This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/1855E96CABBD11EA9A38D358C4F9AE02.roa File: 1855E96CABBD11EA9A38D358C4F9AE02.roa (raw, json) Hash identifier: r4rzBCbIMp3iFvqhDbSXEyN/C18fjuivfYiSBwzRiCs= Subject key identifier: 46:BC:31:71:BF:C5:4A:47:95:9A:F4:1D:C5:E9:09:4A:89:BA:1C:92 Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Certificate serial: 0AD1 Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/1855E96CABBD11EA9A38D358C4F9AE02.roa Signing time: Thu 20 Nov 2025 19:10:14 +0000 ROA not before: Thu 20 Nov 2025 19:10:14 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 136167 IP address blocks: 2400:9380:80c0::/44 maxlen: 44 2400:9380:81c0::/44 maxlen: 44 2400:9380:82c0::/44 maxlen: 44 2400:9380:83c0::/44 maxlen: 44 2400:9380:84c0::/44 maxlen: 44 2400:9380:85c0::/44 maxlen: 44 2400:9380:86c0::/44 maxlen: 44 2400:9380:87c0::/44 maxlen: 44 2400:9380:88c0::/44 maxlen: 44 2400:9380:89c0::/44 maxlen: 44 2400:9380:8ac0::/44 maxlen: 44 2400:9380:8bc0::/44 maxlen: 44 2400:9380:8cc0::/44 maxlen: 44 2400:9380:8dc0::/44 maxlen: 44 2400:9380:8ec0::/44 maxlen: 44 2400:9380:8fc0::/44 maxlen: 44 2400:9380:90c0::/44 maxlen: 44 2400:9380:91c0::/44 maxlen: 44 2400:9380:92c0::/44 maxlen: 44 2400:9380:93c0::/44 maxlen: 44 2400:9380:94c0::/44 maxlen: 44 2400:9380:95c0::/44 maxlen: 44 2400:9380:96c0::/44 maxlen: 44 2400:9380:97c0::/44 maxlen: 44 2400:9380:98c0::/44 maxlen: 44 2400:9380:99c0::/44 maxlen: 44 2400:9380:9ac0::/44 maxlen: 44 2400:9380:9bc0::/44 maxlen: 44 2400:9380:9cc0::/44 maxlen: 44 2400:9380:9dc0::/44 maxlen: 44 2400:9380:9ec0::/44 maxlen: 44 2400:9380:9fc0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2769 (0xad1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Validity Not Before: Nov 20 19:10:14 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691f6796-8d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2c:8a:78:2c:15:db:d9:9f:dd:76:54:86:90: 90:7d:7e:7a:5a:c4:23:12:f2:0b:70:18:7d:d5:f5: bb:46:e3:56:c1:42:3e:88:6c:dd:39:29:53:d8:cb: 0f:61:12:37:c3:d4:ac:92:df:36:77:2f:39:98:8b: a8:22:68:25:2b:3b:53:fe:8d:60:9b:a8:f3:bb:20: 85:de:b2:56:b6:14:7c:a3:92:d6:60:41:73:88:85: 65:d2:8c:e7:6e:cd:ad:14:c2:a4:5f:7b:12:26:b1: 4c:92:bb:0e:00:ac:6e:54:a1:14:0e:4a:80:c6:10: 58:cb:3f:a5:f6:06:08:55:e6:35:42:f3:b7:ce:9f: 9f:5c:49:23:37:ad:5c:15:28:05:e9:16:21:5b:d6: 98:f4:39:66:34:1b:97:4f:ba:f8:e4:8f:99:22:24: d0:85:da:1e:ce:b4:2f:f3:9f:4f:d3:00:a7:0b:37: ae:4a:6f:30:8a:6f:aa:fb:fa:b3:d0:9c:77:9e:89: d1:bb:f7:aa:25:f8:73:32:ad:39:ae:69:1d:73:9f: 4b:78:d0:18:09:ed:29:59:30:aa:2b:6f:60:d4:cc: 92:f0:55:87:4f:58:60:6c:8b:5e:42:c5:af:a7:99: 89:54:27:84:f4:c1:1a:c4:28:9f:dd:69:78:c2:33: 6f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BC:31:71:BF:C5:4A:47:95:9A:F4:1D:C5:E9:09:4A:89:BA:1C:92 X509v3 Authority Key Identifier: keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/1855E96CABBD11EA9A38D358C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:9380:80c0::/44 2400:9380:81c0::/44 2400:9380:82c0::/44 2400:9380:83c0::/44 2400:9380:84c0::/44 2400:9380:85c0::/44 2400:9380:86c0::/44 