This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/D756DF180BF411ECB17CCF3AC4F9AE02.roa File: D756DF180BF411ECB17CCF3AC4F9AE02.roa (raw, json) Hash identifier: QXOdMYntfx6iGCKjXYNL7yMJL+jqIjxIc+DsPG7SFk0= Subject key identifier: D7:85:B4:C9:53:C7:6D:B1:A0:B5:07:84:91:03:25:A3:97:B7:3E:08 Certificate issuer: /CN=A912C72C/serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B Certificate serial: 0646 Authority key identifier: 58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/D756DF180BF411ECB17CCF3AC4F9AE02.roa Signing time: Thu 04 Dec 2025 21:35:57 +0000 ROA not before: Thu 04 Dec 2025 21:35:56 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 12189 IP address blocks: 2401:bc40::/32 maxlen: 32 2401:bc40::/35 maxlen: 35 2401:bc40:100::/40 maxlen: 40 2401:bc40:300::/40 maxlen: 40 2401:bc40:500::/40 maxlen: 40 2401:bc40:6000::/35 maxlen: 35 2401:bc40:a000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C72C, serialNumber=58B4DF8E4757CAFDE5462F4A1AF870FE2144DC5B Validity Not Before: Dec 4 21:35:56 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6931febc-47e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f4:5d:1f:b4:df:97:49:e5:03:5c:7b:b6:39: a8:c1:6a:0c:ae:d0:d5:df:74:dd:d4:62:af:79:e1: ac:67:a2:56:78:50:df:81:82:57:1d:dc:34:6a:6a: d8:d6:c4:35:17:43:da:5b:f7:1c:a3:97:67:af:68: 3a:14:fc:b2:ba:d9:23:a0:63:9a:ff:d4:f5:b6:c6: 16:b5:66:e8:01:11:5c:34:9c:6e:62:12:cc:36:d9: ca:db:52:18:fa:24:d1:0c:7e:73:2e:2a:42:d0:37: ba:35:13:41:ab:0f:fa:bc:09:bd:04:6c:c1:85:e2: 77:9d:5f:73:49:16:4c:8c:1d:02:87:19:aa:43:3a: 5b:ee:fb:ac:e5:ad:ce:91:9b:5f:a7:d2:87:63:8b: 4b:0f:53:56:89:95:37:b2:a2:ef:c4:f8:dd:1f:10: 20:cc:79:75:2a:f1:fa:4c:ef:fb:95:0e:a1:66:d6: d8:32:04:6a:16:8e:e7:1d:2e:57:5e:fe:d2:fd:2c: 25:41:1e:18:2a:38:9c:98:5d:96:7d:27:05:a4:3a: 10:bf:e7:a6:26:91:f0:af:82:ea:58:f0:26:68:9c: 7c:f8:f2:6e:f5:a8:aa:68:f3:b4:18:98:4f:56:98: bf:bc:0f:a3:d9:f7:7d:6b:0c:f5:46:aa:df:62:86: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:B4:C9:53:C7:6D:B1:A0:B5:07:84:91:03:25:A3:97:B7:3E:08 X509v3 Authority Key Identifier: keyid:58:B4:DF:8E:47:57:CA:FD:E5:46:2F:4A:1A:F8:70:FE:21:44:DC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLTfjkdXyv3lRi9KGvhw_iFE3Fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C72C/8EC6140EC3AA11EB870EA91CC4F9AE02/D756DF180BF411ECB17CCF3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:bc40::/32 Signature