This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/14F7BC00CEEF11EFAF6F762FC4F9AE02.roa File: 14F7BC00CEEF11EFAF6F762FC4F9AE02.roa (raw, json) Hash identifier: 2FGmDI1OZCn2kXGRhcOkUfm2jCMswTb7EQPD9YLXHCc= Subject key identifier: E7:88:12:20:3D:AE:75:8E:33:2B:5C:62:E4:1D:FF:44:AD:E2:4A:42 Certificate issuer: /CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Certificate serial: AA Authority key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/14F7BC00CEEF11EFAF6F762FC4F9AE02.roa Signing time: Wed 03 Dec 2025 04:34:57 +0000 ROA not before: Wed 03 Dec 2025 04:34:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134602 IP address blocks: 2001:df4:8bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Validity Not Before: Dec 3 04:34:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=692fbdf1-57db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:ca:61:f6:1e:e8:75:69:a1:0c:e6:75:c5: 6b:00:55:17:39:16:98:ff:37:f5:7d:1c:a0:a6:12: f1:4d:c6:a1:62:32:3e:f6:6c:57:ad:d1:78:60:16: 91:52:af:61:ed:05:b6:4a:db:b8:3e:73:4c:fa:53: 43:9b:85:00:d7:d8:74:9c:b7:9e:b1:3d:bc:9a:62: a6:e6:00:68:d9:af:bd:71:80:14:ce:ee:e6:c6:2f: f3:5a:50:4a:8b:30:03:f5:7c:99:d8:70:4c:d5:0f: 76:28:94:7b:a5:b1:02:d2:96:e8:45:c3:46:d6:b4: ee:2b:a9:59:f2:89:38:7d:6b:d1:c8:93:bc:63:6e: 37:a2:7a:e2:d7:8f:47:45:a5:e4:47:39:5e:8e:95: bc:ec:09:5d:3c:57:67:e7:c6:43:e2:d6:e7:10:79: 37:38:b3:da:6e:d5:2f:35:00:24:13:d9:89:87:fc: 13:c4:eb:cf:28:ca:b1:c7:ce:19:c0:e0:bd:87:77: 1d:53:86:9b:70:cf:21:ff:7b:73:40:3b:20:02:6f: c4:59:74:3a:3d:d2:5d:1b:32:db:1d:a0:f9:24:14: a3:4b:9a:4c:e9:93:53:79:02:a1:e4:f3:57:34:62: 96:9a:63:0b:8c:3a:99:f7:ce:15:69:9d:50:6c:ed: fa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:88:12:20:3D:AE:75:8E:33:2B:5C:62:E4:1D:FF:44:AD:E2:4A:42 X509v3 Authority Key Identifier: keyid:1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/14F7BC00CEEF11EFAF6F762FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:8bc0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:1b:05:15:96:48:6c:1d:b6:64:c4:a3:be:62:33:af:3a:de: 3b:30:09:7b:91:f0:d4:65:a6:6a:98:d7:0b:9a:48:04:5f:28: b9:7f:ea:83:1f:74:60:1c:1b:71:5b:65:7b:1c:4e:e8:68:82: d5:26:e7:c0:ae:e9:b4:d3:99:64:21:c9:b3:34:f6:4b:e2:dd: 1c:48:bd:cc:67:89:e7:da:17:1d:e9:da:8f:cf:d6:c1:22:30: 55:00:c5:19:54:df:d3:45:d0:cf:bf:99:d5:98:3e:13:b1:82: d7:70:dd:c9:24:4c:59:69:a0:93:1f:8a:3b:11:d1:6c:a9:e0: 33:50:b8:ae:4f:35:6e:99:1b:16:f8:ff:f4:30:ef:66:da:b7: 9a:ae:27:90:3b:5a:a2:49:8b:d2:f0:ba:26:d5:ce:36:a0:56: 6b:b0:c0:0d:cc:44:0c:70:87:11:b5:c7:b0:9b:00:6b:29:cb: 07:ab:da:bc:f0:83:0d:23:a4:14:4c:ab:80:82:37:a9:fb:a4: 6a:89:03:af:f5:ce:22:97:e6:36:28:92:37:d4:5b:f3:3d:e5: 5a:34:3d:db:1b:a1:d8:74:e3:67:d2:6c:8d:cd:dc:ec:d2:62: 27:b4:9d:c1:b6:1e:1f:fa:d3:7e:84:74:ce:40:d7:bd:79:fa: 58:78:db:d3 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE1REMxMTAvBgNVBAUTKDFENDVFNzI5NDU0QTI0MjQ0NjdCMDNDRkM5OTdEN0VC MTg0QUU3NjYwHhcNMjUxMjAzMDQzNDU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJmYmRmMS01N2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZzKYfYe6HVpoQzmdcVrAFUXORaY/zf1fRygphLxTcahYjI+9mxXrdF4YBaR Uq9h7QW2Stu4PnNM+lNDm4UA19h0nLeesT28mmKm5gBo2a+9cYAUzu7mxi/zWlBK izAD9XyZ2HBM1Q92KJR7pbEC0pboRcNG1rTuK6lZ8ok4fWvRyJO8Y243onri149H RaXkRzlejpW87AldPFdn58ZD4tbnEHk3OLPabtUvNQAkE9mJh/wTxOvPKMqxx84Z wOC9h3cdU4abcM8h/3tzQDsgAm/EWXQ6PdJdGzLbHaD5JBSjS5pM6ZNTeQKh5PNX NGKWmmMLjDqZ984VaZ1QbO366QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOeIEiA9 rnWOMytcYuQd/0St4kpCMB8GA1UdIwQYMBaAFB1F5ylFSiQkRnsDz8mX1+sYSudm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy81ODIzQUY4NkNF RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pDUkdld1BQeVpmWDZ4aEs1 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVWG5LVVZLSkNSR2V3UFB5WmZYNnhoSzUyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjE1REMvNTgyM0FGODZDRUVEMTFFRkJENjU1NTExQzRGOUFFMDIvMTRGN0JDMDBD RUVGMTFFRkFGNkY3NjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30i8AwDQYJKoZIhvcNAQELBQADggEBABsbBRWWSGwd tmTEo75iM6863jswCXuR8NRlpmqY1wuaSARfKLl/6oMfdGAcG3FbZXscTuhogtUm 58Cu6bTTmWQhybM09kvi3RxIvcxniefaFx3p2o/P1sEiMFUAxRlU39NF0M+/mdWY PhOxgtdw3ckkTFlpoJMfijsR0Wyp4DNQuK5PNW6ZGxb4//Qw72bat5quJ5A7WqJJ i9LwuibVzjagVmuwwA3MRAxwhxG1x7CbAGspywer2rzwgw0jpBRMq4CCN6n7pGqJ A6/1ziKX5jYokjfUW/M95Vo0Pdsbodh042fSbI3N3OzSYie0ncG2Hh/6036EdM5A 1715+lh429M= -----END CERTIFICATE-----Generated at Sun Dec 7 09:21:26 2025 by rpki-client