This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/E5AC554A897211EEA179DA5DC4F9AE02.roa File: E5AC554A897211EEA179DA5DC4F9AE02.roa (raw, json) Hash identifier: KZUF8BssowgeDDElrmfBd3Wi1MTanQLIgwgvTwUCAKk= Subject key identifier: D3:E8:32:D1:00:F8:F3:D8:67:51:2D:A4:FD:80:55:B3:95:1F:CF:C0 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 04AF Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/E5AC554A897211EEA179DA5DC4F9AE02.roa Signing time: Fri 28 Nov 2025 22:55:26 +0000 ROA not before: Fri 28 Nov 2025 22:55:26 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 136011 IP address blocks: 2400:8a20:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Nov 28 22:55:26 2025 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=692a285d-ffde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:a7:b1:b7:77:f4:32:11:24:f3:85:02:6c: f2:98:e2:9e:9e:40:6b:3f:61:46:61:0d:92:4f:a5: 9f:41:f6:f2:87:5c:43:89:5b:de:8e:bc:a4:76:70: 2f:cb:7e:5b:ad:50:91:26:09:a3:f5:ec:03:44:71: 3a:4e:ba:23:39:33:69:e1:82:c8:98:ca:00:50:3e: 0b:19:69:42:b3:bc:0a:fc:ae:53:1f:43:f8:5c:73: d7:48:a3:ca:fb:1a:9b:17:d7:fe:8e:0f:4e:7a:83: 96:0d:7e:b3:77:8d:82:c3:5e:4c:87:c4:23:ba:d9: fc:35:9d:10:ff:36:44:2f:b9:04:c8:34:97:f0:08: 45:8a:68:bb:ca:cc:60:e3:47:28:a9:fc:8d:62:70: 9d:8e:2e:15:7d:f8:f4:c3:a6:4b:ba:b8:9a:bb:20: 87:36:45:50:2e:ce:c1:43:9f:26:5e:f8:89:45:e2: 50:a5:b4:26:2e:ef:bd:66:74:e9:f7:8b:4e:bb:e0: a3:60:fa:dd:12:47:80:f7:6c:05:2a:61:31:ae:6b: a6:d1:50:14:f0:9f:96:30:47:39:95:a4:7e:30:5a: 47:f2:d3:b8:c2:d2:38:ff:b8:93:dd:17:8a:0f:b4: 28:46:0d:b2:ab:ef:11:d2:5b:01:26:54:e4:a4:4c: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E8:32:D1:00:F8:F3:D8:67:51:2D:A4:FD:80:55:B3:95:1F:CF:C0 X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/E5AC554A897211EEA179DA5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:8a20:126::/48 Signature Algorithm: sha256WithRSAEncryption 61:2b:88:7d:09:9c:2e:1a:d4:ac:21:27:a8:3d:51:df:b2:99: 4e:16:62:6b:ee:87:ca:80:ea:ce:f0:ad:9e:e7:e7:07:21:07: 2c:c0:a2:6b:ad:d3:e3:8e:92:5c:40:a5:9b:ef:81:9e:53:70: fb:c3:5a:f9:c5:94:aa:e6:d0:ce:d6:ee:03:97:4b:1a:fa:b0: e2:1e:0b:b3:58:70:3f:5b:75:66:12:28:2c:d9:f2:68:08:d2: 65:54:9d:9d:76:1b:16:07:0c:4e:55:ca:27:3f:78:ce:cf:b5: aa:ef:e8:6a:c3:64:f5:57:34:bc:44:c6:cb:9d:e1:df:27:9b: ac:db:c7:a0:4a:3b:84:eb:9e:53:dc:91:75:34:a8:49:1f:65: 7e:5e:7f:8a:9e:a9:ab:23:4b:a8:41:76:ed:bb:c5:3a:72:f2: 64:f5:39:6e:51:c8:21:f8:24:85:bf:e3:8d:12:4e:e3:8b:e3: 7e:54:fe:db:28:ad:2d:64:ba:bc:3a:e7:24:28:79:76:1a:e5: 4a:50:f3:20:36:f0:7e:25:21:16:b7:41:35:5c:1b:af:14:97: 42:a8:b2:f1:68:5c:0b:56:18:58:c0:eb:c3:b8:34:10:f4:df: 75:4c:b6:44:02:31:db:6c:4b:53:c4:96:8f:81:cb:50:a9:72: c6:2e:5a:93 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjUxMTI4MjI1NTI2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJhMjg1ZC1mZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsWnsbd39DIRJPOFAmzymOKenkBrP2FGYQ2ST6WfQfbyh1xDiVvejrykdnAv y35brVCRJgmj9ewDRHE6TrojOTNp4YLImMoAUD4LGWlCs7wK/K5TH0P4XHPXSKPK +xqbF9f+jg9OeoOWDX6zd42Cw15Mh8Qjutn8NZ0Q/zZEL7kEyDSX8AhFimi7ysxg 40coqfyNYnCdji4Vffj0w6ZLuriauyCHNkVQLs7BQ58mXviJReJQpbQmLu+9ZnTp 94tOu+CjYPrdEkeA92wFKmExrmum0VAU8J+WMEc5laR+MFpH8tO4wtI4/7iT3ReK D7QoRg2yq+8R0lsBJlTkpEw2VwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNPoMtEA +PPYZ1EtpP2AVbOVH8/AMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJEQjEvM0ZBNjkyMDA4M0MwMTFFQ0I1NEIzOTdGQzRGOUFFMDIvRTVBQzU1NEE4 OTcyMTFFRUExNzlEQTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAIogASYwDQYJKoZIhvcNAQELBQADggEBAGEriH0JnC4a 1KwhJ6g9Ud+ymU4WYmvuh8qA6s7wrZ7n5wchByzAomut0+OOklxApZvvgZ5TcPvD WvnFlKrm0M7W7gOXSxr6sOIeC7NYcD9bdWYSKCzZ8mgI0mVUnZ12GxYHDE5Vyic/ eM7Ptarv6GrDZPVXNLxExsud4d8nm6zbx6BKO4TrnlPckXU0qEkfZX5ef4qeqasj S6hBdu27xTpy8mT1OW5RyCH4JIW/440STuOL435U/tsorS1kurw65yQoeXYa5UpQ 8yA28H4lIRa3QTVcG68Ul0KosvFoXAtWGFjA68O4NBD033VMtkQCMdtsS1PElo+B y1CpcsYuWpM= -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:03 2025 by rpki-client