This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa File: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (raw, json) Hash identifier: 9Y5yYrTvQYYtyak8703IegO2crTaXwhTRyd+8O5jVlI= Subject key identifier: CE:3E:6D:71:6D:12:48:8F:C1:05:3B:80:E5:29:4E:14:16:F2:51:A6 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 34EB Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa Signing time: Thu 04 Dec 2025 15:11:35 +0000 ROA not before: Thu 04 Dec 2025 15:11:35 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 14618 IP address blocks: 216.99.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Dec 4 15:11:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6931a4a7-918c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:f8:8c:74:8a:65:89:7d:aa:dd:ab:3f:33: bb:66:bf:46:96:81:43:cf:c1:f3:9f:d4:54:a6:51: b8:9e:96:09:c6:55:64:e1:57:c5:79:ae:da:9f:bb: f1:14:e9:99:2d:8b:d9:30:61:30:bb:f5:36:e5:26: db:6e:7c:28:50:69:ba:88:b1:98:d7:71:f9:8b:ae: b1:9b:4d:e1:37:b6:f0:25:2f:46:16:e9:3d:d6:91: 20:02:3f:d5:9e:90:45:21:6a:c8:7c:ec:73:e9:1c: 3c:fe:c9:2e:14:30:0e:50:cd:21:c8:6d:19:33:d5: 30:8d:e2:17:a1:cc:96:13:46:51:7e:2e:20:c4:45: 96:1a:9a:ed:33:e6:c0:21:41:1b:5a:3c:8d:42:ee: a0:a3:ec:77:3d:13:c7:a3:7d:60:65:af:ab:eb:dd: 4c:a0:b5:1d:bd:10:ff:48:af:b7:7e:a6:ff:d2:4e: 92:0b:70:10:17:d7:be:9d:02:9b:ad:bc:39:85:ab: 67:73:29:c0:51:3d:8f:11:e4:66:5e:ca:b2:1d:d8: 4c:84:ad:63:42:78:4b:64:27:f7:be:74:4e:da:63: d8:db:93:2b:b6:13:07:e1:df:76:b6:eb:ee:1b:93: 9d:ec:75:4a:d2:71:d1:37:29:a0:60:32:60:63:5f: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3E:6D:71:6D:12:48:8F:C1:05:3B:80:E5:29:4E:14:16:F2:51:A6 X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 216.99.198.0/24 Signature Algorithm: sha256WithRSAEncryption 49:34:a8:fa:ac:42:20:50:c1:a5:c6:4f:68:03:4a:ce:c6:44: b1:32:66:2e:ae:b5:8f:4f:6f:72:2c:4f:88:e2:f0:49:34:7d: bc:3f:2b:f3:c2:16:77:11:2e:fd:1f:18:f0:9e:23:85:45:f0: 1b:c8:dd:5c:44:63:b8:7e:1c:6b:36:fa:ed:dc:53:84:71:24: fd:b9:13:e6:1f:48:f0:6c:de:ce:90:d0:40:e7:77:c9:01:54: 67:86:6b:cf:50:26:f4:56:77:ef:fd:65:8a:a7:4e:a9:99:2d: 6b:dc:3f:c9:b8:23:a5:96:56:d5:2f:55:6f:48:bb:aa:d5:36: 4b:ab:b5:a2:ff:13:d3:45:21:35:54:95:95:d0:01:f4:37:04: 06:91:1e:e8:3f:65:dc:0e:a7:70:1e:a0:c6:76:3a:e1:b2:1e: 86:bb:ce:8a:c5:c7:00:9d:20:fd:28:66:83:f8:1c:9d:a0:39: 4c:a6:25:4c:86:ce:19:e5:c7:2b:ae:ec:f5:11:e7:34:fe:c1: 5a:5a:ab:fb:7c:6a:3c:0b:62:43:71:cd:2b:e0:a8:ef:c0:4f: c5:c1:5d:cd:10:2c:e2:c5:4a:1a:fe:06:11:82:98:49:73:fd: b5:d0:68:72:db:48:d9:92:1d:7d:aa:e6:07:87:50:84:58:62: 8e:52:ca:78 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjUxMjA0MTUxMTM1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxYTRhNy05MThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujn4jHSKZYl9qt2rPzO7Zr9GloFDz8Hzn9RUplG4npYJxlVk4VfFea7an7vx FOmZLYvZMGEwu/U25SbbbnwoUGm6iLGY13H5i66xm03hN7bwJS9GFuk91pEgAj/V npBFIWrIfOxz6Rw8/skuFDAOUM0hyG0ZM9UwjeIXocyWE0ZRfi4gxEWWGprtM+bA IUEbWjyNQu6go+x3PRPHo31gZa+r691MoLUdvRD/SK+3fqb/0k6SC3AQF9e+nQKb rbw5hatncynAUT2PEeRmXsqyHdhMhK1jQnhLZCf3vnRO2mPY25MrthMH4d92tuvu G5Od7HVK0nHRNymgYDJgY1+wcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM4+bXFt EkiPwQU7gOUpThQW8lGmMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTEyNTgvQkIyRERDRTIxREE2MTFFMjg2RDkxRDlFMDhCMDJDRDIvOENGNkVCMkE4 RDNDMTFGMEE4MTIzRjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADYY8YwDQYJKoZIhvcNAQELBQADggEBAEk0qPqsQiBQwaXG T2gDSs7GRLEyZi6utY9Pb3IsT4ji8Ek0fbw/K/PCFncRLv0fGPCeI4VF8BvI3VxE Y7h+HGs2+u3cU4RxJP25E+YfSPBs3s6Q0EDnd8kBVGeGa89QJvRWd+/9ZYqnTqmZ LWvcP8m4I6WWVtUvVW9Iu6rVNkurtaL/E9NFITVUlZXQAfQ3BAaRHug/ZdwOp3Ae oMZ2OuGyHoa7zorFxwCdIP0oZoP4HJ2gOUymJUyGzhnlxyuu7PUR5zT+wVpaq/t8 ajwLYkNxzSvgqO/AT8XBXc0QLOLFShr+BhGCmElz/bXQaHLbSNmSHX2q5geHUIRY Yo5Syng= -----END CERTIFICATE-----Generated at Sat Dec 6 14:12:17 2025 by rpki-client