This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/6DC7671CBB0311F0BAA3F480C4F9AE02.roa File: 6DC7671CBB0311F0BAA3F480C4F9AE02.roa (raw, json) Hash identifier: IXjsC1Gn8YS8EVHrHIvkv8PnIK6AM47wRbwZW8rBBL0= Subject key identifier: 13:4D:F7:CB:04:B4:F7:8E:B3:43:E7:34:C2:B9:DF:32:4B:62:54:07 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 059C Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/6DC7671CBB0311F0BAA3F480C4F9AE02.roa Signing time: Thu 06 Nov 2025 11:26:25 +0000 ROA not before: Thu 06 Nov 2025 11:26:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2697 IP address blocks: 202.41.64.0/18 maxlen: 24 202.141.128.0/19 maxlen: 24 2001:e30:1100::/40 maxlen: 40 2001:e30:1111::/48 maxlen: 48 2001:e30:1200::/40 maxlen: 40 2001:e30:1300::/40 maxlen: 40 2001:e30:1400::/40 maxlen: 40 2001:e30:1500::/40 maxlen: 40 2001:e30:1600::/40 maxlen: 40 2001:e30:1800::/40 maxlen: 40 2001:e30:187c::/48 maxlen: 48 2001:e30:1a00::/40 maxlen: 40 2001:e30:1b00::/40 maxlen: 40 2001:e30:1b06::/48 maxlen: 48 2001:e30:1c1e::/48 maxlen: 48 2001:e30:1e00::/40 maxlen: 40 2001:e30:1f00::/40 maxlen: 40 2001:e30:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: Nov 6 11:26:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=690c85e1-f685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:0c:97:ed:8c:d7:29:34:0e:df:5d:6c:ce: 2d:26:7e:68:82:a0:b2:fc:08:91:00:e0:7e:47:ad: 96:9e:e1:04:c6:e1:2d:82:12:75:8b:be:a5:6e:79: 5f:b8:0f:fb:70:15:fc:47:3b:e7:61:8c:bc:95:45: d4:3d:59:29:0c:6d:5d:1f:08:93:36:41:5e:b4:a7: e2:ab:d7:02:5d:b1:4f:96:de:2a:7a:75:4b:91:0a: 55:60:5c:71:ac:09:79:ec:18:ec:50:36:95:4a:db: 82:d8:c1:48:fd:33:37:d6:af:2d:25:07:08:8f:f7: e8:e6:fd:d8:bb:6c:26:66:79:ae:1d:1c:3f:0a:7d: 7d:10:5f:cb:0b:74:e5:5b:0d:1f:90:41:06:1b:c6: 00:43:55:a9:29:71:61:7c:15:3e:a8:0a:4e:17:ad: 8d:86:ad:fd:fb:a3:b1:05:24:ac:54:08:84:bf:ab: 1d:1a:f8:d3:0f:a1:8f:6e:c4:cc:db:39:d2:51:a6: 5a:8e:07:c5:8f:35:b4:20:f5:42:70:57:dd:f7:47: ea:d7:b3:1a:2c:87:0c:9e:c5:ab:9e:23:c0:6a:5b: 57:cf:e3:91:a7:3f:6f:bb:c2:cd:70:ee:30:d0:ec: 30:3e:21:7a:fa:4b:3c:6e:cc:8b:83:59:14:87:91: 7a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4D:F7:CB:04:B4:F7:8E:B3:43:E7:34:C2:B9:DF:32:4B:62:54:07 X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/6DC7671CBB0311F0BAA3F480C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.41.64.0/18 202.141.128.0/19 