This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ACF3D2085ED011EFA4FAB861C4F9AE02.roa File: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (raw, json) Hash identifier: sv5lUJDA6AnF6C7zo5VgHahgAG0mo9/6mAvGr0va81c= Subject key identifier: 33:2E:B9:75:05:B5:83:00:D9:78:E0:94:02:C4:E1:8D:CC:A8:AE:F8 Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Certificate serial: 8A Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ACF3D2085ED011EFA4FAB861C4F9AE02.roa Signing time: Tue 06 May 2025 22:03:22 +0000 ROA not before: Tue 06 May 2025 22:03:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3758 IP address blocks: 2401:be20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Validity Not Before: May 6 22:03:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a872a-443f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:85:cd:5b:23:e2:b1:b9:f4:aa:78:36:2d: e6:0e:48:9d:05:28:ec:51:47:86:39:b0:21:80:8b: 5e:cb:5d:dd:fb:f1:57:7f:f6:0b:e0:19:24:ea:44: db:a8:f0:5e:1e:db:d0:cc:80:4d:73:6c:9f:75:e1: ab:a8:32:8a:98:df:5c:12:89:d7:65:a7:31:66:b9: af:52:9a:58:6f:6a:b4:bd:29:fb:b0:e7:35:8c:89: 59:70:5a:ea:6c:ec:5a:3d:1a:09:29:fc:c0:09:8f: ab:a1:f6:d9:4d:e5:64:2f:be:00:e6:cb:f3:eb:e0: d9:0e:06:d4:98:7b:92:42:44:66:fd:59:1b:be:07: 51:f8:f6:ff:a6:ea:ca:32:61:0d:40:47:e9:e2:e8: e4:b0:8d:fb:71:c6:0f:6a:3c:8e:d4:88:39:2c:ec: 6e:39:85:75:3e:72:94:7f:0c:87:c5:90:c0:9a:16: 36:db:20:7d:3d:68:6e:61:db:bc:bf:07:9d:98:5b: c6:71:df:b0:ef:56:72:25:2f:0c:03:33:a2:0e:ab: f0:af:69:bf:c6:88:b7:e6:e1:78:7e:fa:03:51:bb: 35:be:16:cb:c7:60:84:c5:12:26:db:58:a6:12:77: 02:8d:14:ad:05:18:52:d1:30:83:82:b9:db:d5:72: 31:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2E:B9:75:05:B5:83:00:D9:78:E0:94:02:C4:E1:8D:CC:A8:AE:F8 X509v3 Authority Key Identifier: keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ACF3D2085ED011EFA4FAB861C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:be20::/32 Signature Algorithm: sha256WithRSAEncryption a5:bf:d3:c9:e0:16:b3:57:50:4c:e1:93:05:ec:ad:f4:cf:2b: 8c:67:53:97:74:d7:e2:19:2b:b3:21:5d:b9:07:f5:f6:c7:93: 7d:b0:c4:12:8d:d9:82:b3:aa:00:d8:a4:58:23:70:32:75:63: 02:60:8c:30:03:90:a3:df:8e:00:cf:4d:b2:0c:72:b7:1c:55: 2c:3b:45:a4:a4:e3:cf:7f:cc:30:eb:75:f8:64:4f:aa:14:bf: eb:2e:c4:f2:8a:3b:52:dd:da:7e:47:42:14:c0:a3:eb:bd:ab: 6c:8d:f1:b3:a7:fe:a8:de:de:45:ae:71:9c:96:b1:79:6f:c3: fc:e9:da:81:2f:dd:1a:dd:36:11:d4:ca:b1:2a:25:a1:49:f1: 65:31:ca:10:91:4e:1b:f1:83:ee:eb:0e:f4:48:ef:4d:40:c3: 7d:2a:2b:5c:e0:58:aa:01:bc:6e:97:7c:7a:51:35:6a:21:b3: 2e:e3:8c:eb:43:ee:de:23:f3:b2:88:67:74:b9:a1:40:58:55: 1d:1e:fc:34:05:74:bb:95:2a:b2:49:c5:db:83:18:a3:45:46: 20:31:87:35:71:82:91:2f:f9:41:df:bf:2f:1d:2f:bf:39:b9: 57:54:a1:74:e1:61:3d:5d:60:b8:36:bd:95:e2:6e:9f:bf:e8: 68:b3:a1:c9 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB ODVDQUFEN0UwHhcNMjUwNTA2MjIwMzIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhODcyYS00NDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseGFzVsj4rG59Kp4Ni3mDkidBSjsUUeGObAhgItey13d+/FXf/YL4Bkk6kTb qPBeHtvQzIBNc2yfdeGrqDKKmN9cEonXZacxZrmvUppYb2q0vSn7sOc1jIlZcFrq bOxaPRoJKfzACY+rofbZTeVkL74A5svz6+DZDgbUmHuSQkRm/VkbvgdR+Pb/purK MmENQEfp4ujksI37ccYPajyO1Ig5LOxuOYV1PnKUfwyHxZDAmhY22yB9PWhuYdu8 vwedmFvGcd+w71ZyJS8MAzOiDqvwr2m/xoi35uF4fvoDUbs1vhbLx2CExRIm21im EncCjRStBRhS0TCDgrnb1XIx8wIDAQABo4ICljCCApIwHQYDVR0OBBYEFDMuuXUF tYMA2XjglALE4Y3MqK74MB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I0MzUvRjVFNjI3MjQ1RUNFMTFFRjg4NTRDQTVFQzRGOUFFMDIvQUNGM0QyMDg1 RUQwMTFFRkE0RkFCODYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAb4gMA0GCSqGSIb3DQEBCwUAA4IBAQClv9PJ4BazV1BM 4ZMF7K30zyuMZ1OXdNfiGSuzIV25B/X2x5N9sMQSjdmCs6oA2KRYI3AydWMCYIww A5Cj344Az02yDHK3HFUsO0WkpOPPf8ww63X4ZE+qFL/rLsTyijtS3dp+R0IUwKPr vatsjfGzp/6o3t5FrnGclrF5b8P86dqBL90a3TYR1MqxKiWhSfFlMcoQkU4b8YPu 6w70SO9NQMN9Kitc4FiqAbxul3x6UTVqIbMu44zrQ+7eI/OyiGd0uaFAWFUdHvw0 BXS7lSqyScXbgxijRUYgMYc1cYKRL/lB378vHS+/OblXVKF04WE9XWC4Nr2V4m6f v+hos6HJ -----END CERTIFICATE-----Generated at Sat Dec 6 21:01:39 2025 by rpki-client