This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/D735EAACF1EF11F0A394FA90446F56BC.roa File: D735EAACF1EF11F0A394FA90446F56BC.roa (raw, json) Hash identifier: 0sltzDlzkFiQqOp6PlurgyBaaxg+7LK65e023RnFZxM= Subject key identifier: EE:FD:08:B2:8C:F1:2D:F8:AC:B2:70:CC:3E:AA:1F:AF:F9:1C:39:D1 Certificate issuer: /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED Certificate serial: 03 Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/D735EAACF1EF11F0A394FA90446F56BC.roa Signing time: Thu 15 Jan 2026 08:54:46 +0000 ROA not before: Thu 15 Jan 2026 08:54:46 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 142205 IP address blocks: 2402:48e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 07:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED Validity Not Before: Jan 15 08:54:46 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6968ab56-8952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e0:e4:d6:2c:b1:79:19:82:43:b7:c2:5b:86: 1d:ee:7e:5b:93:68:91:f1:e3:d1:31:e8:d5:85:3e: 64:e9:86:bb:f3:11:0b:17:54:ad:2d:f0:20:fa:43: f9:0e:4d:a9:23:99:85:c6:99:46:fb:e9:16:41:27: ca:22:29:38:2f:cb:33:46:a4:4d:7d:53:18:18:a0: e8:81:e1:fd:93:3a:d0:63:74:b7:be:be:31:23:ae: 51:b5:ad:7f:93:35:4e:56:d5:d6:c6:02:35:77:c0: 7a:0e:44:7c:05:7a:ec:2d:75:a7:74:a2:d3:6f:0f: eb:8a:dc:46:96:2b:7a:61:f5:78:61:da:77:a1:a6: 8e:48:ce:44:34:c3:73:55:bf:3f:10:d8:9e:97:51: b1:c7:2f:d4:74:9c:e2:b3:72:51:dc:f3:75:03:a3: b8:1d:bc:fe:c4:8d:72:47:16:7b:3d:8b:06:8a:aa: 71:f7:76:16:91:0b:df:1e:7c:8b:c9:e3:6f:24:94: 92:dd:38:1b:01:5e:20:c1:ed:06:7e:ac:cd:18:58: 47:34:eb:53:b2:b5:78:e4:7a:67:c5:03:ef:13:f0: c2:70:d0:2a:4f:ad:4f:18:c2:22:20:dc:3f:bc:2a: 5f:cd:e8:2e:5a:4c:d5:2d:2c:68:5f:42:52:7d:42: bb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FD:08:B2:8C:F1:2D:F8:AC:B2:70:CC:3E:AA:1F:AF:F9:1C:39:D1 X509v3 Authority Key Identifier: keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/D735EAACF1EF11F0A394FA90446F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:48e0::/32 Signature Algorithm: sha256WithRSAEncryption 71:96:aa:1c:b5:1c:cd:dd:2c:31:ce:6a:97:96:98:97:1f:0a: 07:1c:bf:84:3c:03:19:a6:c9:a9:fa:6e:09:25:73:13:07:67: 56:29:61:6e:f6:1c:ac:e0:62:0d:07:c2:f8:86:02:a1:ff:c8: 53:5b:b7:b2:fa:f3:8f:e3:6d:be:c6:ef:11:a0:6a:41:f8:2c: 28:83:f8:54:42:5a:70:14:c1:06:29:bc:35:cc:79:93:36:5f: 2d:26:af:5c:53:ac:02:c1:ac:d5:ed:ab:ec:d5:49:d8:d2:d8: 65:8a:3b:77:fe:17:63:59:03:0b:8f:65:b2:aa:44:b4:e4:29: e8:b5:01:1e:2a:4c:f9:bc:20:f0:89:bc:77:f4:da:c6:03:66: ed:ea:a4:3a:94:59:0d:19:93:f2:03:25:8c:04:eb:73:f3:ec: a4:8e:87:60:87:79:35:3c:bf:54:d3:9a:8f:91:c1:da:2e:f3: 27:4a:3b:da:78:ca:04:10:d0:ec:fa:50:30:bc:33:51:d3:76: dd:2c:d2:e9:00:96:0b:25:3b:b4:d4:0a:5e:89:fc:f8:92:ab: e4:a2:90:ed:ec:84:1a:02:9c:59:63:29:00:ba:bf:6c:d6:1a: 4a:c4:4c:82:e6:d2:52:27:35:62:fd:b9:46:7a:c3:68:fd:23: bc:7d:b4:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFD RENGNTExMC8GA1UEBRMoNDMwOTY0MzlBRDQ1Mzc4REM1RTcxMjIzRjg3MjYxMjdC MTE5NjVFRDAeFw0yNjAxMTUwODU0NDZaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NjhhYjU2LTg5NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDp4OTWLLF5GYJDt8Jbhh3ufluTaJHx49Ex6NWFPmTphrvzEQsXVK0t8CD6Q/kO TakjmYXGmUb76RZBJ8oiKTgvyzNGpE19UxgYoOiB4f2TOtBjdLe+vjEjrlG1rX+T NU5W1dbGAjV3wHoORHwFeuwtdad0otNvD+uK3EaWK3ph9Xhh2nehpo5IzkQ0w3NV vz8Q2J6XUbHHL9R0nOKzclHc83UDo7gdvP7EjXJHFns9iwaKqnH3dhaRC98efIvJ 428klJLdOBsBXiDB7QZ+rM0YWEc061OytXjkemfFA+8T8MJw0CpPrU8YwiIg3D+8 Kl/N6C5aTNUtLGhfQlJ9QrslAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQU7v0Isozx LfissnDMPqofr/kcOdEwHwYDVR0jBBgwFoAUQwlkOa1FN43F5xIj+HJhJ7EZZe0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1LzU5OTY3MTJDRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDL1F3bGtPYTFGTjQzRjV4SWotSEpoSjdFWlpl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXdsa09hMUZONDNGNXhJai1ISmhKN0VaWmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENGNS81OTk2NzEyQ0YxRTMxMUYwQkRFQzcyQjU0MTZGNTZCQy9ENzM1RUFBQ0Yx RUYxMUYwQTM5NEZBOTA0NDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCSOAwDQYJKoZIhvcNAQELBQADggEBAHGWqhy1HM3dLDHO apeWmJcfCgccv4Q8Axmmyan6bgklcxMHZ1YpYW72HKzgYg0HwviGAqH/yFNbt7L6 84/jbb7G7xGgakH4LCiD+FRCWnAUwQYpvDXMeZM2Xy0mr1xTrALBrNXtq+zVSdjS 2GWKO3f+F2NZAwuPZbKqRLTkKei1AR4qTPm8IPCJvHf02sYDZu3qpDqUWQ0Zk/ID JYwE63Pz7KSOh2CHeTU8v1TTmo+Rwdou8ydKO9p4ygQQ0Oz6UDC8M1HTdt0s0ukA lgslO7TUCl6J/PiSq+SikO3shBoCnFljKQC6v2zWGkrETILm0lInNWL9uUZ6w2j9 I7x9tIc= -----END CERTIFICATE-----Generated at Sun Jan 25 04:24:04 2026 by rpki-client