This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa File: 339E038C223B11EF8750653DC4F9AE02.roa (raw, json) Hash identifier: 70XzSF8oyRite1e4TZo01nYrO/EOsQsfxziiDkULW8M= Subject key identifier: 80:37:FF:31:2D:04:3E:E6:81:18:5A:50:FA:80:35:88:FD:D4:9F:22 Certificate issuer: /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Certificate serial: 0A77 Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa Signing time: Wed 31 Dec 2025 18:14:29 +0000 ROA not before: Wed 31 Dec 2025 18:14:29 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 134995 IP address blocks: 2402:6640::/32 maxlen: 32 2402:6640:5::/48 maxlen: 48 2402:6640:10::/48 maxlen: 48 2402:6640:11::/48 maxlen: 48 2402:6640:17::/48 maxlen: 48 2402:6640:18::/48 maxlen: 48 2402:6640:19::/48 maxlen: 48 2402:6640:20::/48 maxlen: 48 2402:6640:21::/48 maxlen: 48 2402:6640:22::/48 maxlen: 48 2402:6640:23::/48 maxlen: 48 2402:6640:24::/48 maxlen: 48 2402:6640:25::/48 maxlen: 48 2402:6640:26::/48 maxlen: 48 2402:6640:30::/48 maxlen: 48 2402:6640:fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2679 (0xa77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565 Validity Not Before: Dec 31 18:14:29 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69556805-922b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:bc:b8:55:f5:9e:7a:4b:a6:b2:b1:36:23: f9:2b:f1:ca:71:ce:0e:c3:2e:4f:8a:0a:12:06:9a: 63:2f:90:2f:45:91:ee:b2:61:9d:50:1a:f3:51:1b: 25:0b:8d:6f:58:5f:b9:63:de:1a:b2:70:94:63:bc: 36:50:6c:f9:3c:c5:07:14:73:20:b1:3a:66:0f:93: b8:25:b2:e5:89:b8:63:e3:3e:17:a7:47:6f:6b:d8: 1a:10:f3:bb:0f:5a:21:ae:99:4e:58:2b:45:1a:73: 45:63:ba:2b:55:2c:f3:43:5b:cb:a6:cd:96:41:a8: f9:ba:2a:df:f3:f2:73:76:12:5e:11:4c:61:6f:49: 49:1f:e0:1c:36:cc:69:75:34:5d:20:64:71:97:72: 77:81:3d:4c:d2:13:5f:fe:fd:16:74:a4:50:8e:5f: cf:93:25:03:fd:fb:2b:aa:b4:47:0a:d3:91:7a:dc: d4:2f:47:19:d0:6a:ca:40:ef:35:c5:3d:bb:04:32: 85:2d:2e:75:aa:c0:41:ec:4a:de:08:66:7d:86:e8: 13:97:6b:d1:dd:22:f7:ac:47:cf:2d:2d:5d:70:a2: ce:ce:bf:c2:58:1a:29:63:b3:c5:7b:7c:f8:88:34: 03:75:4d:c8:bd:7c:3f:99:64:39:16:90:73:3b:20: d1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:37:FF:31:2D:04:3E:E6:81:18:5A:50:FA:80:35:88:FD:D4:9F:22 X509v3 Authority Key Identifier: keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/339E038C223B11EF8750653DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:6640::/32 Signature Algorithm: