This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/02389B7670E811EFA8DBE571C4F9AE02.roa File: 02389B7670E811EFA8DBE571C4F9AE02.roa (raw, json) Hash identifier: 0H3W1Uwt/MgB2UY+gUEFEyZDy5G8I1L4IHKY057VbGo= Subject key identifier: 85:81:4F:B6:F4:5A:61:97:B6:22:BF:27:A4:F8:F8:F8:55:26:3F:01 Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: E6 Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/02389B7670E811EFA8DBE571C4F9AE02.roa Signing time: Mon 01 Dec 2025 04:02:01 +0000 ROA not before: Mon 01 Dec 2025 04:02:01 +0000 ROA not after: Mon 30 Mar 2026 00:00:00 +0000 asID: 133453 IP address blocks: 2001:df4:4340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Dec 1 04:02:01 2025 GMT Not After : Mar 30 00:00:00 2026 GMT Subject: CN=692d1338-22b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:05:b5:6e:47:1b:db:91:8c:9a:0e:b3:12: df:a7:50:cc:22:c4:cd:43:3d:38:3a:52:2c:2d:8a: 44:06:27:3d:33:d5:ef:f2:4f:31:dd:66:ec:c8:49: 67:5e:42:51:f8:85:70:09:46:79:19:f6:e0:e9:0b: 2a:b9:42:ea:ee:3e:4d:b2:7b:e5:eb:41:e7:e3:af: e2:8a:22:fc:0d:e6:39:e0:1f:a8:16:5e:f4:e9:df: 7a:53:49:0c:b3:7f:77:eb:a0:c5:92:81:e9:fd:b6: bb:f1:3e:26:2e:38:17:31:43:3f:8f:e9:a2:fb:f5: 52:9d:6a:cb:95:a6:84:bf:23:cc:5d:bc:e0:d3:51: c0:69:7f:5d:ad:8d:33:b1:89:a7:88:16:0b:22:47: 00:d0:e1:65:de:77:fa:3f:31:8f:e5:81:f7:97:73: ff:a3:dc:de:36:c6:db:9e:86:dc:db:16:3c:bd:32: 53:df:22:31:03:dc:25:b1:64:05:2e:c8:df:79:9d: 78:5d:3e:c8:3e:b1:5b:ed:07:ca:ba:37:60:bf:e8: 57:10:65:61:4b:84:6e:04:86:a1:b2:1c:f0:9b:74: 62:0f:9f:23:20:b7:88:bd:26:4c:c8:62:0d:4f:49: 57:9f:57:47:46:d2:5c:af:e8:a8:e8:0c:3c:89:4b: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:81:4F:B6:F4:5A:61:97:B6:22:BF:27:A4:F8:F8:F8:55:26:3F:01 X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/02389B7670E811EFA8DBE571C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:4340::/48 Signature Algorithm: sha256WithRSAEncryption 2d:ec:f9:76:0d:dd:71:1b:67:d7:4b:2c:54:71:ba:3f:f6:df: d8:1f:79:8f:6c:64:fa:75:58:b9:99:b1:26:19:6f:4e:7f:d6: 5e:53:3e:1f:e2:e3:8d:45:0d:0a:fe:3f:94:93:43:41:88:f7: f7:4c:97:73:e5:c3:bd:5c:90:f5:06:02:a5:02:14:14:f8:bd: 5e:6f:03:ad:25:9e:27:0a:30:0c:78:ee:a6:15:e3:19:ff:62: 85:e4:43:46:8d:a4:bf:ef:cb:9d:00:a0:d4:83:a4:fe:af:d3: 79:03:1c:45:d0:ac:2f:5b:d4:9e:05:bb:b7:81:80:07:16:ff: 1d:b4:6a:6b:9d:78:2f:08:1f:26:ad:1b:00:10:ca:b3:6c:de: db:e1:a2:99:dd:e5:05:ef:e8:34:9f:de:b2:15:36:c6:72:49: da:69:45:8c:23:e7:81:a2:1e:16:ae:08:7a:9d:09:6a:5e:b0: 9d:e2:45:3c:8f:ec:87:17:c5:2c:e8:84:4c:39:48:47:d6:97: b3:1c:b6:1b:f1:5e:83:f2:2b:1c:9a:a9:be:74:95:21:e9:17: 21:6b:40:f5:cb:26:1b:88:78:a2:a1:0a:f6:2c:74:ef:a7:36: 25:30:20:1b:8e:31:b5:c8:fd:81:aa:94:c4:75:16:f7:c3:56: 8d:de:c7:c5 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjUxMjAxMDQwMjAxWhcNMjYwMzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTJkMTMzOC0yMmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22oFtW5HG9uRjJoOsxLfp1DMIsTNQz04OlIsLYpEBic9M9Xv8k8x3WbsyEln XkJR+IVwCUZ5Gfbg6QsquULq7j5Nsnvl60Hn46/iiiL8DeY54B+oFl706d96U0kM s39366DFkoHp/ba78T4mLjgXMUM/j+mi+/VSnWrLlaaEvyPMXbzg01HAaX9drY0z sYmniBYLIkcA0OFl3nf6PzGP5YH3l3P/o9zeNsbbnobc2xY8vTJT3yIxA9wlsWQF LsjfeZ14XT7IPrFb7QfKujdgv+hXEGVhS4RuBIahshzwm3RiD58jILeIvSZMyGIN T0lXn1dHRtJcr+io6Aw8iUue7wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIWBT7b0 WmGXtiK/J6T4+PhVJj8BMB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJBNUIvNTgwMDRBQUE3MEU3MTFFRkI0NDRBRjcwQzRGOUFFMDIvMDIzODlCNzY3 MEU4MTFFRkE4REJFNTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30Q0AwDQYJKoZIhvcNAQELBQADggEBAC3s+XYN3XEb Z9dLLFRxuj/239gfeY9sZPp1WLmZsSYZb05/1l5TPh/i441FDQr+P5STQ0GI9/dM l3Plw71ckPUGAqUCFBT4vV5vA60lnicKMAx47qYV4xn/YoXkQ0aNpL/vy50AoNSD pP6v03kDHEXQrC9b1J4Fu7eBgAcW/x20amudeC8IHyatGwAQyrNs3tvhopnd5QXv 6DSf3rIVNsZySdppRYwj54GiHhauCHqdCWpesJ3iRTyP7IcXxSzohEw5SEfWl7Mc thvxXoPyKxyaqb50lSHpFyFrQPXLJhuIeKKhCvYsdO+nNiUwIBuOMbXI/YGqlMR1 FvfDVo3ex8U= -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:46 2025 by rpki-client