This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/6D79D956EF8E11F0A4EF9B52626F56BC.roa File: 6D79D956EF8E11F0A4EF9B52626F56BC.roa (raw, json) Hash identifier: Hzt1eZQcZftEf9k6UknT6CUEtQOuHyRI5QFd27G9nms= Subject key identifier: CB:6C:AE:F5:4D:79:A5:D5:ED:73:B0:AB:2A:62:28:50:97:69:61:40 Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: E4 Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/6D79D956EF8E11F0A4EF9B52626F56BC.roa Signing time: Mon 12 Jan 2026 08:12:25 +0000 ROA not before: Mon 12 Jan 2026 08:12:25 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 53167 IP address blocks: 2401:b3a0:1:100::/56 maxlen: 56 2401:b3a0:1:200::/56 maxlen: 56 2401:b3a0:1:300::/56 maxlen: 56 2401:b3a0:1:400::/56 maxlen: 56 2401:b3a0:1:500::/56 maxlen: 56 2401:b3a0:1:600::/56 maxlen: 56 2401:b3a0:1:700::/56 maxlen: 56 2401:b3a0:1:800::/56 maxlen: 56 2401:b3a0:1:900::/56 maxlen: 56 2401:b3a0:1:a00::/56 maxlen: 56 2401:b3a0:1:b00::/56 maxlen: 56 2401:b3a0:1:c00::/56 maxlen: 56 2401:b3a0:1:d00::/56 maxlen: 56 2401:b3a0:1:e00::/56 maxlen: 56 2401:b3a0:1:f00::/56 maxlen: 56 2401:b3a0:1:1000::/56 maxlen: 56 2401:b3a0:1:1200::/56 maxlen: 56 2401:b3a0:1:1300::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Jan 12 08:12:25 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6964ace9-7ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e8:ab:bd:66:c1:2e:4b:da:c7:ca:a4:c5:f4: 75:78:89:c3:0b:28:bf:39:3f:ec:3b:76:90:0b:7b: 12:77:67:5d:0f:d6:5f:03:8b:4c:ca:6f:cb:ef:82: 43:d4:d9:53:96:2a:37:28:0e:78:20:86:9e:53:64: a7:10:f6:36:bf:3b:57:68:2d:8d:e5:44:00:c7:f7: 91:9f:67:80:d9:33:e4:ee:e6:1e:66:2f:79:09:58: ef:f9:e3:47:83:dd:cd:6a:ca:a9:0f:7c:4e:40:23: 1a:f8:ae:53:53:51:cc:8e:a0:13:14:1e:39:9a:bd: 45:56:b6:e7:2b:5d:12:52:68:15:41:6c:21:b7:ba: c7:90:9b:54:37:12:77:88:6f:13:14:5c:98:33:a8: f7:b4:23:29:3c:56:d9:56:7f:d5:a5:68:2a:1a:2c: 01:39:54:ed:40:b6:64:ee:55:97:3b:a0:cd:cb:13: 85:cc:57:54:10:9a:91:b2:37:15:79:53:21:0f:d0: b5:a9:8b:0d:72:2d:13:be:bc:86:97:b1:0b:40:76: 95:27:c2:dd:be:cd:32:69:d9:fc:b4:ee:8e:60:3e: 83:91:c5:75:70:cc:eb:91:cf:b0:a6:45:66:4b:64: f7:4e:70:ec:4f:02:c1:ae:60:09:bf:70:50:dd:60: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6C:AE:F5:4D:79:A5:D5:ED:73:B0:AB:2A:62:28:50:97:69:61:40 