This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/C37CCA126FE611EA9D9F5E67C4F9AE02.roa File: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (raw, json) Hash identifier: 7vUaCwhIHYmymYhzXLTd2mT71lJe+Jcy16L9hwRgmBQ= Subject key identifier: B2:BA:41:F0:0F:D2:67:F6:2D:AA:69:FA:53:9D:18:4F:D3:F3:D8:A1 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 128C Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/C37CCA126FE611EA9D9F5E67C4F9AE02.roa Signing time: Thu 04 Dec 2025 16:46:55 +0000 ROA not before: Thu 04 Dec 2025 16:46:55 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 64087 IP address blocks: 2403:a280:1000::/48 maxlen: 48 2403:a280:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4748 (0x128c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Dec 4 16:46:55 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6931bafe-6fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:d9:25:dd:96:63:8f:b3:f9:35:d0:05:cc: 7f:84:f7:65:08:80:26:d7:c6:92:e0:3e:95:89:0e: 4e:5c:fd:b6:f4:8a:e9:a6:bd:2c:91:23:60:19:89: 83:75:70:0f:d3:98:09:5c:e6:ad:cf:96:7a:21:d4: 8b:cc:c1:4d:88:7d:51:22:ec:11:44:b4:0d:89:c1: 02:7f:32:41:2d:5d:4c:a8:fb:e9:6b:9a:00:68:86: 0f:30:d2:53:95:b7:ca:2a:62:9c:0b:77:d6:2c:3c: 75:1d:b7:35:cf:fb:3e:22:37:ac:bb:02:9d:e8:61: d4:16:93:24:46:b8:c0:47:57:ab:a8:c2:92:9a:0b: 11:e6:90:57:af:da:db:92:af:2c:1a:31:90:20:8f: e9:24:df:12:c3:1e:19:65:bc:07:22:9d:b9:01:7d: 3b:d8:29:da:0f:d5:31:11:4a:e9:1c:7f:cc:d4:c5: 2d:98:78:31:5c:fa:3a:a4:39:15:2b:ee:54:03:ee: e9:1d:7c:de:ef:59:d8:f5:33:ab:c5:67:c2:9f:54: d4:3e:5d:c1:89:c1:65:5e:87:18:c3:e2:8e:15:d2: e5:ae:bb:a7:c8:64:b7:ac:02:bf:07:36:8d:4d:23: 3d:b2:15:df:3f:8a:1e:30:65:df:35:32:72:cb:06: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BA:41:F0:0F:D2:67:F6:2D:AA:69:FA:53:9D:18:4F:D3:F3:D8:A1 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/C37CCA126FE611EA9D9F5E67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:a280:1000::/48 2403:a280:3000::/48 Signature Algorithm: sha256WithRSAEncryption 43:86:e9:a5:2e:81:c2:f6:24:08:8d:d1:4d:7b:9b:e6:dc:4a: 46:3a:d2:ad:4a:a9:db:0f:c2:4a:c2:6b:18:63:94:89:c2:c7: 8b:c0:14:82:c0:fe:6b:8b:42:17:07:05:cb:ed:bf:21:58:3b: 3e:10:e8:bc:e1:9d:6e:c4:06:45:63:04:f1:a6:bb:3f:57:94: 86:10:64:5f:99:ae:d1:41:44:f9:19:09:b3:c0:23:ef:34:60: 79:c9:e7:f4:96:c7:0c:59:31:e8:16:e1:73:42:5e:fb:11:58: d8:6b:b3:10:92:74:b4:fc:65:af:ca:4c:8b:56:c1:d7:05:61: cb:34:19:f0:98:57:b2:7a:28:c9:b8:9b:39:08:b8:cd:89:0c: e0:51:2c:7b:b4:5d:9e:58:e1:8e:61:5d:88:a7:bc:08:36:9f: 98:6d:e5:ce:e4:f1:73:f3:60:d9:bc:e5:cc:bc:94:66:06:bd: 93:58:ef:60:09:0a:76:88:c1:a1:e9:cc:0a:e4:0e:48:5a:fa: 87:c2:05:84:8b:7a:55:8b:a9:aa:ce:ad:26:8a:95:37:8c:3e: 10:3c:44:15:12:fb:c7:b3:a8:30:a4:36:ed:94:19:d1:f5:06: 54:2b:76:50:9d:3c:bc:a8:3d:30:c0:97:02:22:e7:f2:2f:c5: 1a:9d:0e:a0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICEowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUxMjA0MTY0NjU1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxYmFmZS02ZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ/ZJd2WY4+z+TXQBcx/hPdlCIAm18aS4D6ViQ5OXP229Irppr0skSNgGYmD dXAP05gJXOatz5Z6IdSLzMFNiH1RIuwRRLQNicECfzJBLV1MqPvpa5oAaIYPMNJT lbfKKmKcC3fWLDx1Hbc1z/s+IjesuwKd6GHUFpMkRrjAR1erqMKSmgsR5pBXr9rb kq8sGjGQII/pJN8Swx4ZZbwHIp25AX072CnaD9UxEUrpHH/M1MUtmHgxXPo6pDkV K+5UA+7pHXze71nY9TOrxWfCn1TUPl3BicFlXocYw+KOFdLlrrunyGS3rAK/BzaN TSM9shXfP4oeMGXfNTJyywacwQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLK6QfAP 0mf2Lapp+lOdGE/T89ihMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZFNzMvRjQxRDQwRjJFQTA5MTFFOEFEQTJFRDBDQzRGOUFFMDIvQzM3Q0NBMTI2 RkU2MTFFQTlEOUY1RTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkA6KAEAADBwAkA6KAMAAwDQYJKoZIhvcNAQELBQADggEB AEOG6aUugcL2JAiN0U17m+bcSkY60q1KqdsPwkrCaxhjlInCx4vAFILA/muLQhcH BcvtvyFYOz4Q6LzhnW7EBkVjBPGmuz9XlIYQZF+ZrtFBRPkZCbPAI+80YHnJ5/SW xwxZMegW4XNCXvsRWNhrsxCSdLT8Za/KTItWwdcFYcs0GfCYV7J6KMm4mzkIuM2J DOBRLHu0XZ5Y4Y5hXYinvAg2n5ht5c7k8XPzYNm85cy8lGYGvZNY72AJCnaIwaHp zArkDkha+ofCBYSLelWLqarOrSaKlTeMPhA8RBUS+8ezqDCkNu2UGdH1BlQrdlCd PLyoPTDAlwIi5/IvxRqdDqA= -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:47 2025 by rpki-client