This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/BEF172F4BD1311EDAB02753EC4F9AE02.roa File: BEF172F4BD1311EDAB02753EC4F9AE02.roa (raw, json) Hash identifier: s4fCKmAzfLfiyPtpMm1I7YInFjR2uqzY8ys3Fd5Sz5o= Subject key identifier: C2:B5:9A:06:2C:67:0A:65:1A:DC:7B:A9:95:B1:B5:ED:18:75:0B:AD Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 04AD Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/BEF172F4BD1311EDAB02753EC4F9AE02.roa Signing time: Fri 28 Nov 2025 22:55:23 +0000 ROA not before: Fri 28 Nov 2025 22:55:23 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 11161 IP address blocks: 2400:8a20:130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197 (0x4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Nov 28 22:55:23 2025 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=692a285b-0c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:a6:7c:96:a9:fe:a1:e4:25:d7:78:9c:34: 02:a5:75:fd:37:1d:45:cc:b5:ce:8a:81:60:d5:fb: 0b:d0:4d:a4:40:66:1b:58:a1:e0:de:90:7c:4f:ef: cc:ac:92:de:77:93:f8:59:9c:cb:95:20:e8:c2:92: ad:5d:24:af:78:9d:ae:04:0c:71:45:f2:e1:ef:9c: dc:3a:75:93:64:c7:db:c2:75:3c:a7:1e:e5:55:cb: ce:89:8c:41:79:16:21:57:0a:8c:c0:a5:6e:59:95: 38:63:63:9e:0c:7e:3a:1e:0a:f8:07:b6:45:44:d9: b7:c5:98:d3:78:2a:55:4a:1d:0a:3a:85:7f:92:ac: a6:21:26:27:1e:67:20:0b:dc:69:df:97:29:4e:9b: dc:07:72:1d:c9:d3:19:40:c4:87:ec:ea:bc:06:5f: 45:3d:de:b5:4a:d9:2d:8e:0f:63:45:35:0f:24:61: 1b:12:08:08:7b:d5:dc:1f:6b:17:73:3c:7d:bd:1d: a6:2b:49:b8:49:5d:f4:3c:df:49:13:42:e0:6d:08: d4:4f:1f:63:2f:79:2e:d8:88:fb:bf:5d:83:d1:6c: 6a:57:92:40:4d:cc:40:51:b4:7a:ae:e1:92:b1:12: 86:7f:1d:c7:fc:28:fc:ed:1d:1c:3f:89:18:1e:ff: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B5:9A:06:2C:67:0A:65:1A:DC:7B:A9:95:B1:B5:ED:18:75:0B:AD X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/BEF172F4BD1311EDAB02753EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8a20:130::/48 Signature Algorithm: sha256WithRSAEncryption a1:22:9b:b9:2d:6d:50:19:75:c4:88:37:cd:80:8d:c4:27:ce: 3f:3f:81:75:c9:da:12:44:98:88:21:cb:14:b0:d5:ed:0c:fa: 5a:38:a6:24:e7:6f:d3:75:ca:50:d7:fb:9b:31:b1:be:72:e8: b5:fd:02:27:2a:b2:99:0e:17:2c:c5:03:f7:51:79:87:07:74: da:db:77:50:d5:09:3a:bd:6c:7e:84:b5:9d:15:12:84:8a:52: f3:cf:a6:2b:d5:47:04:49:c5:02:16:e7:f4:8a:1f:7d:ad:f3: da:07:44:a4:12:fb:36:34:24:88:d7:e1:3d:9c:2b:8f:cf:bd: db:21:74:81:e4:05:dd:c9:ba:72:f0:1b:f5:b0:a2:1f:8c:69: 90:b6:33:93:d1:f5:f7:37:5a:02:47:69:0a:79:f6:6a:fa:ff: c8:15:0b:03:7b:e6:de:04:de:5b:d7:bd:5d:34:0b:03:de:d6: aa:6b:e0:47:90:b9:a3:98:f3:10:fd:96:a5:0c:93:4a:54:94: 07:38:70:8c:f8:1a:4d:4c:fe:3c:b4:84:eb:9b:32:52:21:08: 3d:3b:82:2c:1b:89:e9:40:fd:91:81:e9:0a:3d:18:62:e2:7e: d0:09:56:b6:e6:a4:54:5f:63:2c:6c:96:e8:ea:f7:27:2e:9e: 1c:72:c5:a9 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUxMTI4MjI1NTIzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhMjg1Yi0wYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTmmfJap/qHkJdd4nDQCpXX9Nx1FzLXOioFg1fsL0E2kQGYbWKHg3pB8T+/M rJLed5P4WZzLlSDowpKtXSSveJ2uBAxxRfLh75zcOnWTZMfbwnU8px7lVcvOiYxB eRYhVwqMwKVuWZU4Y2OeDH46Hgr4B7ZFRNm3xZjTeCpVSh0KOoV/kqymISYnHmcg C9xp35cpTpvcB3IdydMZQMSH7Oq8Bl9FPd61Stktjg9jRTUPJGEbEggIe9XcH2sX czx9vR2mK0m4SV30PN9JE0LgbQjUTx9jL3ku2Ij7v12D0WxqV5JATcxAUbR6ruGS sRKGfx3H/Cj87R0cP4kYHv9WuQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFMK1mgYs ZwplGtx7qZWxte0YdQutMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJEQjEvM0ZBNjkyMDA4M0MwMTFFQ0I1NEIzOTdGQzRGOUFFMDIvQkVGMTcyRjRC RDEzMTFFREFCMDI3NTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAIogATAwDQYJKoZIhvcNAQELBQADggEBAKEim7ktbVAZ dcSIN82AjcQnzj8/gXXJ2hJEmIghyxSw1e0M+lo4piTnb9N1ylDX+5sxsb5y6LX9 AicqspkOFyzFA/dReYcHdNrbd1DVCTq9bH6EtZ0VEoSKUvPPpivVRwRJxQIW5/SK H32t89oHRKQS+zY0JIjX4T2cK4/PvdshdIHkBd3JunLwG/Wwoh+MaZC2M5PR9fc3 WgJHaQp59mr6/8gVCwN75t4E3lvXvV00CwPe1qpr4EeQuaOY8xD9lqUMk0pUlAc4 cIz4Gk1M/jy0hOubMlIhCD07giwbielA/ZGB6Qo9GGLiftAJVrbmpFRfYyxslujq 9ycunhxyxak= -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:59 2025 by rpki-client