This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/3EF6E4A4291D11EFBE3C7971C4F9AE02.roa File: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (raw, json) Hash identifier: mrdifevaNrjgGPKQ1OBlBf3Ozo1jwgzsiYqzgjiO4VY= Subject key identifier: 0C:12:3B:38:8F:45:C8:06:36:F9:4F:46:91:01:F2:2C:C9:1C:81:02 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A38 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/3EF6E4A4291D11EFBE3C7971C4F9AE02.roa Signing time: Fri 28 Nov 2025 19:22:27 +0000 ROA not before: Fri 28 Nov 2025 19:22:27 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133141 IP address blocks: 2407:1ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2616 (0xa38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Nov 28 19:22:27 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6929f672-d8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:fe:ce:7b:4c:d0:82:97:05:a2:d6:67:b2: a3:50:21:0b:de:8d:bf:a3:2f:13:1e:66:6d:03:0d: df:79:fd:47:2d:d8:34:28:20:13:38:0b:f1:69:d8: ce:ed:d1:fd:8f:16:f1:9f:4a:89:cc:24:f7:7e:83: e4:89:a5:3b:0a:df:d4:79:76:42:ee:2d:75:bf:28: 63:06:47:02:c9:1d:a9:5e:e5:63:80:a2:ff:fc:e6: 4e:59:0a:33:63:ef:75:c0:e1:b5:dd:be:e5:75:3c: ef:c0:b7:06:dd:78:2d:6a:d7:ff:74:80:b7:d5:cf: 10:1f:ae:da:d9:0f:0b:70:72:75:5f:d9:67:6b:16: 87:37:4d:eb:18:40:1b:91:25:8e:4f:37:77:d4:cd: ce:67:29:9f:c9:9a:ad:6b:1b:f3:f7:ef:0d:47:c2: 8b:79:b8:36:be:48:6a:e7:b8:1f:21:d7:ec:7e:8e: 95:2a:3b:e9:36:34:8c:68:d1:5c:e5:f9:df:36:2d: ef:5c:07:9a:7f:b5:bf:d7:5b:aa:14:4b:9f:4f:e9: 13:1c:ca:21:4c:45:79:11:0a:b2:95:e0:40:cf:fa: 93:69:84:57:ac:80:df:95:f7:56:fb:2d:14:3f:c9: ae:f0:52:4e:d7:ce:2d:bb:89:c0:55:2a:2d:37:08: cc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:12:3B:38:8F:45:C8:06:36:F9:4F:46:91:01:F2:2C:C9:1C:81:02 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/3EF6E4A4291D11EFBE3C7971C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:1ec0::/32 Signature Algorithm: sha256WithRSAEncryption 7a:9d:c9:fb:cf:d0:94:44:9c:d8:2e:41:81:44:c2:62:5f:78: bf:61:0e:23:92:87:7b:6a:eb:c6:d8:0a:90:0b:7b:c1:46:b1: 8a:7d:b1:b0:50:0d:a4:db:df:76:a7:a4:fd:51:bd:a0:5b:79: 04:f7:a3:de:5b:27:50:ab:6f:d4:e6:b0:03:9a:78:59:f7:41: 9b:18:8e:56:08:ae:d9:39:7a:fd:c1:82:16:9d:2c:8a:b6:4a: c7:4e:6d:91:ea:0b:d3:4f:66:90:25:49:22:f2:d4:59:25:90: 7a:08:4c:05:46:b8:27:1f:58:ec:53:b5:79:9f:f1:3f:8e:1a: 5c:6c:71:d6:f6:b4:a2:2c:1d:6a:60:c2:e5:2f:e9:f5:21:c9: 61:94:f6:81:39:88:67:78:6a:c7:50:db:aa:39:a1:b6:e0:32: 76:7d:88:0e:be:38:c3:f5:17:92:33:1a:60:25:73:c3:3b:82: 7a:16:87:d9:8a:f5:43:98:f6:eb:7d:ad:c0:05:10:be:52:48: 58:10:cb:a9:e7:ca:e3:a3:dc:2b:14:86:94:ff:5c:ae:c1:c0: 3e:f3:d0:09:b7:fa:7a:b0:1d:ac:00:27:42:0f:6a:57:c5:01: fb:89:15:fe:59:8a:9d:3f:41:83:9a:ae:c2:4b:c4:b2:c1:72: 99:d5:c0:0d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICCjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUxMTI4MTkyMjI3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTI5ZjY3Mi1kOGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0j+zntM0IKXBaLWZ7KjUCEL3o2/oy8THmZtAw3fef1HLdg0KCATOAvxadjO 7dH9jxbxn0qJzCT3foPkiaU7Ct/UeXZC7i11vyhjBkcCyR2pXuVjgKL//OZOWQoz Y+91wOG13b7ldTzvwLcG3Xgtatf/dIC31c8QH67a2Q8LcHJ1X9lnaxaHN03rGEAb kSWOTzd31M3OZymfyZqtaxvz9+8NR8KLebg2vkhq57gfIdfsfo6VKjvpNjSMaNFc 5fnfNi3vXAeaf7W/11uqFEufT+kTHMohTEV5EQqyleBAz/qTaYRXrIDflfdW+y0U P8mu8FJO184tu4nAVSotNwjMRwIDAQABo4ICljCCApIwHQYDVR0OBBYEFAwSOziP RcgGNvlPRpEB8izJHIECMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY5NDMvQjcxODExNjg4RDUxMTFFQUI4QjI2Mzg0QzRGOUFFMDIvM0VGNkU0QTQy OTFEMTFFRkJFM0M3OTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBx7AMA0GCSqGSIb3DQEBCwUAA4IBAQB6ncn7z9CURJzY LkGBRMJiX3i/YQ4jkod7auvG2AqQC3vBRrGKfbGwUA2k2992p6T9Ub2gW3kE96Pe WydQq2/U5rADmnhZ90GbGI5WCK7ZOXr9wYIWnSyKtkrHTm2R6gvTT2aQJUki8tRZ JZB6CEwFRrgnH1jsU7V5n/E/jhpcbHHW9rSiLB1qYMLlL+n1IclhlPaBOYhneGrH UNuqOaG24DJ2fYgOvjjD9ReSMxpgJXPDO4J6FofZivVDmPbrfa3ABRC+UkhYEMup 58rjo9wrFIaU/1yuwcA+89AJt/p6sB2sACdCD2pXxQH7iRX+WYqdP0GDmq7CS8Sy wXKZ1cAN -----END CERTIFICATE-----Generated at Sun Dec 7 04:27:50 2025 by rpki-client