This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/F0520A385DD611EAA4AD4767C4F9AE02.roa File: F0520A385DD611EAA4AD4767C4F9AE02.roa (raw, json) Hash identifier: kJMo9RQs1RmR4jKIjh2FdUcRITpXXdCWCEKsh+3zIHs= Subject key identifier: F8:A9:56:6E:40:80:CD:8F:6C:A9:ED:E8:EE:6E:42:64:0D:60:63:89 Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Certificate serial: 0A96 Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/F0520A385DD611EAA4AD4767C4F9AE02.roa Signing time: Wed 26 Feb 2025 20:18:41 +0000 ROA not before: Wed 26 Feb 2025 20:18:41 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 3605 IP address blocks: 2404:8c00::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2710 (0xa96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Validity Not Before: Feb 26 20:18:41 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bf7721-e313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:08:0e:f8:04:41:c4:bd:a4:db:fe:9e:47:e8: 86:bc:7c:9d:5e:a9:09:e7:0d:d5:ac:9f:75:a7:19: 46:6c:7a:a4:02:b0:fd:cc:82:27:1c:d6:a7:9b:93: 23:57:a7:30:c9:97:44:60:f4:b2:59:ed:de:26:1b: 5a:cb:28:2e:7e:f9:c4:cd:e8:fc:cb:a2:83:fc:b1: df:ab:d9:5c:3c:61:97:1a:d9:54:6f:98:0a:fa:e2: 7c:b4:05:03:1c:68:da:10:af:86:de:76:66:f8:db: bd:45:e8:74:6c:4d:a0:56:c3:86:d8:c1:94:94:d8: e6:be:62:f9:df:7c:7a:61:ee:dc:90:62:23:1d:6a: 44:5b:53:0d:f1:a6:e5:92:10:2a:fd:16:29:39:4c: 21:85:9e:ab:fd:56:88:be:7d:6a:df:14:d7:9a:28: 61:7d:bb:cb:6c:e2:3e:7b:dc:bd:99:5b:8b:aa:a9: e6:c8:79:5d:61:c5:76:d1:a3:8f:7f:c8:cc:4b:79: 06:0c:4d:71:4a:99:a1:e2:00:b2:cd:9c:21:ba:31: fb:4e:8c:ad:47:23:d0:90:13:84:2c:ce:70:74:8e: db:cb:65:8d:7a:f4:bb:83:42:c8:7b:a9:bc:0b:4c: f1:d6:3d:37:8e:ad:e5:b7:53:5d:3e:26:d3:53:16: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A9:56:6E:40:80:CD:8F:6C:A9:ED:E8:EE:6E:42:64:0D:60:63:89 X509v3 Authority Key Identifier: keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/F0520A385DD611EAA4AD4767C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:8c00::/32 Signature Algorithm: sha256WithRSAEncryption 64:08:75:ef:13:40:f2:85:f9:31:9f:d9:f1:34:ed:f0:da:83: 08:cc:94:a2:f4:61:04:0a:20:7f:a9:41:a4:34:e1:31:36:5e: ba:73:be:e1:3f:5c:4c:6f:fe:9d:59:a0:1a:5f:af:c9:72:f7: 36:96:22:9f:b8:bd:3b:31:d0:b0:a3:a5:b0:39:ed:a3:4d:5f: 1d:c7:5b:07:43:65:d4:f4:25:b0:f3:95:d3:22:d9:f7:d8:5b: ed:77:22:86:aa:13:60:ff:a4:80:8c:71:ab:00:32:01:15:3b: 79:37:5b:a8:8c:00:d0:b6:c9:be:9e:96:57:26:f4:83:79:b8: ea:75:1d:6b:a0:a2:0a:e5:8a:00:b7:ca:88:76:86:fe:89:ce: b0:59:50:3f:66:7a:c5:9c:81:ee:68:da:37:1b:41:65:24:17: d3:55:5a:20:47:5b:56:27:00:5a:81:fa:4c:1d:c9:d3:ce:58: 11:9d:35:f6:18:e5:85:58:66:a8:5e:30:0b:85:c3:bf:6f:59: 03:3c:20:8e:5f:e6:71:70:f1:ca:71:b2:eb:dd:da:ba:f4:fc: 40:b7:bc:80:d9:64:ac:de:4c:4e:bd:1a:72:73:80:29:7e:f0: 80:27:ad:8c:c9:98:2b:7a:79:a1:c4:a9:54:45:d4:9e:f3:81: d8:63:01:0b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY4QTExMTAvBgNVBAUTKDE1MkEzQjQzMjI1Q0ZBMkM1RjhERTI3QTlBNjg5M0Qz QjIzRjVERTMwHhcNMjUwMjI2MjAxODQxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JmNzcyMS1lMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QgO+ARBxL2k2/6eR+iGvHydXqkJ5w3VrJ91pxlGbHqkArD9zIInHNanm5Mj V6cwyZdEYPSyWe3eJhtayygufvnEzej8y6KD/LHfq9lcPGGXGtlUb5gK+uJ8tAUD HGjaEK+G3nZm+Nu9Reh0bE2gVsOG2MGUlNjmvmL533x6Ye7ckGIjHWpEW1MN8abl khAq/RYpOUwhhZ6r/VaIvn1q3xTXmihhfbvLbOI+e9y9mVuLqqnmyHldYcV20aOP f8jMS3kGDE1xSpmh4gCyzZwhujH7ToytRyPQkBOELM5wdI7by2WNevS7g0LIe6m8 C0zx1j03jq3lt1NdPibTUxbg7wIDAQABo4ICljCCApIwHQYDVR0OBBYEFPipVm5A gM2PbKnt6O5uQmQNYGOJMB8GA1UdIwQYMBaAFBUqO0MiXPosX43ieppok9OyP13j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjhBMS8yRTFDQzY0NDUx MTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1peGZqZUo2bW1pVDA3SV9Y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTbzdReUpjLWl4ZmplSjZtbWlUMDdJX1hlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDY4QTEvMkUxQ0M2NDQ1MTE4MTFFQTkzODdDNjZCQzRGOUFFMDIvRjA1MjBBMzg1 REQ2MTFFQUE0QUQ0NzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBIwAMA0GCSqGSIb3DQEBCwUAA4IBAQBkCHXvE0Dyhfkx n9nxNO3w2oMIzJSi9GEECiB/qUGkNOExNl66c77hP1xMb/6dWaAaX6/Jcvc2liKf uL07MdCwo6WwOe2jTV8dx1sHQ2XU9CWw85XTItn32FvtdyKGqhNg/6SAjHGrADIB FTt5N1uojADQtsm+npZXJvSDebjqdR1roKIK5YoAt8qIdob+ic6wWVA/ZnrFnIHu aNo3G0FlJBfTVVogR1tWJwBagfpMHcnTzlgRnTX2GOWFWGaoXjALhcO/b1kDPCCO X+ZxcPHKcbLr3dq69PxAt7yA2WSs3kxOvRpyc4ApfvCAJ62MyZgrenmhxKlURdSe 84HYYwEL -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:58 2025 by rpki-client