This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/12004368A41611EFA0D7CD42C4F9AE02.roa File: 12004368A41611EFA0D7CD42C4F9AE02.roa (raw, json) Hash identifier: fYS+27WQjbC3iI9d+3qmsdD+wyK1WXW6hG9TMXFJOMY= Subject key identifier: 6F:AF:F0:A7:23:9B:29:A1:B8:CD:7A:40:48:FA:50:25:E1:04:FD:DE Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: CB Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/12004368A41611EFA0D7CD42C4F9AE02.roa Signing time: Sat 13 Dec 2025 05:44:33 +0000 ROA not before: Sat 13 Dec 2025 05:44:33 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153399 IP address blocks: 2401:d520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: Dec 13 05:44:33 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693cfd41-0a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b1:f5:19:43:26:95:cb:9e:43:1b:54:d9:4b: d6:2e:8c:99:c1:ca:cd:e3:95:de:c4:31:4d:a2:91: e4:97:5f:de:1c:d0:a2:88:ce:5c:60:a8:d7:ce:dc: 02:79:26:d1:f8:33:19:00:41:83:f3:f0:6f:93:16: be:9c:54:f3:35:d1:5f:39:e4:f6:1b:b2:b3:63:47: 5c:e1:6c:31:f1:9a:df:ce:ff:c4:b5:57:37:b4:14: 5a:6e:25:df:76:51:0b:cb:5f:2d:f5:ab:e4:f7:cb: e5:da:79:5b:a2:7e:fa:85:da:47:f7:65:11:85:9c: 38:85:29:b8:81:72:02:5a:9b:cd:cb:e8:41:98:ca: e2:1c:58:3b:27:6f:db:05:0c:a1:68:f0:84:c9:1f: 28:74:f5:29:c8:d3:f4:b9:95:28:fd:7a:a7:70:55: 1a:8c:b3:c3:85:8b:20:14:6f:17:35:7e:e5:65:41: e1:71:2c:a6:f5:46:a0:07:20:31:bb:ca:f2:e2:96: e3:24:6c:a3:ce:3b:68:24:0e:07:db:1f:c5:64:82: 22:bb:d5:6f:3b:d2:fe:db:22:16:4e:9f:a1:6d:e6: 9c:b3:26:f4:c5:f9:a2:eb:c8:dc:49:24:f3:cc:8c: 13:65:da:c1:58:42:5a:0c:f7:b7:86:3c:19:35:e7: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:AF:F0:A7:23:9B:29:A1:B8:CD:7A:40:48:FA:50:25:E1:04:FD:DE X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/12004368A41611EFA0D7CD42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d520::/32 Signature Algorithm: sha256WithRSAEncryption 98:21:2e:d6:fd:1b:e4:42:b8:73:89:83:31:93:29:d1:33:a0: 90:b4:18:54:59:c1:e1:a5:73:b7:6b:cf:bc:8f:f4:25:4a:57: 70:6a:3a:ff:8b:a8:9e:92:ce:6c:7b:bd:f0:0e:11:2b:87:5e: 20:bd:b2:6b:ee:83:df:5d:be:0f:cd:2b:c9:93:87:9b:97:4c: e1:91:69:cb:a3:16:4e:03:7b:d1:67:57:d9:75:e6:95:b1:56: 4f:ee:a8:a2:25:8f:a2:9c:9b:be:1a:ac:c2:eb:ae:a8:76:37: 7a:a8:ff:36:e7:b7:fa:08:f0:17:cc:31:a0:00:b5:90:48:64: 0c:e8:a8:af:5d:24:5a:e8:51:f3:8a:25:e2:3d:eb:ce:4b:21: 4a:51:df:15:59:93:fc:4e:39:58:fe:cf:3a:0f:cc:cf:77:44: c3:f8:2c:f8:4f:75:bf:13:49:20:32:d4:d2:10:4e:d1:91:11: 25:8c:4d:e4:f9:0b:ed:4b:11:34:12:82:f2:cd:6b:17:06:67: ab:33:93:53:9f:f8:02:5d:9d:a2:5d:a3:c1:5d:27:d1:53:e4: b7:9f:13:2d:7f:57:97:81:9a:97:ab:9c:81:07:f4:26:41:2a: ec:04:29:d7:8f:b4:3e:56:7a:b8:04:23:31:78:8f:8b:69:20: 78:71:f2:c3 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKERCM0RGRDg2Q0VCRkVBRUQzQUFGMTVERUFFRTY5NjUy MzQ3NDZBMjkwHhcNMjUxMjEzMDU0NDMzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjZmQ0MS0wYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rH1GUMmlcueQxtU2UvWLoyZwcrN45XexDFNopHkl1/eHNCiiM5cYKjXztwC eSbR+DMZAEGD8/Bvkxa+nFTzNdFfOeT2G7KzY0dc4Wwx8Zrfzv/EtVc3tBRabiXf dlELy18t9avk98vl2nlbon76hdpH92URhZw4hSm4gXICWpvNy+hBmMriHFg7J2/b BQyhaPCEyR8odPUpyNP0uZUo/XqncFUajLPDhYsgFG8XNX7lZUHhcSym9UagByAx u8ry4pbjJGyjzjtoJA4H2x/FZIIiu9VvO9L+2yIWTp+hbeacsyb0xfmi68jcSSTz zIwTZdrBWEJaDPe3hjwZNedtjQIDAQABo4ICljCCApIwHQYDVR0OBBYEFG+v8Kcj mymhuM16QEj6UCXhBP3eMB8GA1UdIwQYMBaAFNs9/YbOv+rtOq8V3q7mllI0dGop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC9BNzhGMUIxMkE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1MDZyeFhlcnVhV1VqUjBh aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFCRjAvQTc4RjFCMTJBNDE1MTFFRkExNEZCRDNGQzRGOUFFMDIvMTIwMDQzNjhB NDE2MTFFRkEwRDdDRDQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAdUgMA0GCSqGSIb3DQEBCwUAA4IBAQCYIS7W/RvkQrhz iYMxkynRM6CQtBhUWcHhpXO3a8+8j/QlSldwajr/i6ieks5se73wDhErh14gvbJr 7oPfXb4PzSvJk4ebl0zhkWnLoxZOA3vRZ1fZdeaVsVZP7qiiJY+inJu+GqzC666o djd6qP8257f6CPAXzDGgALWQSGQM6KivXSRa6FHziiXiPevOSyFKUd8VWZP8TjlY /s86D8zPd0TD+Cz4T3W/E0kgMtTSEE7RkREljE3k+QvtSxE0EoLyzWsXBmerM5NT n/gCXZ2iXaPBXSfRU+S3nxMtf1eXgZqXq5yBB/QmQSrsBCnXj7Q+Vnq4BCMxeI+L aSB4cfLD -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:03 2026 by rpki-client