This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/02F0D9DED0BA11EFA8B5A526C4F9AE02.roa File: 02F0D9DED0BA11EFA8B5A526C4F9AE02.roa (raw, json) Hash identifier: lyOd9yo/kFIQx4XeC1FAKbuJCNiU6tB/1hPWLqPIEbs= Subject key identifier: 47:67:F2:59:2A:38:03:61:DE:12:32:73:94:63:E1:A9:31:7B:3A:C3 Certificate issuer: /CN=A917C0F3/serialNumber=A0EA2A720CAC31C8375F556CF94BFEF8D11169F6 Certificate serial: BE Authority key identifier: A0:EA:2A:72:0C:AC:31:C8:37:5F:55:6C:F9:4B:FE:F8:D1:11:69:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/02F0D9DED0BA11EFA8B5A526C4F9AE02.roa Signing time: Tue 13 Jan 2026 05:24:27 +0000 ROA not before: Tue 13 Jan 2026 05:24:27 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 140975 IP address blocks: 2001:df4:a5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.crl rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F3, serialNumber=A0EA2A720CAC31C8375F556CF94BFEF8D11169F6 Validity Not Before: Jan 13 05:24:27 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6965d70a-4f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ca:36:2e:f3:37:20:95:f4:98:48:c9:d2:4e: 71:bc:7e:23:4b:12:73:74:25:76:fe:63:40:2d:d4: 20:52:31:a0:b7:31:0d:fa:02:3d:af:c4:b6:ad:b7: 90:40:11:de:0a:c5:b0:5d:0a:f9:32:7f:91:f5:1f: 3e:96:4f:10:b2:99:ba:54:95:8f:0f:7c:fd:80:e7: e8:1d:dc:6e:c3:65:34:6f:a1:2f:64:e0:88:aa:88: 80:23:9d:65:b4:c3:31:3e:73:d6:34:fb:72:c1:bc: 4c:ad:44:3f:25:28:5b:48:ee:55:74:f0:ec:23:1d: 09:d1:1c:7f:d3:47:46:ba:a8:6b:45:66:a7:a8:17: 35:34:cf:b4:98:7b:59:de:7c:ef:45:04:70:c6:dc: 76:35:ad:5b:25:9f:7b:c6:a2:15:00:c6:e2:42:e1: 14:a4:77:09:92:b6:a5:d8:2a:70:0c:e0:2d:a8:58: b7:a5:01:91:e3:05:85:e6:cc:fb:e3:1e:bc:3a:9a: 5e:ed:98:13:b3:75:3f:d9:a1:4b:a8:d6:ea:b4:c7: ab:c9:61:bf:11:85:7c:0e:5b:61:a5:ec:ac:d6:fa: bd:a6:37:01:5f:a9:e2:4d:b8:83:70:4d:77:7a:a8: 21:d6:a6:9a:7a:ad:5a:ac:87:da:fd:d2:12:1c:9b: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:67:F2:59:2A:38:03:61:DE:12:32:73:94:63:E1:A9:31:7B:3A:C3 X509v3 Authority Key Identifier: keyid:A0:EA:2A:72:0C:AC:31:C8:37:5F:55:6C:F9:4B:FE:F8:D1:11:69:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/oOoqcgysMcg3X1Vs-Uv--NERafY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oOoqcgysMcg3X1Vs-Uv--NERafY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/60E207BCD0B911EFA0848825C4F9AE02/02F0D9DED0BA11EFA8B5A526C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:a5c0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:6b:61:26:45:e2:94:4f:62:59:df:4d:b7:fb:e2:f1:64:61: 