:f5:8e:4b:c0:fc:f0: 8c:c7:c9:7b:65:88:82:a1:12:7c:98:c2:ee:a4:f3: 1d:c6:e3:6c:cc:ff:b4:12:c6:e1:46:b8:38:f7:5d: 3a:29:61:50:08:af:47:39:bd:be:fa:b5:f7:b8:23: 54:c9:af:68:9b:5e:1d:46:30:25:a7:18:b7:0e:88: d0:c7:3a:99:94:de:07:f2:6c:57:53:36:ad:a1:65: 16:65:9d:3b:58:1f:49:b8:37:c3:96:ac:fc:d2:94: 14:6d:c6:be:90:11:1b:08:b8:40:9f:7b:11:d0:3c: 86:55:ef:46:19:1e:c6:3b:53:96:67:2f:56:21:eb: 90:2d:4b:03:a2:98:e6:3c:76:a7:23:50:c0:cd:8c: 2d:89:e1:c5:bc:6d:31:67:68:7f:41:a4:68:0d:eb: de:96:ed:2e:b0:a4:7c:9c:71:50:b4:46:16:9a:e1: 5b:6f:c2:10:cc:de:e3:b5:e6:6c:c1:b3:fc:b2:24: fb:b6:6d:9a:cd:84:5d:1c:f2:e3:f1:4b:d5:da:79: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D0:DF:8F:A6:5E:DC:D3:0B:C5:11:74:65:E7:1A:0F:32:42:2E:46 X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/15E884EAF73311ED8E92F45DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8a20:123::-2400:8a20:125:ffff:ffff:ffff:ffff:ffff 2400:8a20:1a0::/44 Signature Algorithm: sha256WithRSAEncryption 45:0b:ef:9a:b4:43:aa:1a:ed:2b:74:6c:82:94:f1:6c:43:bc: 19:4c:b5:d7:89:bc:b9:3a:53:77:0d:f3:28:19:b8:1c:17:b9: a7:1a:b8:56:91:a3:4e:7a:f1:0f:5c:51:cf:27:09:ce:07:d3: 9b:45:4f:e1:a1:85:49:8b:7f:90:1b:e0:43:5f:cd:41:6f:1f: 14:cd:8a:d5:4b:ee:03:4e:09:d1:c2:fd:15:59:6e:13:cb:2c: 5f:4d:29:14:0a:88:7d:ed:72:1d:88:ec:f0:ab:b1:03:c8:21: 6b:0c:46:32:9d:08:99:f5:c9:37:e7:63:3b:40:a0:11:1f:1d: 0f:f7:28:21:e7:6c:a0:a3:d2:79:23:4d:a4:fa:d4:54:2b:a8: 67:ea:ad:55:d2:1d:f9:af:ff:72:b3:6e:54:a3:f0:e4:1b:f6: 89:80:d1:07:d2:bc:34:bf:d0:ff:25:09:49:74:bb:24:ab:02: b1:56:2b:9c:7a:90:d5:8a:3f:c0:76:ea:52:99:be:91:7d:86: d9:0f:a2:3c:83:af:d5:fa:32:ba:1b:3a:44:db:5a:61:50:7c: 4e:f4:12:b6:c2:49:4a:2f:08:ff:15:2c:8a:fb:86:b9:7c:db: 0d:7f:55:b2:3d:f2:a7:9d:33:70:f1:65:8e:0b:07:62:2b:8e: d3:7d:67:9c -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUxMTI4MjI1NTI5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhMjg2MS1iZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYYthXnNlXDS+zaIl2bv1SzQKVw1OIHLL6z7ZsDoE3eZaegKi9lwhJNbTCzm bt5uUFPTlX/1jkvA/PCMx8l7ZYiCoRJ8mMLupPMdxuNszP+0EsbhRrg49106KWFQ CK9HOb2++rX3uCNUya9om14dRjAlpxi3DojQxzqZlN4H8mxXUzatoWUWZZ07WB9J uDfDlqz80pQUbca+kBEbCLhAn3sR0DyGVe9GGR7GO1OWZy9WIeuQLUsDopjmPHan I1DAzYwtieHFvG0xZ2h/QaRoDevelu0usKR8nHFQtEYWmuFbb8IQzN7jteZswbP8 siT7tm2azYRdHPLj8UvV2nnDcwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFEvQ34+m XtzTC8URdGXnGg8yQi5GMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJEQjEvM0ZBNjkyMDA4M0MwMTFFQ0I1NEIzOTdGQzRGOUFFMDIvMTVFODg0RUFG NzMzMTFFRDhFOTJGNDVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMCMEAgACMB0wEgMHACQAiiABIwMHASQAiiABJAMHBCQAiiABoDANBgkqhkiG 9w0BAQsFAAOCAQEARQvvmrRDqhrtK3RsgpTxbEO8GUy114m8uTpTdw3zKBm4HBe5 pxq4VpGjTnrxD1xRzycJzgfTm0VP4aGFSYt/kBvgQ1/NQW8fFM2K1UvuA04J0cL9 FVluE8ssX00pFAqIfe1yHYjs8KuxA8ghawxGMp0ImfXJN+djO0CgER8dD/coIeds oKPSeSNNpPrUVCuoZ+qtVdId+a//crNuVKPw5Bv2iYDRB9K8NL/Q/yUJSXS7JKsC sVYrnHqQ1Yo/wHbqUpm+kX2G2Q+iPIOv1foyuhs6RNtaYVB8TvQStsJJSi8I/xUs ivuGuXzbDX9Vsj3yp50zcPFljgsHYiuO031nnA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:12 2025 by rpki-client