2400:9380:87c0::/44 2400:9380:88c0::/44 2400:9380:89c0::/44 2400:9380:8ac0::/44 2400:9380:8bc0::/44 2400:9380:8cc0::/44 2400:9380:8dc0::/44 2400:9380:8ec0::/44 2400:9380:8fc0::/44 2400:9380:90c0::/44 2400:9380:91c0::/44 2400:9380:92c0::/44 2400:9380:93c0::/44 2400:9380:94c0::/44 2400:9380:95c0::/44 2400:9380:96c0::/44 2400:9380:97c0::/44 2400:9380:98c0::/44 2400:9380:99c0::/44 2400:9380:9ac0::/44 2400:9380:9bc0::/44 2400:9380:9cc0::/44 2400:9380:9dc0::/44 2400:9380:9ec0::/44 2400:9380:9fc0::/44 Signature Algorithm: sha256WithRSAEncryption 30:2e:2d:b4:09:cb:9a:f4:f7:a1:a5:88:59:d4:49:d2:2c:00: 4e:a9:d7:50:c2:f9:93:0c:ab:96:0b:6b:15:f2:3b:5f:98:3e: 4e:a8:c3:6b:91:bb:3a:6f:2b:c6:0e:58:1c:4f:26:79:61:ed: 5f:d0:a7:79:18:6f:d7:43:66:ff:c1:9d:c6:08:db:e6:34:e9: 1b:01:a4:3e:a4:f5:84:8f:8a:e3:61:b6:00:8b:8a:5f:18:f0: 6c:aa:cb:a6:6c:6e:b5:6c:96:0d:39:ba:df:8e:23:e0:20:c9: 92:fb:a4:4d:13:51:45:f4:0e:e4:ed:11:4f:99:cf:ce:d8:cb: f0:d1:0f:9e:c9:5e:7d:39:5f:60:40:de:80:79:ee:c5:c3:c9: f9:d7:c9:01:41:dc:76:e6:6e:53:58:7a:38:a5:4c:28:29:8d: 60:48:02:73:e0:8c:bd:1b:79:bf:16:3e:52:c5:0d:ed:06:cb: 48:01:32:d0:0a:2e:02:38:5a:4f:5c:a5:55:83:cc:96:1f:87: 98:34:fc:f2:8d:26:c0:36:ed:b9:08:66:73:e2:3e:49:c6:71: 6f:c8:e5:4f:29:42:d9:f2:e7:c8:2a:95:d7:75:20:a6:8d:09: d2:68:9e:c2:d2:02:9f:6c:f3:80:53:df:1a:63:3b:9e:3a:b1: 5b:ed:5d:f1 -----BEGIN CERTIFICATE----- MIIGlTCCBX2gAwIBAgICCtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG QUNGNURGRUMwHhcNMjUxMTIwMTkxMDE0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmNjc5Ni04ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6yyKeCwV29mf3XZUhpCQfX56WsQjEvILcBh91fW7RuNWwUI+iGzdOSlT2MsP YRI3w9Sskt82dy85mIuoImglKztT/o1gm6jzuyCF3rJWthR8o5LWYEFziIVl0ozn bs2tFMKkX3sSJrFMkrsOAKxuVKEUDkqAxhBYyz+l9gYIVeY1QvO3zp+fXEkjN61c FSgF6RYhW9aY9DlmNBuXT7r45I+ZIiTQhdoezrQv859P0wCnCzeuSm8wim+q+/qz 0Jx3nonRu/eqJfhzMq05rmkdc59LeNAYCe0pWTCqK29g1MyS8FWHT1hgbIteQsWv p5mJVCeE9MEaxCif3Wl4wjNv4QIDAQABo4IDuTCCA7UwHQYDVR0OBBYEFEa8MXG/ xUpHlZr0HcXpCUqJuhySMB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU3NkQvMzY4NzJBNUU4MkNEMTFFQTg5NUM3QjVDQzRGOUFFMDIvMTg1NUU5NkNB QkJEMTFFQTlBMzhEMzU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFBBggrBgEFBQcBBwEB /wSCATAwggEsMIIBKAQCAAIwggEgAwcEJACTgIDAAwcEJACTgIHAAwcEJACTgILA AwcEJACTgIPAAwcEJACTgITAAwcEJACTgIXAAwcEJACTgIbAAwcEJACTgIfAAwcE JACTgIjAAwcEJACTgInAAwcEJACTgIrAAwcEJACTgIvAAwcEJACTgIzAAwcEJACT gI3AAwcEJACTgI7AAwcEJACTgI/AAwcEJACTgJDAAwcEJACTgJHAAwcEJACTgJLA AwcEJACTgJPAAwcEJACTgJTAAwcEJACTgJXAAwcEJACTgJbAAwcEJACTgJfAAwcE JACTgJjAAwcEJACTgJnAAwcEJACTgJrAAwcEJACTgJvAAwcEJACTgJzAAwcEJACT gJ3AAwcEJACTgJ7AAwcEJACTgJ/AMA0GCSqGSIb3DQEBCwUAA4IBAQAwLi20Ccua 9PehpYhZ1EnSLABOqddQwvmTDKuWC2sV8jtfmD5OqMNrkbs6byvGDlgcTyZ5Ye1f 0Kd5GG/XQ2b/wZ3GCNvmNOkbAaQ+pPWEj4rjYbYAi4pfGPBsqsumbG61bJYNObrf jiPgIMmS+6RNE1FF9A7k7RFPmc/O2Mvw0Q+eyV59OV9gQN6Aee7Fw8n518kBQdx2 5m5TWHo4pUwoKY1gSAJz4Iy9G3m/Fj5SxQ3tBstIATLQCi4COFpPXKVVg8yWH4eY NPzyjSbANu25CGZz4j5JxnFvyOVPKULZ8ufIKpXXdSCmjQnSaJ7C0gKfbPOAU98a YzueOrFb7V3x -----END CERTIFICATE-----Generated at Sat Dec 6 21:18:06 2025 by rpki-client