This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/F6A8B3960A1511F0BB6C770DC4F9AE02.roa File: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (raw, json) Hash identifier: zube208I7nc1pgqe/rLjskVR+S+L8lpyAr5nz7YaDzA= Subject key identifier: 7B:6A:B9:76:9E:2E:1B:61:3C:B7:9A:F0:71:C6:03:FA:97:6E:DC:CB Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 99 Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/F6A8B3960A1511F0BB6C770DC4F9AE02.roa Signing time: Tue 18 Nov 2025 08:34:36 +0000 ROA not before: Tue 18 Nov 2025 08:34:36 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 150706 IP address blocks: 2404:de80::/32 maxlen: 32 2404:de80::/39 maxlen: 39 2404:de80:0:1::/64 maxlen: 64 2404:de80:200::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Nov 18 08:34:36 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=691c2f9c-74ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:e1:c5:83:02:55:c3:a8:26:74:0e:e7:61: 65:a4:56:91:36:c0:ab:4a:e2:bc:a3:25:85:ed:0b: 4f:ec:04:c5:2e:42:10:af:4b:17:2d:de:a9:c7:91: a3:4f:59:73:93:f0:ea:56:9e:55:80:e8:c4:29:c1: 7b:e3:7d:9c:4f:5e:bb:70:22:da:04:ea:b1:62:f6: 8d:39:9d:b2:4b:91:3a:25:3a:11:6d:73:5a:e7:7f: 0c:b5:43:0a:ea:22:77:13:63:ec:ac:3b:ca:31:8f: 12:de:44:51:e7:69:20:a2:33:6f:d1:9b:99:71:fd: de:17:5c:1e:b1:b2:f1:8d:2b:77:45:fa:57:e4:dc: 30:bb:ee:2f:5d:62:37:12:d0:1b:dd:64:67:f6:09: fd:46:a0:ed:76:fb:17:96:49:f0:00:58:c6:66:89: 65:19:ba:a9:eb:ef:c7:9b:a9:84:0e:11:75:02:68: e1:28:c4:0b:8f:fe:f8:c7:84:c6:16:17:a6:63:ad: c4:ff:23:e5:ae:aa:69:33:0e:64:61:9f:80:34:3d: f3:ce:92:3b:ad:5b:1d:bc:7a:fb:bb:c3:e3:05:e0: 11:1c:99:24:b8:04:da:06:d5:76:ca:65:46:a6:0b: 78:f1:b6:ab:88:9a:53:6f:4f:f5:db:b9:c0:ea:5f: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6A:B9:76:9E:2E:1B:61:3C:B7:9A:F0:71:C6:03:FA:97:6E:DC:CB X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/F6A8B3960A1511F0BB6C770DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:de80::/32 Signature Algorithm: sha256WithRSAEncryption a9:88:a2:b8:6d:2f:7b:d7:5e:8a:2b:8c:61:5d:c7:0f:c3:b2: ac:25:db:20:34:62:90:ad:14:4b:5b:68:d0:70:11:88:c0:ad: 99:12:ca:68:49:79:62:06:ac:10:0f:38:f8:29:00:3f:b3:23: a0:38:bd:0f:9e:25:3d:8c:ca:0b:b5:a7:c2:ad:3f:5e:f9:e9: d3:ad:54:e8:ed:88:0f:e4:f9:cc:1c:14:c2:77:a1:12:f0:a9: f9:a9:68:df:4e:e4:59:10:f8:df:c7:69:ec:8e:e1:12:b1:9e: 74:56:3c:27:c1:cb:31:b2:77:fc:ae:64:3f:95:76:48:7f:b5: fe:1b:1c:d0:07:80:37:f4:d7:6d:42:8b:87:85:3c:a6:c2:20: 91:72:33:14:e7:68:7e:74:59:39:16:4a:22:e1:78:38:ee:a9: 23:e9:02:d9:ea:55:a8:74:f2:f6:92:cf:a1:20:56:51:03:50: bf:46:e5:42:4e:20:1a:09:f0:8e:dc:4c:bf:4e:b8:54:6b:0c: 1a:a9:14:d5:e1:ac:52:a8:09:90:2b:06:30:cb:14:b4:0c:7e: 31:aa:98:9b:83:b0:1c:0e:36:2b:21:09:fc:b8:fc:51:d9:8b: 2c:b6:16:ef:d2:be:0e:55:74:7f:eb:2a:a9:77:e8:9b:2d:3d: b8:14:4f:b8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTExMTAvBgNVBAUTKDNEMUZDQjcyNTVDNTI1MDNFMTBBRTU4NEIxMTg5QTE1 Q0Y1NjA3NEUwHhcNMjUxMTE4MDgzNDM2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFjMmY5Yy03NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDjhxYMCVcOoJnQO52FlpFaRNsCrSuK8oyWF7QtP7ATFLkIQr0sXLd6px5Gj T1lzk/DqVp5VgOjEKcF7432cT167cCLaBOqxYvaNOZ2yS5E6JToRbXNa538MtUMK 6iJ3E2PsrDvKMY8S3kRR52kgojNv0ZuZcf3eF1wesbLxjSt3RfpX5Nwwu+4vXWI3 EtAb3WRn9gn9RqDtdvsXlknwAFjGZollGbqp6+/Hm6mEDhF1AmjhKMQLj/74x4TG FhemY63E/yPlrqppMw5kYZ+AND3zzpI7rVsdvHr7u8PjBeARHJkkuATaBtV2ymVG pgt48bariJpTb0/127nA6l+Q8QIDAQABo4ICljCCApIwHQYDVR0OBBYEFHtquXae LhthPLea8HHGA/qXbtzLMB8GA1UdIwQYMBaAFD0fy3JVxSUD4QrlhLEYmhXPVgdO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFMS9DNDU2MTAyRTA5 RjExMUYwOEI0NEEzMjVDNEY5QUUwMi9QUl9MY2xYRkpRUGhDdVdFc1JpYUZjOVdC MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0IwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJGRTEvQzQ1NjEwMkUwOUYxMTFGMDhCNDRBMzI1QzRGOUFFMDIvRjZBOEIzOTYw QTE1MTFGMEJCNkM3NzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBN6AMA0GCSqGSIb3DQEBCwUAA4IBAQCpiKK4bS97116K K4xhXccPw7KsJdsgNGKQrRRLW2jQcBGIwK2ZEspoSXliBqwQDzj4KQA/syOgOL0P niU9jMoLtafCrT9e+enTrVTo7YgP5PnMHBTCd6ES8Kn5qWjfTuRZEPjfx2nsjuES sZ50Vjwnwcsxsnf8rmQ/lXZIf7X+GxzQB4A39NdtQouHhTymwiCRcjMU52h+dFk5 Fkoi4Xg47qkj6QLZ6lWodPL2ks+hIFZRA1C/RuVCTiAaCfCO3Ey/TrhUawwaqRTV 4axSqAmQKwYwyxS0DH4xqpibg7AcDjYrIQn8uPxR2Yssthbv0r4OVXR/6yqpd+ib LT24FE+4 -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:46 2025 by rpki-client