X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/6D79D956EF8E11F0A4EF9B52626F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b3a0:1:100::-2401:b3a0:1:10ff:ffff:ffff:ffff:ffff 2401:b3a0:1:1200::/55 Signature Algorithm: sha256WithRSAEncryption 1c:27:09:52:44:c4:75:49:e3:31:e6:c7:7f:d6:91:c7:d7:e8: 52:f3:9e:4d:28:ae:fe:1f:6c:84:1d:de:1f:5f:3f:c5:f8:60: 0c:6f:d8:8e:d4:88:3c:93:65:ec:fb:94:5a:49:77:82:30:5d: bf:45:5e:35:4a:23:d6:c4:5c:e8:a9:8d:b1:19:60:3c:5f:8b: 61:ec:bd:ce:b4:64:84:b3:2e:7b:8d:fd:61:21:b2:57:a6:46: 2f:2f:99:f6:46:bb:08:f7:77:40:62:73:12:f4:78:3e:73:8b: 46:ff:09:c8:94:38:41:e8:af:7e:32:d9:ec:52:fa:a0:65:c5: bc:72:cb:95:a7:ea:91:3f:01:39:15:73:6d:02:c5:4a:2e:7e: 40:b0:25:b0:cb:62:48:bf:0c:b9:97:9e:ab:70:a0:52:6a:7a: 72:3a:2a:b3:b2:cc:a4:4a:5e:b0:02:6a:af:23:02:ab:89:53: d5:96:44:41:13:91:42:94:3f:7f:07:32:57:fe:44:c5:bc:b6: fa:a1:62:67:ae:4e:1f:df:5e:45:3f:d9:f8:40:5c:bd:3b:c3: 29:34:29:b1:76:0b:3c:59:03:c9:9f:e0:ec:30:4b:f7:aa:4b: 4e:56:8f:e3:19:c9:0c:27:1c:c8:14:a7:d4:8c:fc:95:36:5b: 5a:24:f1:ef -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjYwMTEyMDgxMjI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY0YWNlOS03YWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8OirvWbBLkvax8qkxfR1eInDCyi/OT/sO3aQC3sSd2ddD9ZfA4tMym/L74JD 1NlTlio3KA54IIaeU2SnEPY2vztXaC2N5UQAx/eRn2eA2TPk7uYeZi95CVjv+eNH g93NasqpD3xOQCMa+K5TU1HMjqATFB45mr1FVrbnK10SUmgVQWwht7rHkJtUNxJ3 iG8TFFyYM6j3tCMpPFbZVn/VpWgqGiwBOVTtQLZk7lWXO6DNyxOFzFdUEJqRsjcV eVMhD9C1qYsNci0TvryGl7ELQHaVJ8Ldvs0yadn8tO6OYD6DkcV1cMzrkc+wpkVm S2T3TnDsTwLBrmAJv3BQ3WDiCQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFMtsrvVN eaXV7XOwqypiKFCXaWFAMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEwMjUvOTU2RjY2MkM5RDg0MTFFRjgxN0UxNDIwQzRGOUFFMDIvNkQ3OUQ5NTZF RjhFMTFGMEE0RUY5QjUyNjI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgACMCAwFAMIACQBs6AAAQEDCAAkAbOgAAEQAwgBJAGzoAABEjANBgkq hkiG9w0BAQsFAAOCAQEAHCcJUkTEdUnjMebHf9aRx9foUvOeTSiu/h9shB3eH18/ xfhgDG/YjtSIPJNl7PuUWkl3gjBdv0VeNUoj1sRc6KmNsRlgPF+LYey9zrRkhLMu e439YSGyV6ZGLy+Z9ka7CPd3QGJzEvR4PnOLRv8JyJQ4QeivfjLZ7FL6oGXFvHLL lafqkT8BORVzbQLFSi5+QLAlsMtiSL8MuZeeq3CgUmp6cjoqs7LMpEpesAJqryMC q4lT1ZZEQRORQpQ/fwcyV/5Exby2+qFiZ65OH99eRT/Z+EBcvTvDKTQpsXYLPFkD yZ/g7DBL96pLTlaP4xnJDCccyBSn1Iz8lTZbWiTx7w== -----END CERTIFICATE-----Generated at Mon Jan 26 03:28:07 2026 by rpki-client