This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/4D189DD4728311EFA9CECE43C4F9AE02.roa File: 4D189DD4728311EFA9CECE43C4F9AE02.roa (raw, json) Hash identifier: fmxQ79vcPv/qzJxOktJ3HDEKQfZKVUXt9uRKYI6ZQlA= Subject key identifier: A0:D0:27:A1:ED:F1:FB:87:5C:12:4F:AF:C4:AA:6B:02:A1:35:F7:5B Certificate issuer: /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Certificate serial: 011D Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/4D189DD4728311EFA9CECE43C4F9AE02.roa Signing time: Tue 13 Jan 2026 04:23:17 +0000 ROA not before: Tue 13 Jan 2026 04:23:16 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152317 IP address blocks: 2401:b760::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0 Validity Not Before: Jan 13 04:23:16 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6965c8b4-0362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:62:31:39:c9:c6:79:6d:7a:88:d9:b3:5d: 5b:92:dd:80:9b:a8:15:f0:d8:80:79:47:83:d9:6a: f4:d9:8b:28:5d:8c:f0:8a:35:9e:f7:f8:22:a9:e2: 3e:e7:fe:11:68:3b:f7:55:1d:cf:fd:bd:97:88:56: c2:f1:b5:de:a1:43:b7:49:00:e3:0d:75:a2:79:50: 87:23:bf:b1:5f:a7:b5:7e:7f:8e:46:6b:e6:75:67: 8d:c4:5e:1a:ee:39:72:6c:fd:b5:4d:d7:3a:84:9c: b0:15:7e:05:65:e3:a7:43:f6:d5:f1:b9:1f:31:b4: d9:67:31:25:21:f7:c1:9b:87:2a:1f:9b:16:ed:3e: 14:fd:cc:5f:ac:12:fe:e4:e2:d0:2a:66:b1:13:b7: a5:4b:c0:91:d4:e3:33:b5:94:34:cb:2f:47:d1:d2: eb:7b:8a:0b:1c:76:73:8d:c4:3c:07:66:62:c2:44: f9:34:a1:ea:4c:03:0d:d3:54:18:01:f6:25:e1:f5: 51:c1:47:4c:d1:9c:4e:85:53:f3:09:1f:a2:1e:dc: 34:e8:47:4e:c0:9e:a6:99:20:29:4c:23:58:0a:7f: 82:3f:8d:be:0f:73:2b:0c:d7:91:f4:1a:45:0f:50: 43:f1:95:34:a2:b5:20:c4:c3:1e:03:8c:b7:90:a1: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D0:27:A1:ED:F1:FB:87:5C:12:4F:AF:C4:AA:6B:02:A1:35:F7:5B X509v3 Authority Key Identifier: keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/4D189DD4728311EFA9CECE43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:b760::/32 Signature Algorithm: sha256WithRSAEncryption 32:2a:f0:42:d7:6e:9e:a7:49:6a:4b:1c:4c:40:5c:50:02:f6: f3:bd:3c:b6:fa:61:07:3d:64:18:be:9e:83:54:b5:6d:7d:6d: 1e:33:8a:ec:a2:7b:5c:b5:10:8b:19:f2:28:ce:dc:64:c5:54: 80:8d:1b:ca:12:28:85:f3:e3:3f:f0:d5:66:52:f6:2f:24:2c: 68:b3:fd:0d:38:c3:69:a1:a3:af:e6:e0:ee:e0:a0:40:14:77: 5b:2a:77:f7:66:80:e7:f8:3b:32:fd:62:d8:27:a0:ca:f7:35: f7:d5:23:5d:65:ca:88:3b:6a:b8:76:66:7c:fc:52:c7:6c:4e: 5e:4c:50:f4:cb:be:3b:62:ef:17:c9:28:d1:35:f1:07:89:ce: 68:4e:f8:4f:a3:11:90:92:24:5a:27:c7:da:2d:85:e9:a7:c8: 79:82:1d:68:23:57:2d:f5:30:02:bb:ad:19:d5:3b:f4:e5:3d: 59:45:d1:db:8e:ab:21:10:e5:f6:de:13:a2:40:cd:68:5f:db: ec:1c:75:4b:68:1b:d6:19:2c:54:a8:68:0d:2c:c7:42:ac:11: 02:23:29:12:37:f7:25:03:c9:7d:fd:9b:d3:2f:db:c3:ce:e9: 6a:45:04:36:c0:59:27:9c:c0:db:29:bd:64:6b:bf:7c:e0:d9: eb:ac:aa:5c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx Q0VFODUxMTAvBgNVBAUTKEJCRTgwM0ZCNzU3RTBDNDdEMzIwNDU0NTIxODdCNzRB RTI3MTExRjAwHhcNMjYwMTEzMDQyMzE2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTY1YzhiNC0wMzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05ZiMTnJxnlteojZs11bkt2Am6gV8NiAeUeD2Wr02YsoXYzwijWe9/giqeI+ 5/4RaDv3VR3P/b2XiFbC8bXeoUO3SQDjDXWieVCHI7+xX6e1fn+ORmvmdWeNxF4a 7jlybP21Tdc6hJywFX4FZeOnQ/bV8bkfMbTZZzElIffBm4cqH5sW7T4U/cxfrBL+ 5OLQKmaxE7elS8CR1OMztZQ0yy9H0dLre4oLHHZzjcQ8B2ZiwkT5NKHqTAMN01QY AfYl4fVRwUdM0ZxOhVPzCR+iHtw06EdOwJ6mmSApTCNYCn+CP42+D3MrDNeR9BpF D1BD8ZU0orUgxMMeA4y3kKH9FwIDAQABo4ICljCCApIwHQYDVR0OBBYEFKDQJ6Ht 8fuHXBJPr8SqawKhNfdbMB8GA1UdIwQYMBaAFLvoA/t1fgxH0yBFRSGHt0ricRHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS8wNUE3Q0U2ODQ1 QUUxMUVGQjQzNUVCNkZDNEY5QUUwMi91LWdELTNWLURFZlRJRVZGSVllM1N1SnhF ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtZ0QtM1YtREVmVElFVkZJWWUzU3VKeEVmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VFODUvMDVBN0NFNjg0NUFFMTFFRkI0MzVFQjZGQzRGOUFFMDIvNEQxODlERDQ3 MjgzMTFFRkE5Q0VDRTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAbdgMA0GCSqGSIb3DQEBCwUAA4IBAQAyKvBC126ep0lq SxxMQFxQAvbzvTy2+mEHPWQYvp6DVLVtfW0eM4rsontctRCLGfIoztxkxVSAjRvK EiiF8+M/8NVmUvYvJCxos/0NOMNpoaOv5uDu4KBAFHdbKnf3ZoDn+Dsy/WLYJ6DK 9zX31SNdZcqIO2q4dmZ8/FLHbE5eTFD0y747Yu8XySjRNfEHic5oTvhPoxGQkiRa J8faLYXpp8h5gh1oI1ct9TACu60Z1Tv05T1ZRdHbjqshEOX23hOiQM1oX9vsHHVL aBvWGSxUqGgNLMdCrBECIykSN/clA8l9/ZvTL9vDzulqRQQ2wFknnMDbKb1ka798 4NnrrKpc -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:02 2026 by rpki-client