This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/610856EC638A11F08BC2A840C4F9AE02.roa File: 610856EC638A11F08BC2A840C4F9AE02.roa (raw, json) Hash identifier: f8gwOWP+gzIc1sTbccPzYVASHXUhpL4+AZoO9s0gnOY= Subject key identifier: 83:FA:AA:DF:13:D0:43:F8:22:76:98:9A:BA:04:51:66:16:6B:98:35 Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Certificate serial: 0CE3 Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/610856EC638A11F08BC2A840C4F9AE02.roa Signing time: Thu 04 Dec 2025 17:59:01 +0000 ROA not before: Thu 04 Dec 2025 17:59:01 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132680 IP address blocks: 2407:e700:1::/48 maxlen: 48 2407:e700:2::/48 maxlen: 48 2407:e700:3::/48 maxlen: 48 2407:e700:12::/48 maxlen: 48 2407:e700:13::/48 maxlen: 48 2407:e700:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Validity Not Before: Dec 4 17:59:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6931cbe4-6fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:62:01:75:8f:af:5d:c0:e9:17:2d:3e:6d: b8:d3:38:82:3c:de:be:c4:39:97:d2:e5:9f:d1:c4: 4f:48:3d:20:c0:e7:2e:fe:cd:eb:4a:e0:12:12:3f: 9a:89:ec:17:c5:e7:2d:c2:8e:2c:20:75:f5:bd:2f: aa:d1:02:3a:f4:76:fc:85:5c:10:d1:45:66:19:69: 5e:45:53:8f:b4:f0:64:04:e6:55:17:05:1d:c5:4c: 94:bc:ad:f9:d5:4e:94:d2:90:6a:da:39:25:05:44: c5:56:97:51:c5:2a:0c:85:84:40:bb:c5:d7:b4:56: 08:18:3c:8f:bb:e7:30:7b:9f:fa:a3:94:3d:d1:ec: 59:bd:10:1b:cb:a6:46:7d:97:5a:56:e7:dc:2b:7f: 4b:70:62:ba:fe:90:3b:27:b7:e2:8c:0c:33:d5:79: 69:83:7b:af:fd:49:78:b8:cd:61:80:04:4f:04:47: e9:4f:84:ba:d4:64:d2:06:64:98:4e:98:92:1d:16: 68:44:68:6c:1c:c8:f7:0c:d1:88:bf:88:e1:b6:45: 0b:82:cb:db:b9:21:0a:77:a1:1b:3c:03:59:56:c3: 18:10:69:de:6a:3d:ab:f2:0b:0f:e8:b6:ad:5d:af: 40:df:a8:e1:f9:e2:9f:c3:32:76:ae:38:50:ed:d3: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FA:AA:DF:13:D0:43:F8:22:76:98:9A:BA:04:51:66:16:6B:98:35 X509v3 Authority Key Identifier: keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/610856EC638A11F08BC2A840C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2407:e700:1::-2407:e700:3:ffff:ffff:ffff:ffff:ffff 2407:e700:12::/47 2407:e700:fffe::/48 Signature Algorithm: sha256WithRSAEncryption 46:77:86:73:87:32:8f:01:91:3a:d4:5b:f8:fa:9f:4f:f9:6e: cd:a4:a2:b9:e6:8f:57:e6:a7:aa:e1:d9:6d:0f:d6:cd:7b:5d: d8:a0:e9:c4:b6:d7:64:15:8a:05:95:cd:0b:15:d8:1b:e1:8f: 4c:71:51:52:e9:b5:ee:19:63:98:97:87:21:e7:3c:8a:75:9a: f2:a3:68:18:1b:a6:a8:3d:ae:d5:45:62:12:22:8f:e7:51:42: 83:64:1e:62:59:20:33:a0:9a:e7:d9:e7:bd:c6:9f:8c:12:dc: 3c:35:f7:52:fa:31:aa:b9:23:ff:31:1a:bd:6a:b8:8b:7d:32: 76:b5:0e:08:ea:25:e3:e6:fb:f3:23:dd:9e:34:f7:8d:9b:57: 90:e5:09:07:36:77:d2:ab:98:68:94:29:eb:7f:97:67:1f:8a: 47:c9:a4:59:9b:ff:1d:f4:31:5b:4e:31:03:67:be:10:26:cc: c5:69:0e:cf:2c:87:35:8e:df:85:f8:c6:9b:08:24:29:45:34: e8:a4:2f:f9:e5:0d:42:cd:66:e7:d1:5d:a8:35:54:16:7b:ec: bd:f1:2c:57:c4:43:1a:4a:b7:30:7d:be:64:45:48:46:c1:16: ca:05:88:95:53:81:60:01:33:e7:16:1d:23:1b:71:bc:2a:84: 1c:54:05:a9 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKEI0QjEwRTZDQjM4RDUzNjVEMDU0RThEQkU5MEYzNEYy QzM4OEIxMEMwHhcNMjUxMjA0MTc1OTAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTMxY2JlNC02ZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAtiAXWPr13A6RctPm240ziCPN6+xDmX0uWf0cRPSD0gwOcu/s3rSuASEj+a iewXxectwo4sIHX1vS+q0QI69Hb8hVwQ0UVmGWleRVOPtPBkBOZVFwUdxUyUvK35 1U6U0pBq2jklBUTFVpdRxSoMhYRAu8XXtFYIGDyPu+cwe5/6o5Q90exZvRAby6ZG fZdaVufcK39LcGK6/pA7J7fijAwz1Xlpg3uv/Ul4uM1hgARPBEfpT4S61GTSBmSY TpiSHRZoRGhsHMj3DNGIv4jhtkULgsvbuSEKd6EbPANZVsMYEGneaj2r8gsP6Lat Xa9A36jh+eKfwzJ2rjhQ7dMaWQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFIP6qt8T 0EP4InaYmroEUWYWa5g1MB8GA1UdIwQYMBaAFLSxDmyzjVNl0FTo2+kPNPLDiLEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8yMDkxREM4RTA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUyWFFWT2piNlE4MDhzT0lz UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMRU9iTE9OVTJYUVZPamI2UTgwOHNPSXNRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UzQTMvMjA5MURDOEUwNTAxMTFFQUJEOUIyMDJDQzRGOUFFMDIvNjEwODU2RUM2 MzhBMTFGMDhCQzJBODQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgACMCYwEgMHACQH5wAAAQMHAiQH5wAAAAMHASQH5wAAEgMHACQH5wD/ /jANBgkqhkiG9w0BAQsFAAOCAQEARneGc4cyjwGROtRb+PqfT/luzaSiueaPV+an quHZbQ/WzXtd2KDpxLbXZBWKBZXNCxXYG+GPTHFRUum17hljmJeHIec8inWa8qNo GBumqD2u1UViEiKP51FCg2QeYlkgM6Ca59nnvcafjBLcPDX3Uvoxqrkj/zEavWq4 i30ydrUOCOol4+b78yPdnjT3jZtXkOUJBzZ30quYaJQp63+XZx+KR8mkWZv/HfQx W04xA2e+ECbMxWkOzyyHNY7fhfjGmwgkKUU06KQv+eUNQs1m59FdqDVUFnvsvfEs V8RDGkq3MH2+ZEVIRsEWygWIlVOBYAEz5xYdIxtxvCqEHFQFqQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:13 2025 by rpki-client