This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/D26FE5F62BC511EEA4569A67C4F9AE02.roa File: D26FE5F62BC511EEA4569A67C4F9AE02.roa (raw, json) Hash identifier: nfvl8LItHRnHU7cOFArXS6hV97B38VNc9C2Ezi3lr6U= Subject key identifier: 56:2C:D4:80:35:2E:19:BF:B9:4B:0A:9A:56:85:5C:F7:76:A3:E2:9A Certificate issuer: /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Certificate serial: 0572 Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/D26FE5F62BC511EEA4569A67C4F9AE02.roa Signing time: Sun 30 Nov 2025 22:54:55 +0000 ROA not before: Sun 30 Nov 2025 22:54:55 +0000 ROA not after: Mon 30 Mar 2026 00:00:00 +0000 asID: 151338 IP address blocks: 2407:d840:20::/48 maxlen: 48 2407:d840:21::/48 maxlen: 48 2407:d840:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1394 (0x572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2EC, serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Validity Not Before: Nov 30 22:54:55 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=692ccb3e-a3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:55:5d:61:d7:79:3f:c0:4e:82:0c:8c:70: 7b:d5:4b:fa:ca:0c:0e:5c:9a:a8:54:50:f7:7f:60: 0c:1e:99:12:61:26:ea:45:05:96:cb:f5:fb:39:aa: 69:ba:5c:8c:4f:5c:46:b2:8f:c5:2d:4b:59:7d:d5: ff:33:fc:e1:80:91:a5:13:b8:07:bf:9c:9d:70:e4: 0b:fe:2d:5b:34:ad:d4:6e:44:8d:a2:cb:00:62:b6: fe:3c:85:26:61:ea:9f:96:d2:61:d7:f1:e3:3e:a5: 97:f5:db:79:42:34:19:b5:ec:29:c0:aa:e1:94:42: 8d:fd:69:37:1a:2f:a7:ec:ae:31:1e:cc:d4:c6:35: b0:60:dd:12:9c:e3:83:12:a7:97:6f:cd:96:ed:06: 11:05:02:eb:0c:bf:7f:d0:29:ac:d4:97:5d:e5:f7: 6b:82:bc:70:9f:d1:ac:e0:81:43:6e:58:84:97:da: 3b:46:c5:3d:2c:7c:c9:d0:4b:dc:ab:2a:1a:ea:61: 6f:36:24:cf:8e:e4:95:e3:41:22:3b:59:78:35:7a: f2:8e:ad:87:ab:ec:ad:d4:15:b3:8a:2c:2f:6f:e0: db:7a:09:4a:21:b3:11:be:95:f6:56:c6:ce:16:de: 6b:65:48:ba:21:20:35:5d:ca:aa:6b:3d:a5:ba:cd: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2C:D4:80:35:2E:19:BF:B9:4B:0A:9A:56:85:5C:F7:76:A3:E2:9A X509v3 Authority Key Identifier: keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/D26FE5F62BC511EEA4569A67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:d840:20::/47 2407:d840:200::/40 Signature Algorithm: sha256WithRSAEncryption 12:af:37:11:77:54:ab:5f:a2:01:7b:cf:21:9c:ac:eb:4c:ab: 70:e2:59:c6:a8:26:b8:44:db:d0:47:ed:40:74:b9:4e:1c:d9: e8:47:3b:5b:36:18:72:59:43:a3:bf:b7:7b:56:bc:6a:56:19: 60:0f:e9:b2:b7:1e:01:07:fc:7d:b6:7e:cc:e2:dc:98:c1:d7: f6:a2:f3:ac:c8:8a:98:d7:4b:a5:bb:3b:dc:a0:ad:81:5f:6b: 8b:3a:bc:b5:d0:67:78:ed:2a:fb:cc:67:eb:23:3e:71:08:e0: f4:f2:fd:59:9a:97:c7:ca:c6:27:5b:fb:65:bf:91:47:86:10: 3e:93:75:b2:4c:8c:92:19:87:54:45:e5:62:a9:4a:57:9c:f7: 19:6a:05:48:1e:ff:a8:ff:08:49:e4:5f:89:1e:4c:bf:48:d1: 8d:85:cf:92:a0:59:da:e4:ad:59:bf:9c:b5:d7:0f:7e:b8:a5: 27:f4:48:27:4c:9a:df:88:65:d1:a8:39:ce:f7:8b:2e:7a:8e: d2:c7:94:38:e6:9b:1a:39:42:75:12:11:7f:88:0f:ed:38:d7: 0c:c7:1b:50:ac:ab:fc:c3:05:4f:74:ea:ff:52:88:10:7a:2f: 25:12:1c:3f:ba:6e:14:b4:54:24:be:9c:d2:ff:86:b3:9a:15: 45:d8:e8:36 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF QjZGOTI1NzMwHhcNMjUxMTMwMjI1NDU1WhcNMjYwMzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJjY2IzZS1hM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A5VXWHXeT/AToIMjHB71Uv6ygwOXJqoVFD3f2AMHpkSYSbqRQWWy/X7Oapp ulyMT1xGso/FLUtZfdX/M/zhgJGlE7gHv5ydcOQL/i1bNK3UbkSNossAYrb+PIUm YeqfltJh1/HjPqWX9dt5QjQZtewpwKrhlEKN/Wk3Gi+n7K4xHszUxjWwYN0SnOOD EqeXb82W7QYRBQLrDL9/0Cms1Jdd5fdrgrxwn9Gs4IFDbliEl9o7RsU9LHzJ0Evc qyoa6mFvNiTPjuSV40EiO1l4NXryjq2Hq+yt1BWziiwvb+DbeglKIbMRvpX2VsbO Ft5rZUi6ISA1Xcqqaz2lus0eFwIDAQABo4ICoDCCApwwHQYDVR0OBBYEFFYs1IA1 Lhm/uUsKmlaFXPd2o+KaMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUIyRUMvODQyNzU5NTYyQjA5MTFFQzg1MUI5ODBFQzRGOUFFMDIvRDI2RkU1RjYy QkM1MTFFRUE0NTY5QTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKgYIKwYBBQUHAQcBAf8E GzAZMBcEAgACMBEDBwEkB9hAACADBgAkB9hAAjANBgkqhkiG9w0BAQsFAAOCAQEA Eq83EXdUq1+iAXvPIZys60yrcOJZxqgmuETb0EftQHS5ThzZ6Ec7WzYYcllDo7+3 e1a8alYZYA/psrceAQf8fbZ+zOLcmMHX9qLzrMiKmNdLpbs73KCtgV9rizq8tdBn eO0q+8xn6yM+cQjg9PL9WZqXx8rGJ1v7Zb+RR4YQPpN1skyMkhmHVEXlYqlKV5z3 GWoFSB7/qP8ISeRfiR5Mv0jRjYXPkqBZ2uStWb+ctdcPfrilJ/RIJ0ya34hl0ag5 zveLLnqO0seUOOabGjlCdRIRf4gP7TjXDMcbUKyr/MMFT3Tq/1KIEHovJRIcP7pu FLRUJL6c0v+Gs5oVRdjoNg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:50 2025 by rpki-client