This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/48B227F4E8D111F089B2D8B5616F56BC.roa File: 48B227F4E8D111F089B2D8B5616F56BC.roa (raw, json) Hash identifier: 3SC9H6oC7G/BQoC1mJ0aWR7RoAsy3S6P5QbGLaKsxIA= Subject key identifier: 59:8F:30:F9:F5:97:F9:D9:4A:E3:2B:7A:4C:23:90:7F:4F:22:B7:D6 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 01BC Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/48B227F4E8D111F089B2D8B5616F56BC.roa Signing time: Sat 03 Jan 2026 18:23:21 +0000 ROA not before: Sat 03 Jan 2026 18:23:21 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139601 IP address blocks: 2401:3a60:5400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 02:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Jan 3 18:23:21 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69595e99-dbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:77:82:46:6c:a3:d8:9b:36:0c:09:da:a5: 5c:7e:84:f9:6f:df:10:76:47:5e:d1:f3:40:44:36: 55:e4:cc:63:f7:3b:b5:22:73:ea:5f:5d:6b:c0:b0: 54:65:7a:b8:70:20:88:ce:45:8e:52:fa:4a:ca:91: d0:73:6f:92:5b:51:2f:23:d5:1a:b3:07:27:75:0c: 0e:00:5f:2f:2a:b5:bd:00:63:b2:e0:45:8d:e5:26: 91:94:66:44:5c:9a:aa:d8:53:c5:be:3a:c2:15:1f: f9:ac:4c:de:bb:3e:e1:13:27:13:bd:34:0e:94:7e: a4:d2:06:55:82:c8:96:bd:52:bf:40:70:90:16:f1: 98:78:fc:4d:db:63:da:27:7c:52:df:a9:21:68:df: f1:d2:89:0a:56:1f:3b:e3:e3:a7:ba:4d:29:45:66: 26:ec:d9:d0:ee:0d:7f:8a:ed:01:67:d9:7e:d5:cb: 4d:31:d3:86:9a:8e:fa:29:66:a2:d7:b6:ba:e0:a8: 37:16:a5:b3:dc:9f:71:f3:07:62:b8:4f:74:1a:dd: 65:0b:3c:05:26:4c:00:c9:64:1c:7d:a5:00:79:25: 8c:6d:bc:3c:11:44:73:c5:1c:65:ce:8d:37:f4:87: cd:35:04:3e:41:9e:4e:95:de:af:9f:6f:f1:51:08: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8F:30:F9:F5:97:F9:D9:4A:E3:2B:7A:4C:23:90:7F:4F:22:B7:D6 X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/48B227F4E8D111F089B2D8B5616F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:3a60:5400::/40 Signature Algorithm: sha256WithRSAEncryption 41:62:0a:e1:f7:6b:29:d8:8c:af:97:df:1a:00:1f:53:70:88: ad:0f:b8:b4:8e:b7:4c:20:b3:d2:fc:f5:6f:60:cf:30:ea:b5: ea:04:3e:2d:14:1c:61:af:1d:57:e3:75:03:45:44:2e:e0:8c: 80:6f:62:1e:d4:94:a4:78:3b:32:cd:5a:8b:58:74:fa:f9:a7: 63:0f:d5:8c:f7:0f:4d:3d:b0:3e:d4:9d:85:27:e8:0b:9c:6f: 14:b8:1b:84:da:90:ee:3f:49:64:f1:52:16:9c:7f:15:af:fa: 49:9a:2e:22:52:dc:4f:cc:bc:a3:ac:16:9b:d7:23:e4:68:fd: 16:22:f9:0d:9c:06:2a:a1:58:64:ef:7c:63:9f:94:70:bd:91: 18:fb:ae:82:3f:7b:76:a4:79:75:f5:ee:84:a0:db:e8:c2:4e: c9:6f:ca:3c:9c:5c:f4:3f:a2:6a:04:a1:84:f3:bd:c3:90:52: 2c:d3:47:11:ae:cb:86:f2:ce:a1:e9:9f:39:ba:0d:db:01:a6: 98:27:e3:02:42:26:72:07:70:a2:13:17:a9:87:f8:70:e1:1f: a1:ed:23:00:6a:38:0f:2c:0a:55:0c:10:70:a1:9a:c3:04:b0: fd:c0:76:4d:b9:d2:1b:5e:e4:91:c0:ec:c0:e8:d9:96:e1:d5: f3:f9:ed:99 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjYwMTAzMTgyMzIxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU5NWU5OS1kYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMN3gkZso9ibNgwJ2qVcfoT5b98Qdkde0fNARDZV5Mxj9zu1InPqX11rwLBU ZXq4cCCIzkWOUvpKypHQc2+SW1EvI9UaswcndQwOAF8vKrW9AGOy4EWN5SaRlGZE XJqq2FPFvjrCFR/5rEzeuz7hEycTvTQOlH6k0gZVgsiWvVK/QHCQFvGYePxN22Pa J3xS36khaN/x0okKVh874+Onuk0pRWYm7NnQ7g1/iu0BZ9l+1ctNMdOGmo76KWai 17a64Kg3FqWz3J9x8wdiuE90Gt1lCzwFJkwAyWQcfaUAeSWMbbw8EURzxRxlzo03 9IfNNQQ+QZ5Old6vn2/xUQidWQIDAQABo4IClzCCApMwHQYDVR0OBBYEFFmPMPn1 l/nZSuMrekwjkH9PIrfWMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQ5QjIvMEE2RjNCNDI5MTU1MTFFRUE0QzBGNjY4QzRGOUFFMDIvNDhCMjI3RjRF OEQxMTFGMDg5QjJEOEI1NjE2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E EjAQMA4EAgACMAgDBgAkATpgVDANBgkqhkiG9w0BAQsFAAOCAQEAQWIK4fdrKdiM r5ffGgAfU3CIrQ+4tI63TCCz0vz1b2DPMOq16gQ+LRQcYa8dV+N1A0VELuCMgG9i HtSUpHg7Ms1ai1h0+vmnYw/VjPcPTT2wPtSdhSfoC5xvFLgbhNqQ7j9JZPFSFpx/ Fa/6SZouIlLcT8y8o6wWm9cj5Gj9FiL5DZwGKqFYZO98Y5+UcL2RGPuugj97dqR5 dfXuhKDb6MJOyW/KPJxc9D+iagShhPO9w5BSLNNHEa7LhvLOoemfOboN2wGmmCfj AkImcgdwohMXqYf4cOEfoe0jAGo4DywKVQwQcKGawwSw/cB2TbnSG17kkcDswOjZ luHV8/ntmQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:19 2026 by rpki-client