This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/31C36B64905F11EFAF49EB6BC4F9AE02.roa File: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (raw, json) Hash identifier: AM8YczbuSDMrPGJYvj82lh85hv7XnwSEndBgiNbOMeE= Subject key identifier: 98:3B:2A:13:21:A5:E3:71:9E:CB:A3:E1:23:7A:9F:CC:B7:B8:9A:AE Certificate issuer: /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Certificate serial: D4 Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/31C36B64905F11EFAF49EB6BC4F9AE02.roa Signing time: Mon 01 Dec 2025 04:32:06 +0000 ROA not before: Mon 01 Dec 2025 04:32:06 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 153359 IP address blocks: 2001:df4:6340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 03:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933 Validity Not Before: Dec 1 04:32:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692d1a46-0f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:8e:67:10:b1:06:6e:cf:73:64:01:87:b1: 10:bd:88:6f:7d:91:a9:2f:58:ff:85:da:b7:3b:1e: 6a:e8:f2:af:b0:38:f0:b3:89:bb:ed:a7:b8:fe:46: 35:28:c9:46:94:ef:f1:ad:8e:ce:85:1a:94:89:cf: 7c:8c:41:e5:50:61:bc:d0:9f:95:a8:5c:7c:82:7b: cd:26:45:69:bb:82:48:b8:9f:e2:9b:14:ed:13:83: b5:45:eb:80:43:b2:bd:e0:e7:9d:9b:e3:92:bc:f1: ac:db:98:12:00:08:f9:e9:78:ef:6e:ac:39:44:04: 55:0e:25:89:3d:25:cb:c6:9f:e6:88:c7:d4:a2:29: 26:a0:b7:ff:8f:07:31:41:d2:0a:88:4c:b0:73:67: 8a:fb:53:32:1b:6a:1a:e6:18:c0:12:26:4d:74:2b: 7c:6d:4a:45:80:ce:42:33:61:91:7d:6b:8c:a9:6d: 03:16:ff:17:1f:bb:17:78:71:95:96:9d:ed:ff:b4: 21:51:cc:23:71:d6:45:ef:1c:d6:f1:62:0a:69:7b: 74:58:71:e0:9b:d3:00:1a:f7:ac:8d:5a:06:a8:ff: 6e:86:d4:7d:da:60:17:39:6f:14:7c:fc:25:f5:2d: 90:c0:47:68:5c:d6:35:95:f6:60:b1:3f:d9:0c:e5: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3B:2A:13:21:A5:E3:71:9E:CB:A3:E1:23:7A:9F:CC:B7:B8:9A:AE X509v3 Authority Key Identifier: keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/31C36B64905F11EFAF49EB6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:6340::/48 Signature Algorithm: sha256WithRSAEncryption a8:f5:bf:ef:d1:86:e5:95:2c:5e:10:6d:4d:e8:d5:d7:3c:6b: e2:9e:31:13:70:96:b3:bd:29:3b:a0:14:f3:b8:4a:6f:b4:86: 87:95:78:a3:5a:8b:e8:de:f6:e9:e2:28:9b:3b:5c:33:06:17: aa:7a:f2:f1:bd:4c:e2:bf:b5:c1:3b:8d:64:09:de:a1:d1:cb: 66:8d:64:c9:59:07:d4:c5:3c:71:22:d0:e1:20:37:5e:36:f6: 3d:0f:90:f6:e0:4e:38:26:dc:5b:97:ef:ae:4b:5a:a3:b7:cf: c5:f0:58:8f:f7:62:92:ee:31:23:a9:1c:95:f1:4e:a7:5d:60: 0f:da:73:48:ac:41:83:87:29:e4:b0:1e:87:64:61:3c:dc:78: 1e:d1:af:4b:db:fb:a1:15:b6:b3:9c:9e:16:58:39:6c:ce:6b: da:67:e4:fe:7d:3a:84:cc:6b:d3:2a:bb:cd:4a:ee:a1:24:1b: 08:d0:86:36:50:f3:0d:bd:5f:05:64:3f:ab:4e:c0:5b:99:15: 14:0e:e6:ae:30:86:fe:84:ed:2a:b7:6e:4d:52:fb:8b:bd:5e: 79:4a:1b:42:71:04:c6:10:12:a7:67:cc:6a:bd:50:29:f5:29: 15:c8:c9:87:82:0e:1d:d0:76:a2:b9:d0:70:9c:e5:75:d1:6f: 5b:db:3a:ed -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ4OEYxMTAvBgNVBAUTKDM5NDNENDI2MTU3OUNERTBFODJBMDVDQTJBQjU0QjM4 N0JBNTE5MzMwHhcNMjUxMjAxMDQzMjA2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJkMWE0Ni0wZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpyOZxCxBm7Pc2QBh7EQvYhvfZGpL1j/hdq3Ox5q6PKvsDjws4m77ae4/kY1 KMlGlO/xrY7OhRqUic98jEHlUGG80J+VqFx8gnvNJkVpu4JIuJ/imxTtE4O1ReuA Q7K94Oedm+OSvPGs25gSAAj56Xjvbqw5RARVDiWJPSXLxp/miMfUoikmoLf/jwcx QdIKiEywc2eK+1MyG2oa5hjAEiZNdCt8bUpFgM5CM2GRfWuMqW0DFv8XH7sXeHGV lp3t/7QhUcwjcdZF7xzW8WIKaXt0WHHgm9MAGvesjVoGqP9uhtR92mAXOW8UfPwl 9S2QwEdoXNY1lfZgsT/ZDOUe+QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFJg7KhMh peNxnsuj4SN6n8y3uJquMB8GA1UdIwQYMBaAFDlD1CYVec3g6CoFyiq1Szh7pRkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri84NEE1QkM4MDkw NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi9PVVBVSmhWNXplRG9LZ1hLS3JWTE9IdWxH VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VUFVKaFY1emVEb0tnWEtLclZMT0h1bEdUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQ4OEYvODRBNUJDODA5MDVEMTFFRkE0RjMxRDJFQzRGOUFFMDIvMzFDMzZCNjQ5 MDVGMTFFRkFGNDlFQjZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30Y0AwDQYJKoZIhvcNAQELBQADggEBAKj1v+/RhuWV LF4QbU3o1dc8a+KeMRNwlrO9KTugFPO4Sm+0hoeVeKNai+je9uniKJs7XDMGF6p6 8vG9TOK/tcE7jWQJ3qHRy2aNZMlZB9TFPHEi0OEgN1429j0PkPbgTjgm3FuX765L WqO3z8XwWI/3YpLuMSOpHJXxTqddYA/ac0isQYOHKeSwHodkYTzceB7Rr0vb+6EV trOcnhZYOWzOa9pn5P59OoTMa9Mqu81K7qEkGwjQhjZQ8w29XwVkP6tOwFuZFRQO 5q4whv6E7Sq3bk1S+4u9XnlKG0JxBMYQEqdnzGq9UCn1KRXIyYeCDh3QdqK50HCc 5XXRb1vbOu0= -----END CERTIFICATE-----Generated at Sun Dec 7 13:00:12 2025 by rpki-client