This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/C731AFD03B9A11F0B7924C1FC4F9AE02.roa File: C731AFD03B9A11F0B7924C1FC4F9AE02.roa (raw, json) Hash identifier: EmmsOqkiT007YavefYEjF7jWl6E1fCl7urJJNV6C63g= Subject key identifier: A1:79:2E:DE:33:3B:42:F6:FE:DA:8B:B7:C9:8A:F1:79:0F:5A:92:8F Certificate issuer: /CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Certificate serial: D4 Authority key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/C731AFD03B9A11F0B7924C1FC4F9AE02.roa Signing time: Fri 21 Nov 2025 03:51:26 +0000 ROA not before: Fri 21 Nov 2025 03:51:26 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153341 IP address blocks: 2001:df4:4ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91651CF, serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Validity Not Before: Nov 21 03:51:26 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691fe1be-d758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:53:eb:66:7b:47:83:e4:df:86:c6:fc:e6: bf:e4:a6:22:6d:00:32:da:52:2b:20:e1:7f:30:4e: 9f:cb:3c:cb:e9:89:d8:38:05:02:a6:67:ee:93:eb: 72:75:4d:dc:69:a9:08:c1:49:cb:69:db:0e:be:38: 06:ac:94:c6:63:bf:c1:a8:77:5f:8d:bf:f9:a8:41: d8:5a:86:e7:e8:57:56:47:96:d7:0f:11:a1:95:0b: b4:fc:a9:79:c5:f4:64:e6:d2:91:b2:bb:0f:73:65: 0d:ce:2a:23:a9:fb:59:40:fa:a5:15:97:7f:22:1c: 45:d2:29:7e:b7:e1:17:79:6f:60:1b:e3:77:8b:8d: ec:dc:d1:b8:81:0d:c9:e9:95:f5:e4:e2:7a:b2:fe: 2f:a7:c7:05:f2:35:2b:97:a2:04:8e:3d:e2:78:c2: 44:12:9b:cc:f8:d1:77:6e:02:59:79:7f:00:98:a7: c6:f3:db:ea:d9:ba:e0:c0:b1:c6:9d:e5:c3:85:21: fb:96:7c:be:50:e5:15:45:6d:57:f6:f8:59:28:03: 6f:82:01:33:f0:d5:58:80:c5:94:2a:af:9d:99:af: 01:b4:b1:d9:70:52:37:d8:d2:e1:7c:06:d2:1c:aa: 83:e7:e8:2c:85:a9:32:f9:f2:86:63:35:ab:b1:80: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:79:2E:DE:33:3B:42:F6:FE:DA:8B:B7:C9:8A:F1:79:0F:5A:92:8F X509v3 Authority Key Identifier: keyid:29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/C731AFD03B9A11F0B7924C1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:4ec0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:85:14:59:d9:77:4c:09:de:5a:72:1d:aa:06:a0:01:e6:fc: 47:20:9d:c7:71:8c:97:8a:07:08:9b:d4:05:f0:9f:77:d5:b9: 40:de:ff:db:25:ad:62:1f:61:e8:6c:ab:98:3f:8c:a6:98:aa: 8e:b4:e6:53:31:91:ec:73:1e:21:80:5f:b1:ae:bf:19:ea:34: 61:b2:8b:84:fa:22:ff:df:fd:2c:c9:f4:0c:b6:42:e7:72:93: f3:59:c4:57:3e:95:fc:89:64:88:41:41:32:a1:fb:be:ad:19: 83:a3:af:5a:2f:42:a6:bb:ec:e4:e1:ba:34:d9:69:5c:c5:ff: 63:3c:41:66:38:b1:1c:0b:3b:30:60:80:d2:f5:9e:1f:5d:45: 09:38:27:5e:bc:bf:70:ba:f6:af:0d:53:25:ff:05:5b:a4:ef: 77:a1:46:07:f7:5f:b0:87:96:12:c5:f8:8c:62:c5:74:cb:78: 89:38:81:86:71:26:0d:68:50:03:4a:24:ba:af:af:d9:91:f2: b7:6a:64:78:84:a8:ea:f6:03:ee:8b:ca:19:2d:cf:2f:79:80: e2:0c:62:02:9e:be:f8:72:33:e3:ef:c5:20:9b:0d:76:9f:16: c1:62:a3:bd:aa:4f:17:ce:36:ba:ce:41:1a:ad:48:c3:46:ec: 15:43:d1:e8 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUxQ0YxMTAvBgNVBAUTKDI5QTAwOTAxM0Y3NDMxREUzNjlDMDBDQUI1NDcxNkNB OTM0NTI2RDMwHhcNMjUxMTIxMDM1MTI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmZTFiZS1kNzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOtT62Z7R4Pk34bG/Oa/5KYibQAy2lIrIOF/ME6fyzzL6YnYOAUCpmfuk+ty dU3caakIwUnLadsOvjgGrJTGY7/BqHdfjb/5qEHYWobn6FdWR5bXDxGhlQu0/Kl5 xfRk5tKRsrsPc2UNziojqftZQPqlFZd/IhxF0il+t+EXeW9gG+N3i43s3NG4gQ3J 6ZX15OJ6sv4vp8cF8jUrl6IEjj3ieMJEEpvM+NF3bgJZeX8AmKfG89vq2brgwLHG neXDhSH7lny+UOUVRW1X9vhZKANvggEz8NVYgMWUKq+dma8BtLHZcFI32NLhfAbS HKqD5+gshaky+fKGYzWrsYD1rwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKF5Lt4z O0L2/tqLt8mK8XkPWpKPMB8GA1UdIwQYMBaAFCmgCQE/dDHeNpwAyrVHFsqTRSbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTFDRi8zMDQzNjM1Qzg2 RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9LYUFKQVQ5ME1kNDJuQURLdFVjV3lwTkZK dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0thQUpBVDkwTWQ0Mm5BREt0VWNXeXBORkp0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUxQ0YvMzA0MzYzNUM4NkQ3MTFFRjg1NERENDdCQzRGOUFFMDIvQzczMUFGRDAz QjlBMTFGMEI3OTI0QzFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30TsAwDQYJKoZIhvcNAQELBQADggEBABuFFFnZd0wJ 3lpyHaoGoAHm/EcgncdxjJeKBwib1AXwn3fVuUDe/9slrWIfYehsq5g/jKaYqo60 5lMxkexzHiGAX7GuvxnqNGGyi4T6Iv/f/SzJ9Ay2Qudyk/NZxFc+lfyJZIhBQTKh +76tGYOjr1ovQqa77OThujTZaVzF/2M8QWY4sRwLOzBggNL1nh9dRQk4J168v3C6 9q8NUyX/BVuk73ehRgf3X7CHlhLF+IxixXTLeIk4gYZxJg1oUANKJLqvr9mR8rdq ZHiEqOr2A+6Lyhktzy95gOIMYgKevvhyM+PvxSCbDXafFsFio72qTxfONrrOQRqt SMNG7BVD0eg= -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:33 2025 by rpki-client