8b:bf:a2:87:d9:09:44:2b:d9:7b:35:59:04:e7:e6:8f:28:44: f1:db:08:0e:04:83:5d:b6:9d:bd:89:e3:a3:f1:e3:0f:4c:ee: 80:5e:77:13:df:73:bd:ba:90:4c:d3:a4:92:82:a7:1c:5a:94: ad:13:f9:af:88:e3:f6:76:80:75:fb:46:e2:7b:68:ab:9a:60: 02:4d:1b:95:60:3a:a7:4f:d5:61:88:1d:f7:18:8d:a0:60:ba: 2c:7b:f7:c0:3e:9e:09:d8:b0:59:c1:9b:c4:fe:4a:49:8b:18: 3c:bd:db:83:be:8c:9f:6a:c5:23:fd:28:48:08:92:64:d1:d7: 34:1f:79:15:02:29:bf:d1:19:17:46:e7:c2:60:98:ce:81:cb: 49:9b:4b:33:b8:27:03:23:14:ab:52:30:ef:29:44:d9:38:0b: d0:ba:14:af:20:4f:28:b1:58:22:2b:b4:6c:ba:47:24:95:ef: 08:76:79:9c:7b:f7:19:ba:25:31:60:e5:c2:00:b2:84:95:aa: 3f:ce:ff:29:8e:db:ec:62:c9:1f:94:7e:a4:4b:44:9a:05:24: ae:d0:12:3e:e7:4e:53:2e:d8:a0:71:f4:01:29:bb:a3:c5:be: 90:03:cd:13 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx N0MwRjMxMTAvBgNVBAUTKEEwRUEyQTcyMENBQzMxQzgzNzVGNTU2Q0Y5NEJGRUY4 RDExMTY5RjYwHhcNMjYwMTEzMDUyNDI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY1ZDcwYS00Zjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArco2LvM3IJX0mEjJ0k5xvH4jSxJzdCV2/mNALdQgUjGgtzEN+gI9r8S2rbeQ QBHeCsWwXQr5Mn+R9R8+lk8Qspm6VJWPD3z9gOfoHdxuw2U0b6EvZOCIqoiAI51l tMMxPnPWNPtywbxMrUQ/JShbSO5VdPDsIx0J0Rx/00dGuqhrRWanqBc1NM+0mHtZ 3nzvRQRwxtx2Na1bJZ97xqIVAMbiQuEUpHcJkral2CpwDOAtqFi3pQGR4wWF5sz7 4x68Oppe7ZgTs3U/2aFLqNbqtMeryWG/EYV8Dlthpeys1vq9pjcBX6niTbiDcE13 eqgh1qaaeq1arIfa/dISHJs3CwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEdn8lkq OANh3hIyc5Rj4akxezrDMB8GA1UdIwQYMBaAFKDqKnIMrDHIN19VbPlL/vjREWn2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGMy82MEUyMDdCQ0Qw QjkxMUVGQTA4NDg4MjVDNEY5QUUwMi9vT29xY2d5c01jZzNYMVZzLVV2LS1ORVJh ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Pb3FjZ3lzTWNnM1gxVnMtVXYtLU5FUmFmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MwRjMvNjBFMjA3QkNEMEI5MTFFRkEwODQ4ODI1QzRGOUFFMDIvMDJGMEQ5REVE MEJBMTFFRkE4QjVBNTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30pcAwDQYJKoZIhvcNAQELBQADggEBAFprYSZF4pRP YlnfTbf74vFkYYu/oofZCUQr2Xs1WQTn5o8oRPHbCA4Eg122nb2J46Px4w9M7oBe dxPfc726kEzTpJKCpxxalK0T+a+I4/Z2gHX7RuJ7aKuaYAJNG5VgOqdP1WGIHfcY jaBguix798A+ngnYsFnBm8T+SkmLGDy924O+jJ9qxSP9KEgIkmTR1zQfeRUCKb/R GRdG58JgmM6By0mbSzO4JwMjFKtSMO8pRNk4C9C6FK8gTyixWCIrtGy6RySV7wh2 eZx79xm6JTFg5cIAsoSVqj/O/ymO2+xiyR+UfqRLRJoFJK7QEj7nTlMu2KBx9AEp u6PFvpADzRM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:16 2026 by rpki-client