sha256WithRSAEncryption 06:f1:ee:b2:54:81:9d:17:aa:00:eb:ba:47:3f:26:29:fc:f6: da:c9:16:8c:5f:9e:08:ed:02:1a:f7:cb:c7:bb:8a:d2:22:2c: f9:e4:79:6d:f7:dd:13:d0:0e:18:b6:be:a5:82:0a:ae:24:80: 65:14:32:6e:ac:77:38:3c:cf:be:5b:d7:d7:b8:57:68:75:26: ed:b5:b9:56:62:0d:cf:a1:8f:c2:6a:7a:ec:67:24:85:0c:88: 7b:17:54:3c:b6:61:b2:8c:96:6f:ac:25:2d:ef:b8:52:a1:0d: cb:00:e3:1d:52:7a:82:40:26:7c:e0:93:c9:29:98:fd:1a:8f: 65:98:bf:5c:b2:99:af:d7:61:2c:6d:f4:14:c2:4d:ab:53:e1: 3b:c6:a9:8a:f0:39:0e:92:7a:70:c3:c2:b9:59:d7:b9:c6:46: 74:d1:02:ef:02:8b:bb:a5:9f:fa:00:58:a0:dc:10:41:20:fe: 04:aa:b8:30:65:55:56:59:11:13:0f:44:2f:13:34:b5:26:4a: 7c:1a:14:65:37:d2:06:fb:4d:5f:0a:fc:b7:3d:04:06:2a:e6: 2a:89:c5:63:a2:f5:f9:b5:06:2a:cc:a8:84:8b:96:50:c8:76: b5:8a:d0:73:85:92:b7:3a:4c:66:6c:e8:97:b9:63:f9:e3:3f: 68:4a:eb:0d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjdGMEMxMTAvBgNVBAUTKDRFNjE0MkJENjFCM0VCNTg5N0NFMDFFOEQ0NTcxMURB NTBEQ0Y1NjUwHhcNMjUxMjMxMTgxNDI5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU1NjgwNS05MjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7y8uFX1nnpLprKxNiP5K/HKcc4Owy5PigoSBppjL5AvRZHusmGdUBrzURsl C41vWF+5Y94asnCUY7w2UGz5PMUHFHMgsTpmD5O4JbLlibhj4z4Xp0dva9gaEPO7 D1ohrplOWCtFGnNFY7orVSzzQ1vLps2WQaj5uirf8/JzdhJeEUxhb0lJH+AcNsxp dTRdIGRxl3J3gT1M0hNf/v0WdKRQjl/PkyUD/fsrqrRHCtORetzUL0cZ0GrKQO81 xT27BDKFLS51qsBB7EreCGZ9hugTl2vR3SL3rEfPLS1dcKLOzr/CWBopY7PFe3z4 iDQDdU3IvXw/mWQ5FpBzOyDR+wIDAQABo4ICljCCApIwHQYDVR0OBBYEFIA3/zEt BD7mgRhaUPqANYj91J8iMB8GA1UdIwQYMBaAFE5hQr1hs+tYl84B6NRXEdpQ3PVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0YwQy8wQTU4QTE5QTcw QUIxMUU5ODMxN0E1N0JDNEY5QUUwMi9UbUZDdldHejYxaVh6Z0hvMUZjUjJsRGM5 V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RtRkN2V0d6NjFpWHpnSG8xRmNSMmxEYzlXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjdGMEMvMEE1OEExOUE3MEFCMTFFOTgzMTdBNTdCQzRGOUFFMDIvMzM5RTAzOEMy MjNCMTFFRjg3NTA2NTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAmZAMA0GCSqGSIb3DQEBCwUAA4IBAQAG8e6yVIGdF6oA 67pHPyYp/PbayRaMX54I7QIa98vHu4rSIiz55Hlt990T0A4Ytr6lggquJIBlFDJu rHc4PM++W9fXuFdodSbttblWYg3PoY/CanrsZySFDIh7F1Q8tmGyjJZvrCUt77hS oQ3LAOMdUnqCQCZ84JPJKZj9Go9lmL9cspmv12EsbfQUwk2rU+E7xqmK8DkOknpw w8K5Wde5xkZ00QLvAou7pZ/6AFig3BBBIP4EqrgwZVVWWRETD0QvEzS1Jkp8GhRl N9IG+01fCvy3PQQGKuYqicVjovX5tQYqzKiEi5ZQyHa1itBzhZK3OkxmbOiXuWP5 4z9oSusN -----END CERTIFICATE-----Generated at Mon Jan 26 02:42:39 2026 by rpki-client