Algorithm: sha256WithRSAEncryption 98:dc:50:7e:10:ff:f1:29:64:dc:dd:c0:ab:4d:0b:2c:d1:d4: 7a:b8:82:86:83:5d:88:17:a1:3b:0c:46:bd:ee:9a:27:04:75: 9b:9e:57:41:df:17:56:79:a4:2d:3e:fe:ae:a0:9f:db:a4:fb: 3f:75:3c:44:5a:34:8b:3d:3a:79:f1:f2:11:c4:9a:82:4e:8a: b8:65:64:d6:e3:f9:89:fd:8b:c8:ad:9d:9b:67:05:ba:f5:ed: 1c:20:d5:52:60:5a:28:50:4e:6d:c5:5d:84:48:a6:e2:7c:6b: 51:da:e5:d5:e8:19:1c:b0:09:97:51:22:fc:91:99:34:0a:26: ae:1b:45:fc:fd:0e:59:a1:ff:b3:05:b3:8d:6d:42:42:39:e1: 0f:c3:dd:6b:93:e6:b8:05:a0:54:06:b7:72:52:b8:28:2e:05: 95:b5:84:09:5e:b3:c3:a4:85:d0:71:32:67:26:da:9f:21:ae: c1:28:41:af:37:ff:6a:fd:33:0f:70:f9:bc:0f:d7:65:d7:a9: 48:6a:c3:4b:19:53:ae:c0:4f:8f:c8:3e:04:e9:25:80:4a:15: 2c:f9:7e:fc:8b:1a:25:82:89:1d:2b:16:e0:55:8c:47:12:bb: 8c:37:6b:07:fe:b6:a4:bf:46:8e:dd:c7:29:33:1c:41:ee:4b: 41:11:45:32 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MkMxMTAvBgNVBAUTKDU4QjRERjhFNDc1N0NBRkRFNTQ2MkY0QTFBRjg3MEZF MjE0NERDNUIwHhcNMjUxMjA0MjEzNTU2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxZmViYy00N2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fRdH7Tfl0nlA1x7tjmowWoMrtDV33Td1GKveeGsZ6JWeFDfgYJXHdw0amrY 1sQ1F0PaW/cco5dnr2g6FPyyutkjoGOa/9T1tsYWtWboARFcNJxuYhLMNtnK21IY +iTRDH5zLipC0De6NRNBqw/6vAm9BGzBheJ3nV9zSRZMjB0ChxmqQzpb7vus5a3O kZtfp9KHY4tLD1NWiZU3sqLvxPjdHxAgzHl1KvH6TO/7lQ6hZtbYMgRqFo7nHS5X Xv7S/SwlQR4YKjicmF2WfScFpDoQv+emJpHwr4LqWPAmaJx8+PJu9aiqaPO0GJhP Vpi/vA+j2fd9awz1RqrfYoZ9gQIDAQABo4ICljCCApIwHQYDVR0OBBYEFNeFtMlT x22xoLUHhJEDJaOXtz4IMB8GA1UdIwQYMBaAFFi0345HV8r95UYvShr4cP4hRNxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzcyQy84RUM2MTQwRUMz QUExMUVCODcwRUE5MUNDNEY5QUUwMi9XTFRmamtkWHl2M2xSaTlLR3Zod19pRkUz RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dMVGZqa2RYeXYzbFJpOUtHdmh3X2lGRTNGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM3MkMvOEVDNjE0MEVDM0FBMTFFQjg3MEVBOTFDQzRGOUFFMDIvRDc1NkRGMTgw QkY0MTFFQ0IxN0NDRjNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAbxAMA0GCSqGSIb3DQEBCwUAA4IBAQCY3FB+EP/xKWTc 3cCrTQss0dR6uIKGg12IF6E7DEa97ponBHWbnldB3xdWeaQtPv6uoJ/bpPs/dTxE WjSLPTp58fIRxJqCToq4ZWTW4/mJ/YvIrZ2bZwW69e0cINVSYFooUE5txV2ESKbi fGtR2uXV6BkcsAmXUSL8kZk0CiauG0X8/Q5Zof+zBbONbUJCOeEPw91rk+a4BaBU BrdyUrgoLgWVtYQJXrPDpIXQcTJnJtqfIa7BKEGvN/9q/TMPcPm8D9dl16lIasNL GVOuwE+PyD4E6SWAShUs+X78ixolgokdKxbgVYxHEruMN2sH/rakv0aO3ccpMxxB 7ktBEUUy -----END CERTIFICATE-----Generated at Sat Dec 6 18:29:34 2025 by rpki-client