This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/C2BDF91086EE11EFB5A6B352C4F9AE02.roa File: C2BDF91086EE11EFB5A6B352C4F9AE02.roa (raw, json) Hash identifier: wMI3ver8wVR/ZnAWos0yZDRDtV6JQS0+1dmbuEI8fSU= Subject key identifier: BD:A9:97:C0:88:73:30:73:D4:51:60:57:3B:B5:EB:9F:DE:2F:53:CF Certificate issuer: /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B Certificate serial: 0648 Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/C2BDF91086EE11EFB5A6B352C4F9AE02.roa Signing time: Thu 04 Dec 2025 21:35:58 +0000 ROA not before: Thu 04 Dec 2025 21:35:58 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 152879 IP address blocks: 2401:bc40:a500::/40 maxlen: 48 2401:bc40:e305::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B Validity Not Before: Dec 4 21:35:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6931febe-5820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:5a:fd:1b:46:e0:77:0d:97:05:f3:1d:bd: 96:eb:f0:2f:cd:df:53:64:27:dd:8b:80:80:d2:b9: 28:dd:15:48:8d:b2:fb:91:52:01:b4:ba:6e:59:88: 13:a6:2a:9d:f1:cb:09:4b:d3:1c:87:6b:85:93:99: 10:b3:ce:0a:fa:37:74:c2:d7:1e:7f:55:6a:dd:3a: 85:de:ef:d5:90:40:3d:e6:4f:15:3c:b6:c2:30:1d: 5b:57:1e:2e:b4:ae:4c:a7:79:c1:0c:d6:93:6f:19: bf:f2:8a:28:2f:6b:5c:79:78:71:1a:be:dc:8a:18: ae:06:5b:a7:88:50:a0:30:b6:f2:4f:b1:3a:7d:8d: 92:2d:3e:7a:ed:3b:a6:e8:b5:f0:96:21:51:fc:b0: 80:0d:c3:dc:a0:b8:05:3f:da:ca:8a:15:da:3e:f5: 90:0a:2d:35:04:00:71:b8:7e:c0:cd:2e:b5:4c:e1: 75:84:f3:5a:80:14:96:5c:69:d8:06:1a:9c:d3:1f: 4a:8d:a1:2f:ef:af:2e:1e:e3:41:ae:41:f1:d8:17: a4:ac:d7:ee:8b:e6:f9:2d:af:57:7e:82:6e:47:0f: e9:99:9b:73:a5:37:62:d3:d1:73:b3:61:64:e4:14: d9:b3:b3:b2:51:13:16:66:16:31:49:ec:d9:c1:84: cc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A9:97:C0:88:73:30:73:D4:51:60:57:3B:B5:EB:9F:DE:2F:53:CF X509v3 Authority Key Identifier: keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/C2BDF91086EE11EFB5A6B352C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:bc40:a500::/40 2401:bc40:e305::/48 Signature Algorithm: sha256WithRSAEncryption 02:0f:b3:c1:67:3c:2e:f8:42:bc:12:95:cf:1e:25:b5:5d:bd: 26:fc:5e:76:11:96:de:76:79:0f:50:b1:1c:47:a2:7d:97:0c: fb:ba:6a:c3:ee:29:c5:ad:8c:92:65:6b:33:a2:34:1f:0c:b9: 1e:ce:6b:04:97:ca:83:68:3f:d2:37:1e:b7:33:b9:9b:45:52: a2:30:0b:ba:89:fd:d8:2f:bb:30:13:03:78:f9:b2:54:6b:e6: d0:23:1c:03:fa:6a:77:c8:51:e3:9a:1f:29:be:e4:c8:d2:61: 87:16:ba:bf:68:9f:84:37:39:e5:47:8a:a2:bc:e6:8e:22:1c: 76:90:4e:d5:c4:f2:f6:f5:69:2d:6f:e4:4e:94:07:f8:f3:0b: 23:06:16:92:f5:ae:0f:71:27:78:b1:e7:d1:bf:bc:be:ba:7d: 5d:a1:7a:dd:c8:af:1e:6e:8f:84:fb:b7:fa:e6:e1:5d:2a:b7: e3:b9:ab:29:ef:a3:0b:c0:44:1d:a1:24:51:bd:15:0c:fd:c7: d6:a2:ec:27:bb:9a:27:76:5b:6d:da:ec:14:58:59:9a:be:d4: 32:a2:86:ed:5e:73:b8:e7:bc:c3:ca:11:b7:93:e8:8e:37:13: 15:96:32:22:f3:da:dd:86:9e:da:ae:a9:6c:91:0c:62:d2:39: 6c:64:72:7e -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MkMxMTAvBgNVBAUTKDU4QjRERjhFNDc1N0NBRkRFNTQ2MkY0QTFBRjg3MEZF MjE0NERDNUIwHhcNMjUxMjA0MjEzNTU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxZmViZS01ODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCVa/RtG4HcNlwXzHb2W6/Avzd9TZCfdi4CA0rko3RVIjbL7kVIBtLpuWYgT piqd8csJS9Mch2uFk5kQs84K+jd0wtcef1Vq3TqF3u/VkEA95k8VPLbCMB1bVx4u tK5Mp3nBDNaTbxm/8oooL2tceXhxGr7cihiuBluniFCgMLbyT7E6fY2SLT567Tum 6LXwliFR/LCADcPcoLgFP9rKihXaPvWQCi01BABxuH7AzS61TOF1hPNagBSWXGnY Bhqc0x9KjaEv768uHuNBrkHx2BekrNfui+b5La9XfoJuRw/pmZtzpTdi09Fzs2Fk 5BTZs7OyURMWZhYxSezZwYTMLQIDAQABo4ICoDCCApwwHQYDVR0OBBYEFL2pl8CI czBz1FFgVzu165/eL1PPMB8GA1UdIwQYMBaAFFi0345HV8r95UYvShr4cP4hRNxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzcyQy84RUM2MTQwRUMz QUExMUVCODcwRUE5MUNDNEY5QUUwMi9XTFRmamtkWHl2M2xSaTlLR3Zod19pRkUz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dMVGZqa2RYeXYzbFJpOUtHdmh3X2lGRTNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM3MkMvOEVDNjE0MEVDM0FBMTFFQjg3MEVBOTFDQzRGOUFFMDIvQzJCREY5MTA4 NkVFMTFFRkI1QTZCMzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKgYIKwYBBQUHAQcBAf8E GzAZMBcEAgACMBEDBgAkAbxApQMHACQBvEDjBTANBgkqhkiG9w0BAQsFAAOCAQEA Ag+zwWc8LvhCvBKVzx4ltV29JvxedhGW3nZ5D1CxHEeifZcM+7pqw+4pxa2MkmVr M6I0Hwy5Hs5rBJfKg2g/0jcetzO5m0VSojALuon92C+7MBMDePmyVGvm0CMcA/pq d8hR45ofKb7kyNJhhxa6v2ifhDc55UeKorzmjiIcdpBO1cTy9vVpLW/kTpQH+PML IwYWkvWuD3EneLHn0b+8vrp9XaF63civHm6PhPu3+ubhXSq347mrKe+jC8BEHaEk Ub0VDP3H1qLsJ7uaJ3ZbbdrsFFhZmr7UMqKG7V5zuOe8w8oRt5PojjcTFZYyIvPa 3Yae2q6pbJEMYtI5bGRyfg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:57 2025 by rpki-client