IPv6: 2001:e30:1100::-2001:e30:16ff:ffff:ffff:ffff:ffff:ffff 2001:e30:1800::/40 2001:e30:1a00::/39 2001:e30:1c1e::/48 2001:e30:1e00::-2001:e30:20ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 61:bd:4c:4a:b9:e4:23:6a:d7:d9:5c:6a:c5:6e:4b:a9:71:3c: 5c:8c:93:1e:d3:21:44:21:82:57:77:19:12:3b:69:a7:1a:b0: 24:f3:c6:4e:97:e0:16:0f:44:f0:32:b3:1b:5f:17:33:ab:77: 0b:7f:d4:e7:c7:f3:2c:20:d0:25:ca:2b:19:72:a5:ed:30:e7: 68:f1:44:a7:47:7a:0e:5d:2a:69:ab:2e:47:dd:47:0d:c1:3d: 5e:7d:c5:b5:1d:33:67:4b:9c:5b:ef:dd:ed:32:14:71:30:de: 28:48:88:d0:33:a6:76:c0:f7:1f:61:60:f9:6e:68:61:64:05: c7:46:c4:14:e7:02:37:8b:bd:4a:0f:72:84:4b:23:36:62:d6: dc:54:ac:36:cf:e6:f4:07:c1:18:52:68:a1:02:0a:9b:3a:54: 61:4f:81:86:f7:3f:ef:e1:a3:b5:ff:0a:99:20:2a:14:72:56: 5c:50:55:ec:b2:96:bb:b5:16:3b:45:8a:a9:71:21:71:ef:77: 17:58:da:61:c0:8e:59:85:71:05:6e:5c:ce:42:7d:cb:13:2f: 70:5b:29:53:9f:99:da:26:f2:78:17:ff:79:02:cc:d2:fb:de: bc:b2:39:f3:6c:26:56:0b:1f:8b:b4:2e:08:c0:71:81:52:a1: ac:5a:a1:1e -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjUxMTA2MTEyNjI1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBjODVlMS1mNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofMMl+2M1yk0Dt9dbM4tJn5ogqCy/AiRAOB+R62WnuEExuEtghJ1i76lbnlf uA/7cBX8RzvnYYy8lUXUPVkpDG1dHwiTNkFetKfiq9cCXbFPlt4qenVLkQpVYFxx rAl57BjsUDaVStuC2MFI/TM31q8tJQcIj/fo5v3Yu2wmZnmuHRw/Cn19EF/LC3Tl Ww0fkEEGG8YAQ1WpKXFhfBU+qApOF62Nhq39+6OxBSSsVAiEv6sdGvjTD6GPbsTM 2znSUaZajgfFjzW0IPVCcFfd90fq17MaLIcMnsWrniPAaltXz+ORpz9vu8LNcO4w 0OwwPiF6+ks8bsyLg1kUh5F6swIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFBNN98sE tPeOs0PnNMK53zJLYlQHMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUzRDMvNkVDMEUzNjgwMDBBMTFFQzhDMjg3MjUyQzRGOUFFMDIvNkRDNzY3MUNC QjAzMTFGMEJBQTNGNDgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMBIEAgABMAwDBAbKKUADBAXKjYAwQwQCAAIwPTAQAwYAIAEOMBEDBgAgAQ4w FgMGACABDjAYAwYBIAEOMBoDBwAgAQ4wHB4wEAMGASABDjAeAwYAIAEOMCAwDQYJ KoZIhvcNAQELBQADggEBAGG9TEq55CNq19lcasVuS6lxPFyMkx7TIUQhgld3GRI7 aacasCTzxk6X4BYPRPAysxtfFzOrdwt/1OfH8ywg0CXKKxlype0w52jxRKdHeg5d KmmrLkfdRw3BPV59xbUdM2dLnFvv3e0yFHEw3ihIiNAzpnbA9x9hYPluaGFkBcdG xBTnAjeLvUoPcoRLIzZi1txUrDbP5vQHwRhSaKECCps6VGFPgYb3P+/ho7X/Cpkg KhRyVlxQVeyylru1FjtFiqlxIXHvdxdY2mHAjlmFcQVuXM5CfcsTL3BbKVOfmdom 8ngX/3kCzNL73ryyOfNsJlYLH4u0LgjAcYFSoaxaoR4= -----END CERTIFICATE-----Generated at Sat Dec 6 21:14:21 2025 by rpki-client