This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/B0E8BC383B9911F09DE90D79C4F9AE02.roa File: B0E8BC383B9911F09DE90D79C4F9AE02.roa (raw, json) Hash identifier: sAZrKqeMzoSTzbfqkrtyTfEKHbSYlRzZrsbcTgM/X7o= Subject key identifier: 98:7F:AA:28:68:1E:8B:F1:35:D8:FA:9F:1F:44:B4:5C:22:4C:A2:9E Certificate issuer: /CN=A91583E2/serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Certificate serial: 60 Authority key identifier: 47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/B0E8BC383B9911F09DE90D79C4F9AE02.roa Signing time: Tue 25 Nov 2025 05:23:14 +0000 ROA not before: Tue 25 Nov 2025 05:23:14 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153380 IP address blocks: 2001:df4:8140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Validity Not Before: Nov 25 05:23:14 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69253d42-7244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:d5:32:29:36:dd:8e:4e:93:de:ae:da:80: 2a:7d:b8:75:0e:49:01:6f:93:af:cb:e0:81:98:d1: 68:3f:39:79:f0:09:15:be:c3:e4:6a:be:95:bc:e1: 5b:9f:d4:4b:89:b5:eb:ee:8e:82:f1:7a:76:22:5e: 8a:3a:e9:ed:44:94:39:39:24:2c:cc:a2:9d:f1:8b: da:21:ed:e3:a4:ef:a9:bc:bd:42:04:55:8b:19:06: 93:eb:0e:d1:a6:a5:bb:ce:26:59:ce:e8:3c:4f:7e: 6e:24:21:5d:d1:93:f6:d9:9a:34:24:91:32:6a:af: e5:38:db:78:a7:39:bc:2f:ca:07:b2:55:60:0f:c6: df:b2:c9:76:8b:25:45:9a:b4:03:54:4a:85:0f:3c: 46:60:e3:2a:e3:6b:2a:2e:e5:08:d0:d5:1d:f0:16: 62:f9:68:45:1c:95:d7:cc:82:91:02:b1:a2:4a:16: 0e:2e:1c:71:03:fa:78:ea:89:81:e7:18:9a:aa:d7: af:80:ca:95:15:00:ff:36:8f:da:02:5b:ab:cb:c8: 11:76:2a:a7:d7:f5:c8:34:2e:62:c8:f0:35:75:cf: 44:9e:fc:f8:15:73:18:c0:de:b3:81:a5:e8:bb:ab: f9:fe:28:1e:26:1a:a8:32:1d:c9:f3:b7:7c:71:58: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7F:AA:28:68:1E:8B:F1:35:D8:FA:9F:1F:44:B4:5C:22:4C:A2:9E X509v3 Authority Key Identifier: keyid:47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/B0E8BC383B9911F09DE90D79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:8140::/48 Signature Algorithm: sha256WithRSAEncryption 12:f7:74:b4:8a:cb:66:be:7b:b8:c1:2b:d8:6b:41:b5:cb:f1: 2b:ce:a7:4b:2c:41:c9:3b:ea:c2:87:70:2a:7f:c9:5f:c5:e0: 03:ff:6c:55:06:d4:1d:db:79:ce:35:76:2c:99:74:c1:6c:b4: 2a:a8:28:65:c9:4b:b2:53:47:ca:fe:78:be:c6:34:fa:45:b6: 07:8c:18:7b:59:da:7e:b1:6a:47:98:c3:4d:67:9c:ec:4f:bf: 3c:f4:6a:71:d4:93:e9:16:43:a8:65:2b:91:8c:a8:1d:e3:12: 42:9a:40:da:6f:0d:7a:5b:c3:f1:76:e7:b1:37:cd:f5:fa:71: 28:e3:00:ef:75:c4:38:17:81:7a:9b:c8:8c:0e:59:2a:49:30: 4f:25:3e:63:fd:e0:f7:b3:ff:a1:1c:af:f9:e9:91:ca:de:84: 2f:c3:24:a5:7d:11:9a:35:44:0d:ee:12:00:1f:86:6e:25:47: 39:1b:cd:1c:8b:05:77:83:77:ff:82:28:11:b9:42:f1:38:88: 70:90:64:16:11:07:c8:c5:58:d1:bd:f6:31:f0:ca:96:4a:2a: 24:0d:20:be:16:13:6d:89:71:0c:b7:2e:a8:2f:e3:0c:59:f4: 88:7e:79:83:0d:7f:ad:9c:06:25:0e:a2:66:40:ec:e2:72:a4: f8:eb:6a:82 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNDdBNjE5MEFDMDVDMzA4MDdFRDE1RjQwOTIxQkIyMzJE QjU1MjQ4NDAeFw0yNTExMjUwNTIzMTRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MjUzZDQyLTcyNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/NNUyKTbdjk6T3q7agCp9uHUOSQFvk6/L4IGY0Wg/OXnwCRW+w+RqvpW84Vuf 1EuJtevujoLxenYiXoo66e1ElDk5JCzMop3xi9oh7eOk76m8vUIEVYsZBpPrDtGm pbvOJlnO6DxPfm4kIV3Rk/bZmjQkkTJqr+U423inObwvygeyVWAPxt+yyXaLJUWa tANUSoUPPEZg4yrjayou5QjQ1R3wFmL5aEUcldfMgpECsaJKFg4uHHED+njqiYHn GJqq16+AypUVAP82j9oCW6vLyBF2KqfX9cg0LmLI8DV1z0Se/PgVcxjA3rOBpei7 q/n+KB4mGqgyHcnzt3xxWLC/AgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUmH+qKGge i/E12PqfH0S0XCJMop4wHwYDVR0jBBgwFoAUR6YZCsBcMIB+0V9AkhuyMttVJIQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzREM0NDMDhBM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlCLTBWOUFraHV5TXR0VkpJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjZZWkNzQmNNSUItMFY5QWtodXlNdHRWSklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80RDNDQzA4QTNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi9CMEU4QkMzODNC OTkxMUYwOURFOTBENzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfSBQDANBgkqhkiG9w0BAQsFAAOCAQEAEvd0tIrLZr57 uMEr2GtBtcvxK86nSyxByTvqwodwKn/JX8XgA/9sVQbUHdt5zjV2LJl0wWy0Kqgo ZclLslNHyv54vsY0+kW2B4wYe1nafrFqR5jDTWec7E+/PPRqcdST6RZDqGUrkYyo HeMSQppA2m8NelvD8XbnsTfN9fpxKOMA73XEOBeBepvIjA5ZKkkwTyU+Y/3g97P/ oRyv+emRyt6EL8MkpX0RmjVEDe4SAB+GbiVHORvNHIsFd4N3/4IoEblC8TiIcJBk FhEHyMVY0b32MfDKlkoqJA0gvhYTbYlxDLcuqC/jDFn0iH55gw1/rZwGJQ6iZkDs 4nKk+Otqgg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:05 2025 by rpki-client