This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/7BDC977E0AF011EF87265E12C4F9AE02.roa File: 7BDC977E0AF011EF87265E12C4F9AE02.roa (raw, json) Hash identifier: ESqolF4y5qDuTvymMR58zkbGmDho8m2vhFnhCpHR9XI= Subject key identifier: C6:A1:AA:01:E3:6C:47:5C:01:F8:91:D5:20:40:30:CA:E8:EC:32:F6 Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Certificate serial: 0181 Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/7BDC977E0AF011EF87265E12C4F9AE02.roa Signing time: Fri 21 Nov 2025 23:13:17 +0000 ROA not before: Fri 21 Nov 2025 23:13:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139859 IP address blocks: 2403:ad80:8004::/48 maxlen: 48 2403:ad80:8008::/48 maxlen: 48 2403:ad80:8047::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C Validity Not Before: Nov 21 23:13:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6920f20d-1749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:58:b4:cd:41:e1:89:7c:0f:7a:2d:ca:ee: 78:bf:24:ec:eb:05:ec:a6:15:b1:bc:72:53:9c:6c: a8:e3:d1:cc:33:9e:ce:b2:27:04:42:e4:3f:51:cb: e1:74:5f:a2:f3:be:7b:d7:a3:ed:db:e4:53:1e:d0: 67:dd:91:ca:12:76:c3:57:bf:f4:03:2a:c2:97:89: 6d:b6:66:1f:33:9f:f4:e2:da:26:70:72:49:16:69: f7:7d:77:94:91:37:c7:22:7a:80:bf:8c:1a:04:53: 60:53:40:dd:be:d0:58:4a:b5:e7:80:b8:aa:64:16: 55:d3:f5:9c:5a:e8:51:d9:3a:32:2b:51:c3:d0:64: b3:c8:66:cb:27:6b:da:5b:0f:bf:76:64:09:b7:69: 87:a1:0c:16:c8:7d:81:0b:e5:c7:e5:c0:30:2f:b6: 4c:5d:92:1f:ec:7e:9c:93:5b:5f:9f:a4:b2:ff:24: 52:b2:fc:70:a9:61:af:36:46:c8:f9:7c:11:29:64: c2:04:2f:58:e0:50:51:e0:cd:fa:0a:83:65:7c:20: 53:d6:e9:d6:2c:9e:b3:30:d1:e9:b6:d1:c0:6e:47: 4f:11:a3:cd:fe:6a:bf:f2:97:52:2b:d2:73:04:cd: 22:58:ad:9f:d9:9c:4c:a2:4c:fe:a8:06:e8:76:ab: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A1:AA:01:E3:6C:47:5C:01:F8:91:D5:20:40:30:CA:E8:EC:32:F6 X509v3 Authority Key Identifier: keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/7BDC977E0AF011EF87265E12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:ad80:8004::/48 2403:ad80:8008::/48 2403:ad80:8047::/48 Signature Algorithm: sha256WithRSAEncryption 68:ad:18:8a:5c:5f:9a:5c:09:61:92:cb:00:92:b1:06:ed:51: c4:db:cd:f0:d6:67:c7:f0:f4:91:d3:1b:08:cc:97:e4:ee:98: 37:bb:25:2c:5e:a1:99:a6:e3:9e:b4:62:a0:51:ac:7d:fa:b2: d8:dc:2b:fa:9e:7c:3b:11:bb:2e:d4:36:55:a0:8e:9d:06:96: 7b:be:30:4a:75:74:cc:3a:0f:6e:6c:3b:87:4e:aa:de:c2:74: 4d:a4:8d:ed:28:08:ba:f3:16:13:83:df:4a:fd:d7:72:3b:da: 5b:29:5f:40:50:af:8c:ff:a0:8a:5f:bc:c1:b8:55:a9:af:b1: 7d:43:82:0b:de:f9:3f:69:df:70:ec:88:e4:97:53:c6:6f:6d: 48:35:b2:58:1f:23:9d:cb:84:5d:fc:a2:b6:39:d3:97:e0:82: 5a:ae:fc:d3:b9:5c:59:42:71:9e:ea:d3:95:56:d7:16:f6:d1: a4:84:1b:06:6e:b8:8c:30:21:9d:38:6b:c5:94:d3:d7:8d:39: 02:11:75:b3:3f:37:68:b4:c4:7a:a9:72:1c:f0:b7:cf:85:be: 5b:7d:9e:c9:dd:9a:42:5b:2e:76:9f:9c:fb:d3:18:57:c9:a1: 45:2b:34:07:e9:df:f2:03:e9:c2:ae:0d:26:4b:ea:9a:99:63: 9d:04:68:30 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1 QjVENjcyOUMwHhcNMjUxMTIxMjMxMzE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTIwZjIwZC0xNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7lYtM1B4Yl8D3otyu54vyTs6wXsphWxvHJTnGyo49HMM57OsicEQuQ/Ucvh dF+i875716Pt2+RTHtBn3ZHKEnbDV7/0AyrCl4lttmYfM5/04tomcHJJFmn3fXeU kTfHInqAv4waBFNgU0DdvtBYSrXngLiqZBZV0/WcWuhR2ToyK1HD0GSzyGbLJ2va Ww+/dmQJt2mHoQwWyH2BC+XH5cAwL7ZMXZIf7H6ck1tfn6Sy/yRSsvxwqWGvNkbI +XwRKWTCBC9Y4FBR4M36CoNlfCBT1unWLJ6zMNHpttHAbkdPEaPN/mq/8pdSK9Jz BM0iWK2f2ZxMokz+qAbodqv7DQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMahqgHj bEdcAfiR1SBAMMro7DL2MB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3NzcvMEJBNTcyQjBFQzRGMTFFRUExQjM4ODY2QzRGOUFFMDIvN0JEQzk3N0Uw QUYwMTFFRjg3MjY1RTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMCEEAgACMBsDBwAkA62AgAQDBwAkA62AgAgDBwAkA62AgEcwDQYJKoZIhvcN AQELBQADggEBAGitGIpcX5pcCWGSywCSsQbtUcTbzfDWZ8fw9JHTGwjMl+TumDe7 JSxeoZmm4560YqBRrH36stjcK/qefDsRuy7UNlWgjp0Glnu+MEp1dMw6D25sO4dO qt7CdE2kje0oCLrzFhOD30r913I72lspX0BQr4z/oIpfvMG4VamvsX1Dggve+T9p 33DsiOSXU8ZvbUg1slgfI53LhF38orY505fgglqu/NO5XFlCcZ7q05VW1xb20aSE GwZuuIwwIZ04a8WU09eNOQIRdbM/N2i0xHqpchzwt8+Fvlt9nsndmkJbLnafnPvT GFfJoUUrNAfp3/ID6cKuDSZL6pqZY50EaDA= -----END CERTIFICATE-----Generated at Sun Dec 7 03:25:44 2025 by rpki-client