This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/56F1C6BCC91911F08B394C6DC4F9AE02.roa File: 56F1C6BCC91911F08B394C6DC4F9AE02.roa (raw, json) Hash identifier: sq2FH3KxuzVCERwQzUbxosanTt/57fQSY7WjnEZYE9A= Subject key identifier: 25:EC:7B:7D:9F:7D:A8:64:1E:D3:01:D7:3A:02:95:1E:88:3D:AE:2B Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: 12 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/56F1C6BCC91911F08B394C6DC4F9AE02.roa Signing time: Mon 24 Nov 2025 09:38:32 +0000 ROA not before: Mon 24 Nov 2025 09:38:32 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 18252 IP address blocks: 61.19.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Nov 24 09:38:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69242798-6bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:5e:1a:bb:56:d3:da:ac:7e:2b:db:8b:3e: f1:ff:90:cf:20:1f:e7:d8:0e:51:15:66:a7:c7:58: 94:de:96:c2:1c:29:5a:b7:14:54:05:7b:c4:04:7b: 8a:ca:2c:50:f7:08:35:12:f5:4d:61:45:86:4c:6d: f9:cc:cf:92:f6:e6:b2:1b:12:6c:df:9d:d3:b2:24: fc:b8:b7:fc:b3:37:44:58:56:2d:fb:93:c2:3f:9a: 7d:d6:8b:fb:e8:c9:62:8f:2f:4e:5b:ae:be:1a:73: b2:b6:04:b7:06:44:ab:c5:97:93:d8:a4:b6:a8:0c: c8:49:58:d7:fc:51:ee:ab:9f:53:b8:c5:df:cc:77: 70:fa:3d:e2:34:8b:24:a7:ab:87:65:f0:cd:14:7d: 32:27:10:e3:30:fe:9b:df:ca:3e:d3:ab:c1:65:ba: 7d:a1:71:a8:a7:4b:a4:de:7d:0a:25:81:d3:d5:40: 5a:df:56:a9:2f:e1:fc:3f:91:64:37:ba:d0:63:b8: 78:7b:23:1d:f3:3e:0e:6b:c3:5a:63:87:2b:be:40: 4a:db:81:bf:7c:fc:d4:d3:6f:9d:75:e3:c2:dd:ea: 5a:5d:27:0e:c6:b3:d4:1f:51:56:27:b1:18:93:a5: ed:4d:f9:10:87:2e:c4:34:46:82:ea:59:7a:10:5c: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EC:7B:7D:9F:7D:A8:64:1E:D3:01:D7:3A:02:95:1E:88:3D:AE:2B X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/56F1C6BCC91911F08B394C6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.19.128.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:2b:34:e9:d9:b1:d1:c8:13:de:30:04:4c:52:91:54:72:b5: aa:5b:5e:21:b6:9d:8f:2a:bd:ea:93:d6:65:b9:e5:79:d2:09: 52:36:95:4a:a1:8e:68:0d:af:0a:58:14:82:89:f8:6c:59:94: 69:fd:ca:99:eb:f9:e4:42:55:cf:c7:45:79:7a:a7:89:88:6a: d7:d2:01:a7:8d:ba:35:fa:70:a8:76:24:36:39:91:1e:6b:8a: a5:cd:1b:ea:83:4f:be:cb:81:85:57:a7:9d:9c:9c:98:1d:2a: 0b:1b:b5:de:b7:40:25:fa:a5:c1:aa:31:25:91:ff:10:c6:79: c1:c4:23:f9:b9:0f:08:b3:c8:09:e0:e9:39:4f:a5:c3:1f:48: 01:71:36:2b:3d:b8:00:f7:47:82:d4:56:f3:6a:8f:e6:4e:59: c1:51:52:af:1a:90:4c:2d:21:c0:60:de:6e:ba:1d:4f:b4:ae: a0:3a:73:ba:3a:2b:03:7c:7a:51:14:6a:8a:94:e1:09:84:25: 9c:ca:6f:26:34:14:bf:cd:31:41:a7:3a:c2:8c:30:66:4d:8e: c5:22:66:62:b2:ad:6a:8d:5e:a8:c3:ca:f2:e3:57:58:80:cf: 1d:1d:e4:bf:64:bf:8c:43:4a:0d:fa:a7:f1:17:53:3e:6e:a7: 67:b5:18:65 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk4RDExMC8GA1UEBRMoOUEzQTY3RUREQ0QwOTc3NTMzQTlBMEI4QzQ5RjRDMDEw MEM4NTM5MTAeFw0yNTExMjQwOTM4MzJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjQyNzk4LTZiY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChbF4au1bT2qx+K9uLPvH/kM8gH+fYDlEVZqfHWJTelsIcKVq3FFQFe8QEe4rK LFD3CDUS9U1hRYZMbfnMz5L25rIbEmzfndOyJPy4t/yzN0RYVi37k8I/mn3Wi/vo yWKPL05brr4ac7K2BLcGRKvFl5PYpLaoDMhJWNf8Ue6rn1O4xd/Md3D6PeI0iySn q4dl8M0UfTInEOMw/pvfyj7Tq8Flun2hcainS6TefQolgdPVQFrfVqkv4fw/kWQ3 utBjuHh7Ix3zPg5rw1pjhyu+QErbgb98/NTTb51148Ld6lpdJw7Gs9QfUVYnsRiT pe1N+RCHLsQ0RoLqWXoQXNo7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJex7fZ99 qGQe0wHXOgKVHog9riswHwYDVR0jBBgwFoAUmjpn7dzQl3UzqaC4xJ9MAQDIU5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OThEL0I4ODUzMUNBQzhF QzExRjBBMzQ0QUI0NUM0RjlBRTAyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWpwbjdkelFsM1V6cWFDNHhKOU1BUURJVTVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTk4RC9CODg1MzFDQUM4RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi81NkYxQzZCQ0M5 MTkxMUYwOEIzOTRDNkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBD0TgDANBgkqhkiG9w0BAQsFAAOCAQEAjSs06dmx0cgT3jAE TFKRVHK1qlteIbadjyq96pPWZbnledIJUjaVSqGOaA2vClgUgon4bFmUaf3Kmev5 5EJVz8dFeXqniYhq19IBp426NfpwqHYkNjmRHmuKpc0b6oNPvsuBhVennZycmB0q Cxu13rdAJfqlwaoxJZH/EMZ5wcQj+bkPCLPICeDpOU+lwx9IAXE2Kz24APdHgtRW 82qP5k5ZwVFSrxqQTC0hwGDebrodT7SuoDpzujorA3x6URRqipThCYQlnMpvJjQU v80xQac6wowwZk2OxSJmYrKtao1eqMPK8uNXWIDPHR3kv2S/jENKDfqn8RdTPm6n Z7UYZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:59:50 2025 by rpki-client