This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/F2DF64BAD28511F0A20E5C80C4F9AE02.roa File: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (raw, json) Hash identifier: s1vpGIKirgtSHmf9KuCxnuNf6mZcAnxglDUHzp5/fcY= Subject key identifier: 87:4B:6A:D9:98:42:C8:0A:72:01:7F:2B:00:E8:2F:AC:5E:44:3D:8D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: CF Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/F2DF64BAD28511F0A20E5C80C4F9AE02.roa Signing time: Sat 06 Dec 2025 09:28:40 +0000 ROA not before: Sat 06 Dec 2025 09:28:39 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 152698 IP address blocks: 2001:df4:8441::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 09:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Dec 6 09:28:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6933f747-7b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:3a:de:e9:af:7a:c9:68:0b:46:22:bc:d6: 03:2e:9e:f2:dc:bc:55:e9:91:73:5c:29:be:6a:10: ea:42:aa:96:9b:6e:1d:8f:5e:0a:f0:4e:9e:1e:28: 3f:a0:be:e3:d8:10:e6:92:13:ba:58:ef:89:50:4b: 2c:ea:55:b9:16:ab:7c:5e:64:90:ec:68:9f:d1:b6: ea:f5:e2:ad:b6:31:65:f0:ee:99:39:c6:97:23:7a: f8:d5:ed:0a:c0:55:e0:60:7b:4c:c6:88:85:11:11: 4a:a2:ad:c5:00:66:8d:ef:07:8b:24:6c:ca:d7:9d: 06:c9:3f:71:05:bb:68:11:d4:de:8e:ed:98:2c:0e: 8b:21:b3:89:6b:42:d3:eb:8f:83:b6:6c:3f:6c:7e: ab:43:14:0e:0f:1b:25:ba:cb:9d:78:ea:fb:b6:78: 5f:cd:a0:7c:97:1d:fc:0a:fb:46:f8:fd:ff:1b:4c: 3f:bf:dd:e2:2d:22:10:e5:1c:11:d1:34:a5:b0:56: a1:9b:68:ea:b4:90:1f:29:7f:5c:30:dd:f4:59:72: 98:2d:b2:19:0d:e3:7e:e1:73:fe:91:c8:72:3a:aa: c4:06:59:09:8c:7a:65:d9:9b:14:97:71:f1:a3:1c: 2a:6c:93:34:b2:d3:1d:f4:de:29:c3:5f:57:e4:7e: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:6A:D9:98:42:C8:0A:72:01:7F:2B:00:E8:2F:AC:5E:44:3D:8D X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/F2DF64BAD28511F0A20E5C80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:8441::/48 Signature Algorithm: sha256WithRSAEncryption 1d:8a:f8:1d:60:a1:54:d6:9d:4b:db:e8:0c:8e:85:c3:44:6f: b7:e9:b5:7e:19:70:ac:c4:23:72:fb:b0:2e:31:52:77:67:af: b0:62:02:28:f4:ba:23:f5:31:06:66:a3:d3:65:68:a6:67:a4: 27:6c:99:b6:89:11:45:c7:56:1d:b3:7d:ea:b6:50:ed:ff:3d: 29:18:25:a0:e0:25:c8:c9:47:8b:70:1b:8a:fa:cc:4a:78:1f: 34:2b:82:fc:a1:f6:77:19:43:5d:97:b7:6e:57:68:e8:2a:13: ce:a5:f5:c2:a7:1f:e9:05:2a:6c:bc:1b:de:04:51:c8:ee:57: 53:d0:ba:89:a6:68:e8:1e:9b:9b:ee:ea:50:48:d1:2f:75:40: d0:79:b4:01:e4:9e:70:0d:92:d8:c7:93:50:08:7e:c6:d6:e3: 66:db:a3:dd:4d:2a:70:2e:e8:26:78:12:b8:5a:5a:9c:c5:d4: 1b:dc:3f:80:93:36:0b:cf:63:bf:b9:a5:92:3d:3c:b4:a7:dc: ed:b6:2d:52:9d:82:11:6a:5d:77:ec:86:46:bd:47:09:84:22: 03:bb:58:e7:41:6e:5d:66:87:f3:7f:50:81:53:4a:92:9f:16: 88:20:95:71:73:0e:07:02:69:b9:1f:89:f3:c0:29:89:33:78: 41:fa:a5:43 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjUxMjA2MDkyODM5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMzZjc0Ny03YjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoA63umvesloC0YivNYDLp7y3LxV6ZFzXCm+ahDqQqqWm24dj14K8E6eHig/ oL7j2BDmkhO6WO+JUEss6lW5Fqt8XmSQ7Gif0bbq9eKttjFl8O6ZOcaXI3r41e0K wFXgYHtMxoiFERFKoq3FAGaN7weLJGzK150GyT9xBbtoEdTeju2YLA6LIbOJa0LT 64+Dtmw/bH6rQxQODxslusudeOr7tnhfzaB8lx38CvtG+P3/G0w/v93iLSIQ5RwR 0TSlsFahm2jqtJAfKX9cMN30WXKYLbIZDeN+4XP+kchyOqrEBlkJjHpl2ZsUl3Hx oxwqbJM0stMd9N4pw19X5H7oPQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIdLatmY QsgKcgF/KwDoL6xeRD2NMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU4N0UvODQyOEI5RTZBMUNGMTFFRjg3OEU2MDYxQzRGOUFFMDIvRjJERjY0QkFE Mjg1MTFGMEEyMEU1QzgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30hEEwDQYJKoZIhvcNAQELBQADggEBAB2K+B1goVTW nUvb6AyOhcNEb7fptX4ZcKzEI3L7sC4xUndnr7BiAij0uiP1MQZmo9NlaKZnpCds mbaJEUXHVh2zfeq2UO3/PSkYJaDgJcjJR4twG4r6zEp4HzQrgvyh9ncZQ12Xt25X aOgqE86l9cKnH+kFKmy8G94EUcjuV1PQuommaOgem5vu6lBI0S91QNB5tAHknnAN ktjHk1AIfsbW42bbo91NKnAu6CZ4ErhaWpzF1BvcP4CTNgvPY7+5pZI9PLSn3O22 LVKdghFqXXfshka9RwmEIgO7WOdBbl1mh/N/UIFTSpKfFogglXFzDgcCabkfifPA KYkzeEH6pUM= -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:06 2025 by rpki-client