This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/08347C420BFB11EDA31A0961C4F9AE02.roa File: 08347C420BFB11EDA31A0961C4F9AE02.roa (raw, json) Hash identifier: 2sM6dqjwFaWvanKsFaRgJilTOFHKXatSdEC+MoptC6Q= Subject key identifier: 67:57:15:8E:50:15:A7:1D:DF:DF:12:25:61:53:9A:73:BD:BB:B1:C3 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 3532 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/08347C420BFB11EDA31A0961C4F9AE02.roa Signing time: Mon 10 Nov 2025 15:00:41 +0000 ROA not before: Mon 10 Nov 2025 15:00:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9506 IP address blocks: 111.65.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 14:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13618 (0x3532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Nov 10 15:00:41 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6911fe19-139a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:99:8a:99:a4:dc:fa:01:7b:f0:5b:cb:c6: 4a:8d:ac:b2:de:3b:5c:30:5a:d5:a7:e8:7a:95:47: 73:89:5f:e3:5c:3a:aa:42:72:b4:a6:3a:4b:57:33: c0:a7:a3:d3:83:94:10:c8:c1:28:29:c4:93:95:74: 6b:47:68:69:a1:be:7d:8b:06:cc:61:8a:94:42:b0: 06:2d:64:5c:53:14:79:43:63:f6:8b:6e:16:58:ee: 38:94:c1:72:cd:f1:e4:2f:7d:55:eb:29:46:47:d8: 34:c8:ea:ed:ff:ff:6a:36:01:17:45:b6:0c:21:e7: ff:f3:2b:b2:e9:c2:99:9d:19:9c:d7:78:ff:9f:3f: 2a:0f:d9:5d:d8:d0:68:b8:a3:e7:9e:54:13:80:a9: c5:7f:83:aa:cc:41:2c:88:65:ea:b8:77:00:9e:d3: 71:17:c0:a7:ac:20:95:56:a1:b9:ba:a1:40:58:79: c4:c4:23:ea:dc:ca:43:f0:71:ca:0f:6a:ad:e6:06: e1:24:eb:cf:ad:bb:56:72:1e:fe:ad:99:4e:c9:f8: dd:3b:29:ef:da:40:7f:08:9e:04:bf:3b:fe:03:11: 4d:ff:55:f6:bf:47:5f:c2:a3:5b:be:c0:5d:29:96: 55:ee:b5:48:88:c2:27:5f:d0:3f:6e:18:8d:b4:7e: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:57:15:8E:50:15:A7:1D:DF:DF:12:25:61:53:9A:73:BD:BB:B1:C3 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/08347C420BFB11EDA31A0961C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.65.101.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:44:31:5c:20:ea:6f:7b:1e:83:c7:62:a2:56:31:3a:17:84: e7:73:d5:a6:37:cc:a2:fc:be:8e:e6:3a:a0:9c:32:5e:24:b1: 8c:85:e7:e3:1a:90:56:d3:51:b2:2a:5f:d1:57:c7:6b:ad:3d: cc:bf:41:2e:51:46:ab:fc:06:f0:d7:48:da:68:77:ec:5e:a8: ff:ab:4e:e3:c8:ca:f7:76:ec:42:36:10:40:4a:32:41:31:0b: e0:f7:fd:3b:bd:b0:6b:86:a7:fd:d9:8e:79:10:58:5a:4c:5b: 2d:3c:c6:23:00:75:53:9a:0e:fb:7e:96:3a:fa:af:b7:6b:98: 07:63:26:39:70:1d:12:2c:ce:93:38:fc:51:db:9d:31:b4:6f: 50:96:6e:d0:61:a4:a7:f1:26:9c:8d:69:4a:43:5d:40:b1:ec: 99:39:b2:4a:54:68:2b:f6:2f:01:69:e5:80:50:8f:a2:d3:f0: da:33:7e:d6:f4:52:5a:64:be:a2:26:88:8b:cb:e8:50:94:ba: e3:5b:f2:94:ea:29:34:6b:bb:fa:d0:4d:24:73:31:de:a5:0b: b0:b5:cb:62:56:12:af:d5:c3:39:7a:4f:1e:49:37:91:95:a2: e1:61:cf:ef:69:97:be:8f:89:ab:95:57:17:e4:cd:41:5b:fe: c8:c3:0b:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUxMTEwMTUwMDQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTExZmUxOS0xMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupyZipmk3PoBe/Bby8ZKjayy3jtcMFrVp+h6lUdziV/jXDqqQnK0pjpLVzPA p6PTg5QQyMEoKcSTlXRrR2hpob59iwbMYYqUQrAGLWRcUxR5Q2P2i24WWO44lMFy zfHkL31V6ylGR9g0yOrt//9qNgEXRbYMIef/8yuy6cKZnRmc13j/nz8qD9ld2NBo uKPnnlQTgKnFf4OqzEEsiGXquHcAntNxF8CnrCCVVqG5uqFAWHnExCPq3MpD8HHK D2qt5gbhJOvPrbtWch7+rZlOyfjdOynv2kB/CJ4Evzv+AxFN/1X2v0dfwqNbvsBd KZZV7rVIiMInX9A/bhiNtH5UGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGdXFY5Q Facd398SJWFTmnO9u7HDMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUE0OEYvOEM4MUE4NTYxRDhEMTFFMjg2NkM1MEVCMDhCMDJDRDIvMDgzNDdDNDIw QkZCMTFFREEzMUEwOTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABvQWUwDQYJKoZIhvcNAQELBQADggEBAF5EMVwg6m97HoPH YqJWMToXhOdz1aY3zKL8vo7mOqCcMl4ksYyF5+MakFbTUbIqX9FXx2utPcy/QS5R Rqv8BvDXSNpod+xeqP+rTuPIyvd27EI2EEBKMkExC+D3/Tu9sGuGp/3ZjnkQWFpM Wy08xiMAdVOaDvt+ljr6r7drmAdjJjlwHRIszpM4/FHbnTG0b1CWbtBhpKfxJpyN aUpDXUCx7Jk5skpUaCv2LwFp5YBQj6LT8Nozftb0UlpkvqImiIvL6FCUuuNb8pTq KTRru/rQTSRzMd6lC7C1y2JWEq/Vwzl6Tx5JN5GVouFhz+9pl76PiauVVxfkzUFb /sjDC4U= -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:03 2025 by rpki-client