This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/232F490A9FD811EFA92BE338C4F9AE02.roa File: 232F490A9FD811EFA92BE338C4F9AE02.roa (raw, json) Hash identifier: e0Z0flawV8wk4AePxMY7zYIyVYhmWtUmY7VY2r89/j0= Subject key identifier: 6A:00:CB:B0:E8:C6:9C:26:0C:80:79:38:EE:53:7A:B1:9C:E8:E7:7D Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: D5 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/232F490A9FD811EFA92BE338C4F9AE02.roa Signing time: Mon 29 Dec 2025 05:24:19 +0000 ROA not before: Mon 29 Dec 2025 05:24:19 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138667 IP address blocks: 2001:df4:9340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 04:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Dec 29 05:24:19 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69521083-9a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f6:f1:f4:69:c4:18:d8:c4:99:fe:4f:ae:94: 4e:b3:6b:06:96:c4:02:cc:16:c9:69:32:81:bb:cb: 59:f5:06:9a:c6:cf:43:cf:f2:04:40:b3:75:5d:1b: a2:b3:63:57:e2:d4:0f:92:62:97:1a:79:8a:b3:23: 44:be:bb:55:8d:11:f1:50:bc:cf:ef:ad:09:4d:2c: 4b:c3:0b:51:02:6f:96:a8:df:93:54:3d:9b:60:78: e6:02:5b:c5:25:1d:a5:8a:32:bc:bb:aa:54:f9:6c: 76:7c:75:d2:e8:19:b8:9c:49:8e:2a:1a:b1:df:76: fd:26:a0:6b:54:a8:5c:17:3b:bd:10:73:f7:c2:71: 74:2d:05:9f:4e:fc:6c:4b:c8:b3:7c:65:73:7c:30: d0:d0:be:02:81:1b:f4:eb:e5:fa:15:60:f8:a1:f8: 21:aa:e1:b4:df:17:54:35:2d:0f:72:db:17:82:f9: ac:70:b4:a0:d3:bd:2e:20:1a:e7:fa:3e:e4:4c:a2: f0:61:bc:28:93:94:5f:90:4c:05:43:dc:a7:23:93: 36:7a:f4:44:42:d5:b3:99:f2:3c:7b:b3:7f:7f:c5: 5c:8a:15:8b:00:77:7a:cc:81:3f:50:33:09:2e:b4: 53:ac:a6:93:af:50:6a:79:88:24:c3:23:d0:72:b4: bc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:00:CB:B0:E8:C6:9C:26:0C:80:79:38:EE:53:7A:B1:9C:E8:E7:7D X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/232F490A9FD811EFA92BE338C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:9340::/48 Signature Algorithm: sha256WithRSAEncryption a9:0d:08:a0:33:11:1b:51:4d:95:b8:36:ad:23:1e:42:c1:cd: 14:29:f6:88:97:c6:d3:29:5c:23:6a:3c:5b:69:0e:a3:b9:40: 96:04:34:0e:1e:68:7f:7c:01:42:63:e6:f0:b6:1a:81:51:b0: 3b:a7:d4:07:ab:ab:0b:9c:ef:e9:90:77:3d:67:9b:6f:20:02: 22:04:99:b2:45:c4:65:1b:68:34:95:37:70:c2:da:1b:3c:cb: 7f:08:3a:6c:a1:c8:e0:61:d5:8c:23:7e:73:63:7e:dc:f5:c3: 1e:0b:5e:85:c7:7d:9b:2d:fb:b6:0a:d8:33:de:2a:5c:fe:3f: 0f:24:7f:be:4e:e3:8a:90:cb:b1:4e:bb:ff:90:2f:34:ea:b7: 7b:a8:04:90:30:a5:f1:4f:6e:0f:90:5d:e9:80:6a:3f:59:69: cb:4b:a2:2b:33:1b:15:25:eb:19:c9:72:ff:00:7e:d4:a4:70: 59:93:d2:4f:f4:1e:40:27:e5:f1:cc:05:d2:1e:54:82:b3:9d: be:70:d9:b7:46:0b:14:b0:46:72:05:83:ee:61:54:68:f1:37: 86:3d:cd:b9:b4:5f:e2:d4:4d:e4:f4:ce:64:c0:09:53:0e:54: 09:44:35:0c:c1:19:29:69:f1:02:3f:d7:17:4f:ff:0b:46:19: 05:55:fa:85 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw OTdEQzI0MUYwHhcNMjUxMjI5MDUyNDE5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUyMTA4My05YTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vbx9GnEGNjEmf5PrpROs2sGlsQCzBbJaTKBu8tZ9Qaaxs9Dz/IEQLN1XRui s2NX4tQPkmKXGnmKsyNEvrtVjRHxULzP760JTSxLwwtRAm+WqN+TVD2bYHjmAlvF JR2lijK8u6pU+Wx2fHXS6Bm4nEmOKhqx33b9JqBrVKhcFzu9EHP3wnF0LQWfTvxs S8izfGVzfDDQ0L4CgRv06+X6FWD4ofghquG03xdUNS0PctsXgvmscLSg070uIBrn +j7kTKLwYbwok5RfkEwFQ9ynI5M2evREQtWzmfI8e7N/f8VcihWLAHd6zIE/UDMJ LrRTrKaTr1BqeYgkwyPQcrS8ZQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFGoAy7Do xpwmDIB5OO5TerGc6Od9MB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBEM0UvQkRFRTlFMjQ5RkQ3MTFFRjlFMzhBODM3QzRGOUFFMDIvMjMyRjQ5MEE5 RkQ4MTFFRkE5MkJFMzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30k0AwDQYJKoZIhvcNAQELBQADggEBAKkNCKAzERtR TZW4Nq0jHkLBzRQp9oiXxtMpXCNqPFtpDqO5QJYENA4eaH98AUJj5vC2GoFRsDun 1Aerqwuc7+mQdz1nm28gAiIEmbJFxGUbaDSVN3DC2hs8y38IOmyhyOBh1YwjfnNj ftz1wx4LXoXHfZst+7YK2DPeKlz+Pw8kf75O44qQy7FOu/+QLzTqt3uoBJAwpfFP bg+QXemAaj9ZactLoiszGxUl6xnJcv8AftSkcFmT0k/0HkAn5fHMBdIeVIKznb5w 2bdGCxSwRnIFg+5hVGjxN4Y9zbm0X+LUTeT0zmTACVMOVAlENQzBGSlp8QI/1xdP /wtGGQVV+oU= -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:09 2026 by rpki-client