This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B066E5B6C5C111F0BD9B1831C4F9AE02.roa File: B066E5B6C5C111F0BD9B1831C4F9AE02.roa (raw, json) Hash identifier: yALp6qbWK9jDgUG544TXICBfvMv+1dSL9GoGFa67F/U= Subject key identifier: 7E:EA:07:90:1A:95:3A:79:5F:29:A7:6B:0F:9E:85:52:90:68:5B:3F Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Certificate serial: 0ED2 Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B066E5B6C5C111F0BD9B1831C4F9AE02.roa Signing time: Thu 20 Nov 2025 03:35:51 +0000 ROA not before: Thu 20 Nov 2025 03:35:51 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 209554 IP address blocks: 2001:df1:4580::/48 maxlen: 48 2405:84c0::/48 maxlen: 48 2405:84c0:2000::/36 maxlen: 40 2405:84c0:4000::/36 maxlen: 40 2405:84c0:5000::/36 maxlen: 40 2405:84c0:6800::/40 maxlen: 44 2405:84c0:6f00::/40 maxlen: 44 2405:84c0:8000::/44 maxlen: 48 2405:84c0:8010::/44 maxlen: 48 2405:84c0:8020::/44 maxlen: 48 2405:84c0:8030::/44 maxlen: 48 2405:84c0:8040::/44 maxlen: 48 2405:84c0:8050::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3794 (0xed2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099 Validity Not Before: Nov 20 03:35:51 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=691e8c97-3204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2c:16:82:1b:fb:e1:90:62:7d:7e:96:04:a8: 19:08:19:b3:ea:52:e3:d9:e2:b2:ad:82:28:b1:15: 9b:ae:8d:95:cb:0f:3f:c4:71:8e:9b:b9:e1:7b:ca: 25:19:a3:ac:d4:8e:0d:7b:9b:bc:f8:64:43:af:5d: b4:8a:7b:c8:17:c6:d2:18:54:e4:af:ff:5f:70:88: 4d:f8:15:d0:54:95:89:29:d1:b6:56:34:52:1c:a0: 7e:1f:93:9c:f2:27:63:45:a4:e2:60:e0:f9:0f:8e: 4a:a0:43:62:02:b9:29:97:b6:b1:3f:c8:d1:24:ff: 24:a1:90:9e:02:77:02:6a:30:c1:8b:27:80:0e:3e: 98:0e:86:be:dd:98:3d:b9:2c:8e:8f:1e:bb:8c:4c: 01:76:53:69:0b:47:91:80:5c:c5:ce:5f:02:d2:43: dd:2d:ff:5e:60:6c:dc:cb:bc:94:97:9f:71:fb:f9: 2d:cb:0d:1b:d4:95:3f:d6:2b:dd:84:3e:bd:c6:ad: 2b:e8:a5:ab:ae:e7:4f:8b:2b:30:b4:db:99:93:3e: f3:1e:0f:3d:ff:a3:9e:63:cb:e8:bf:68:4a:0c:4a: d7:79:9c:72:65:a2:20:5e:f7:28:05:1d:bf:32:ca: 71:ca:93:cd:33:26:89:07:8b:6f:5c:00:f3:bb:32: 97:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EA:07:90:1A:95:3A:79:5F:29:A7:6B:0F:9E:85:52:90:68:5B:3F X509v3 Authority Key Identifier: keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/B066E5B6C5C111F0BD9B1831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df1:4580::/48 2405:84c0::/48 2405:84c0:2000::/36 2405:84c0:4000::/35 2405:84c0:6800::/40 2405:84c0:6f00::/40 2405:84c0:8000::-2405:84c0:805f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption af:15:8a:9c:05:4b:66:ca:62:8b:a8:b9:77:43:a2:08:1e:e2: 58:80:58:be:6f:a0:13:09:2a:3c:2f:b5:5a:2c:ea:ac:c7:14: 0b:99:16:20:56:de:e4:d7:22:63:dd:5f:c5:d1:1c:51:f1:d7: 28:04:3c:b0:2b:2b:2a:19:de:b4:e5:42:f1:68:82:b0:6f:55: f9:98:4b:5d:39:ea:a5:dc:73:a0:a7:11:4e:d0:7c:0a:87:86: 8c:63:15:4f:53:30:46:47:79:93:3b:dd:b5:e3:80:21:03:ec: d9:19:3e:7c:b9:5e:95:c0:e4:8c:65:f6:c2:43:23:8e:0f:be: 0e:99:a1:27:63:ee:bb:b0:bd:ea:df:98:2e:b8:97:69:9d:09: f9:49:71:ea:11:5a:a7:91:4b:e9:20:93:d0:47:18:ad:af:75: ba:8b:df:99:39:84:b9:d5:bc:0f:39:7e:35:7f:ce:fb:21:f7: a6:c2:05:9e:1c:75:0b:1c:63:73:1c:c9:80:f3:4d:01:07:fc: b0:be:e9:81:64:3e:6c:f6:2c:7a:6e:41:76:67:9a:24:44:48: 4b:97:11:be:5c:74:f7:26:3e:0d:3a:a3:85:ab:e3:40:68:09: 8f:ba:3b:b0:13:17:77:10:5e:f3:9e:70:50:51:71:f2:8d:b1: 21:4c:47:67 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgICDtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC NzBBRjgwOTkwHhcNMjUxMTIwMDMzNTUxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFlOGM5Ny0zMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CwWghv74ZBifX6WBKgZCBmz6lLj2eKyrYIosRWbro2Vyw8/xHGOm7nhe8ol GaOs1I4Ne5u8+GRDr120invIF8bSGFTkr/9fcIhN+BXQVJWJKdG2VjRSHKB+H5Oc 8idjRaTiYOD5D45KoENiArkpl7axP8jRJP8koZCeAncCajDBiyeADj6YDoa+3Zg9 uSyOjx67jEwBdlNpC0eRgFzFzl8C0kPdLf9eYGzcy7yUl59x+/ktyw0b1JU/1ivd hD69xq0r6KWrrudPiyswtNuZkz7zHg89/6OeY8vov2hKDErXeZxyZaIgXvcoBR2/ MspxypPNMyaJB4tvXADzuzKXRwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFH7qB5Aa lTp5Xymnaw+ehVKQaFs/MB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4 NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvQjA2NkU1QjZD NUMxMTFGMEJEOUIxODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXgYIKwYBBQUHAQcBAf8E TzBNMEsEAgACMEUDBwAgAQ3xRYADBwAkBYTAAAADBgQkBYTAIAMGBSQFhMBAAwYA JAWEwGgDBgAkBYTAbzARAwYHJAWEwIADBwUkBYTAgEAwDQYJKoZIhvcNAQELBQAD ggEBAK8VipwFS2bKYououXdDogge4liAWL5voBMJKjwvtVos6qzHFAuZFiBW3uTX ImPdX8XRHFHx1ygEPLArKyoZ3rTlQvFogrBvVfmYS1056qXcc6CnEU7QfAqHhoxj FU9TMEZHeZM73bXjgCED7NkZPny5XpXA5Ixl9sJDI44Pvg6ZoSdj7ruwverfmC64 l2mdCflJceoRWqeRS+kgk9BHGK2vdbqL35k5hLnVvA85fjV/zvsh96bCBZ4cdQsc Y3McyYDzTQEH/LC+6YFkPmz2LHpuQXZnmiRESEuXEb5cdPcmPg06o4Wr40BoCY+6 O7ATF3cQXvOecFBRcfKNsSFMR2c= -----END CERTIFICATE-----Generated at Sat Dec 6 19:19:00 2025 by rpki-client