This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/DBBAF162C19811F0A42BC412C4F9AE02.roa File: DBBAF162C19811F0A42BC412C4F9AE02.roa (raw, json) Hash identifier: o9G1A0FZfefSpw7tgiUoCNim5Wrwha6io4RXP/8s+W8= Subject key identifier: 82:D0:F4:D8:40:46:83:3E:BD:8C:A1:C9:D5:B5:59:FD:51:D9:23:7F Certificate issuer: /CN=A91C7E5B/serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Certificate serial: 58 Authority key identifier: E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/DBBAF162C19811F0A42BC412C4F9AE02.roa Signing time: Fri 14 Nov 2025 20:31:12 +0000 ROA not before: Fri 14 Nov 2025 20:31:12 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 153928 IP address blocks: 2001:df5:a140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=E07E57689C27A993611CBABA97B194D31796CF6F Validity Not Before: Nov 14 20:31:12 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69179190-5299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:83:d3:33:b6:b5:a3:2b:d5:0b:7a:b1:67: 2d:53:18:1d:56:c5:78:04:47:38:de:3e:b3:92:51: 47:94:43:6d:8b:cf:bb:af:1d:be:54:22:10:8e:72: ed:5a:16:3f:10:23:5c:6a:a6:3b:5e:d5:71:2e:f3: d1:67:a6:4f:fb:82:75:df:86:73:52:47:55:c1:fe: a5:9c:00:a9:10:fd:71:99:3a:23:e8:61:e1:2e:bd: 07:17:91:63:88:40:87:7e:d9:e7:dc:39:79:99:c1: cc:c8:54:f1:a9:b0:09:23:5d:84:17:03:fe:6c:02: af:ba:3c:42:ff:21:33:11:5a:10:32:13:22:6c:6e: 5d:1d:09:33:3d:b9:98:61:b0:1e:c3:96:81:bf:79: 81:3f:83:94:d0:22:83:08:f5:70:4c:18:f0:ed:47: 4d:50:1d:e5:06:26:83:51:98:d8:ab:de:c9:ef:1d: dd:2d:33:8e:60:d3:62:03:9b:77:9f:12:dd:c3:25: bf:9e:1a:d9:25:48:64:43:5a:db:95:38:1d:e1:66: 00:6f:00:46:2b:d1:75:c6:6c:c4:2a:59:7d:b8:f5: f9:16:43:d1:f4:71:49:01:e4:bb:66:60:10:70:02: 7d:33:30:99:f5:f5:3e:2d:b2:d7:05:f5:e7:06:48: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D0:F4:D8:40:46:83:3E:BD:8C:A1:C9:D5:B5:59:FD:51:D9:23:7F X509v3 Authority Key Identifier: keyid:E0:7E:57:68:9C:27:A9:93:61:1C:BA:BA:97:B1:94:D3:17:96:CF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/4H5XaJwnqZNhHLq6l7GU0xeWz28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4H5XaJwnqZNhHLq6l7GU0xeWz28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/E14F72243C6E11F09D76A24DC4F9AE02/DBBAF162C19811F0A42BC412C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:a140::/48 Signature Algorithm: sha256WithRSAEncryption 12:61:f2:fc:b1:16:08:a5:01:f0:01:45:7d:09:e2:ef:6b:b0: 3f:7c:1c:e7:ba:32:9c:70:18:66:a2:7d:dc:5a:64:5b:3d:50: a7:06:e6:92:76:08:1d:0b:48:3e:b3:7e:02:55:fd:c1:85:8c: 54:e7:ed:2b:10:6f:a0:6b:43:1e:bb:bf:2f:b3:bd:71:47:44: 2c:f4:7e:6c:fb:1e:65:ce:dd:d3:99:6b:ea:b1:37:c5:89:6f: 63:ef:6b:44:28:d7:4c:08:09:9a:8a:d3:88:e7:19:89:d6:20: 85:01:68:56:3e:76:d8:77:7a:09:66:02:e9:ca:a3:be:d4:ef: 1c:3e:b7:af:e6:0a:f3:f9:7a:b7:a2:68:42:42:50:f5:67:b8: c4:eb:b0:84:d3:3b:d9:63:c0:b2:34:ee:07:99:d2:ec:c1:90: c5:6d:ab:fe:26:89:81:b5:78:8b:ea:df:05:4e:9e:b5:f7:8e: 4b:2a:44:77:22:db:8f:5a:49:02:d5:19:d2:46:d5:25:9b:51: 4c:fa:00:78:d6:25:30:a8:4d:5f:21:3c:13:4a:e4:fd:e8:3d: 23:5e:9e:f9:0e:c4:4d:3e:eb:d2:55:7a:2a:84:f5:f0:2e:a8: ee:7c:61:a4:f5:df:9e:fc:40:9f:34:ed:e7:17:b5:fe:f2:26: 27:2b:10:de -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0U1QjExMC8GA1UEBRMoRTA3RTU3Njg5QzI3QTk5MzYxMUNCQUJBOTdCMTk0RDMx Nzk2Q0Y2RjAeFw0yNTExMTQyMDMxMTJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MTc5MTkwLTUyOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA8YPTM7a1oyvVC3qxZy1TGB1WxXgERzjePrOSUUeUQ22Lz7uvHb5UIhCOcu1a Fj8QI1xqpjte1XEu89Fnpk/7gnXfhnNSR1XB/qWcAKkQ/XGZOiPoYeEuvQcXkWOI QId+2efcOXmZwczIVPGpsAkjXYQXA/5sAq+6PEL/ITMRWhAyEyJsbl0dCTM9uZhh sB7DloG/eYE/g5TQIoMI9XBMGPDtR01QHeUGJoNRmNir3snvHd0tM45g02IDm3ef Et3DJb+eGtklSGRDWtuVOB3hZgBvAEYr0XXGbMQqWX249fkWQ9H0cUkB5LtmYBBw An0zMJn19T4tstcF9ecGSCNfAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUgtD02EBG gz69jKHJ1bVZ/VHZI38wHwYDVR0jBBgwFoAU4H5XaJwnqZNhHLq6l7GU0xeWz28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RTVCL0UxNEY3MjI0M0M2 RTExRjA5RDc2QTI0REM0RjlBRTAyLzRINVhhSnducVpOaEhMcTZsN0dVMHhlV3oy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEg1WGFKd25xWk5oSExxNmw3R1UweGVXejI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9FMTRGNzIyNDNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9EQkJBRjE2MkMx OTgxMUYwQTQyQkM0MTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfWhQDANBgkqhkiG9w0BAQsFAAOCAQEAEmHy/LEWCKUB 8AFFfQni72uwP3wc57oynHAYZqJ93FpkWz1QpwbmknYIHQtIPrN+AlX9wYWMVOft KxBvoGtDHru/L7O9cUdELPR+bPseZc7d05lr6rE3xYlvY+9rRCjXTAgJmorTiOcZ idYghQFoVj522Hd6CWYC6cqjvtTvHD63r+YK8/l6t6JoQkJQ9We4xOuwhNM72WPA sjTuB5nS7MGQxW2r/iaJgbV4i+rfBU6etfeOSypEdyLbj1pJAtUZ0kbVJZtRTPoA eNYlMKhNXyE8E0rk/eg9I16e+Q7ETT7r0lV6KoT18C6o7nxhpPXfnvxAnzTt5xe1 /vImJysQ3g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:14:33 2025 by rpki-client