This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/49B14A284A5B11F0BB8BCD26C4F9AE02.roa File: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (raw, json) Hash identifier: 6V3Y0qKzoR1SIE/C41B0Si9iayed9FecyNH/7XoNeQM= Subject key identifier: 6A:DE:6C:6D:A8:98:20:D5:6A:EA:1E:FD:F5:24:8A:B9:D9:34:3C:0D Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Certificate serial: 5A Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/49B14A284A5B11F0BB8BCD26C4F9AE02.roa Signing time: Mon 01 Dec 2025 05:33:41 +0000 ROA not before: Mon 01 Dec 2025 05:33:41 +0000 ROA not after: Mon 30 Mar 2026 00:00:00 +0000 asID: 38722 IP address blocks: 2001:df3:1b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Validity Not Before: Dec 1 05:33:41 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=692d28b5-3954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:60:4c:36:9c:15:34:51:a9:40:53:ec:e8: d6:c2:df:d7:f0:a1:be:db:84:d2:7b:42:47:a0:bd: 8e:61:b3:78:ac:8b:67:f4:41:9a:1b:b1:ab:b3:a1: 2b:88:6a:03:71:80:bf:99:d3:e2:de:e8:57:48:f8: b7:d9:a9:19:44:52:dd:95:c6:87:86:71:c2:05:b8: f9:d1:3e:18:43:b5:06:c3:ac:e0:82:c9:0d:26:86: ee:a5:1b:5b:8e:d3:c3:18:91:47:61:79:1b:2e:a2: 7b:3d:56:95:d9:d0:a2:c6:bc:60:c5:58:ea:4a:0f: 4b:5f:0d:9e:d5:b0:6a:a9:da:44:48:f4:12:92:ea: fd:49:27:bd:f1:f8:4a:94:f3:06:0a:ac:91:1a:c7: 29:ac:ba:d5:e3:39:7b:2d:44:f3:8f:ec:42:96:a8: ca:ae:48:79:8d:64:4a:4c:2b:56:c8:0f:b4:73:31: 5b:01:ff:7e:fd:57:6f:9b:c7:51:1d:21:9b:94:86: 57:df:72:3b:18:31:55:5e:17:ec:ea:51:89:b0:4d: a3:d1:2d:56:65:df:2d:31:cc:3b:54:7f:20:ea:06: 0e:46:45:6b:55:ad:00:91:f2:02:0d:b9:25:f1:87: 5d:4c:d8:d7:07:7f:05:50:af:5f:e0:59:fe:bc:3a: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DE:6C:6D:A8:98:20:D5:6A:EA:1E:FD:F5:24:8A:B9:D9:34:3C:0D X509v3 Authority Key Identifier: keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/49B14A284A5B11F0BB8BCD26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df3:1b80::/48 Signature Algorithm: sha256WithRSAEncryption 19:54:72:e6:6a:22:96:0e:54:e5:a4:94:b9:1a:5d:dd:80:f5: fc:79:9c:43:ba:e9:50:b9:38:52:cb:32:9b:f1:ea:6b:6e:b7: 05:5e:da:d7:69:d1:be:69:8e:e2:8b:84:92:52:b5:91:fa:93: 46:f5:73:8a:d2:5a:68:d0:de:17:c5:3d:d2:5f:55:36:7d:6b: 3f:55:40:71:52:43:f7:7c:1b:3e:44:0f:11:f7:aa:44:09:e5: b9:a9:94:c7:73:ef:73:3e:fb:49:74:0e:bf:d0:78:d1:2e:b2: 1c:72:1a:87:5b:70:61:5d:f6:7d:a3:5b:b2:6b:a5:39:6e:b1: 6b:49:34:cc:07:44:8f:e0:39:8c:7e:23:02:d5:4e:0e:7c:57: 74:e9:17:f8:c8:5a:be:b4:57:2b:70:e0:7b:ab:00:7a:55:72: 07:a4:68:8f:e2:cc:1f:fa:12:17:4e:50:a6:dd:78:9f:e4:4d: 5c:e9:aa:59:d2:10:53:26:0f:bc:88:54:c7:5c:e8:71:cc:e7: 14:2e:a5:04:c0:56:52:9f:0c:49:53:b7:0f:6c:76:d6:13:ff: ea:9d:7d:cf:55:e9:d7:62:98:69:ff:92:80:e0:26:ac:5f:4b: e4:85:b9:96:e6:9e:05:e5:99:aa:96:f0:a6:c1:ce:01:fe:33: 3a:c5:93:c5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUEyNzExMC8GA1UEBRMoOTI4RThBQTgwRDk5QTcyM0Y2QTkwMjFBRTVFN0IwMzJB Q0VEREI3QTAeFw0yNTEyMDEwNTMzNDFaFw0yNjAzMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MmQyOGI1LTM5NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFHWBMNpwVNFGpQFPs6NbC39fwob7bhNJ7QkegvY5hs3isi2f0QZobsauzoSuI agNxgL+Z0+Le6FdI+LfZqRlEUt2VxoeGccIFuPnRPhhDtQbDrOCCyQ0mhu6lG1uO 08MYkUdheRsuons9VpXZ0KLGvGDFWOpKD0tfDZ7VsGqp2kRI9BKS6v1JJ73x+EqU 8wYKrJEaxymsutXjOXstRPOP7EKWqMquSHmNZEpMK1bID7RzMVsB/379V2+bx1Ed IZuUhlffcjsYMVVeF+zqUYmwTaPRLVZl3y0xzDtUfyDqBg5GRWtVrQCR8gINuSXx h11M2NcHfwVQr1/gWf68OlA/AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUat5sbaiY INVq6h799SSKudk0PA0wHwYDVR0jBBgwFoAUko6KqA2ZpyP2qQIa5eewMqzt23ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1QTI3LzlEQzIyMDU0NEE1 ODExRjBCOTc3MzE4MEM0RjlBRTAyL2tvNktxQTJacHlQMnFRSWE1ZWV3TXF6dDIz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva282S3FBMlpweVAycVFJYTVlZXdNcXp0MjNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUEyNy85REMyMjA1NDRBNTgxMUYwQjk3NzMxODBDNEY5QUUwMi80OUIxNEEyODRB NUIxMUYwQkI4QkNEMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfMbgDANBgkqhkiG9w0BAQsFAAOCAQEAGVRy5moilg5U 5aSUuRpd3YD1/HmcQ7rpULk4Ussym/Hqa263BV7a12nRvmmO4ouEklK1kfqTRvVz itJaaNDeF8U90l9VNn1rP1VAcVJD93wbPkQPEfeqRAnluamUx3Pvcz77SXQOv9B4 0S6yHHIah1twYV32faNbsmulOW6xa0k0zAdEj+A5jH4jAtVODnxXdOkX+MhavrRX K3Dge6sAelVyB6Roj+LMH/oSF05Qpt14n+RNXOmqWdIQUyYPvIhUx1zoccznFC6l BMBWUp8MSVO3D2x21hP/6p19z1Xp12KYaf+SgOAmrF9L5IW5luaeBeWZqpbwpsHO Af4zOsWTxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:46:19 2025 by rpki-client