This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/71DD0A968C8311EF81E2B476C4F9AE02.roa File: 71DD0A968C8311EF81E2B476C4F9AE02.roa (raw, json) Hash identifier: WDCx6Ip1deSWt5iJM0Hi3bLb60Rhv0AeoIkm86a38ho= Subject key identifier: BD:87:BA:56:2D:2A:7F:D8:28:D3:31:73:11:A2:0F:F0:DB:E5:59:CF Certificate issuer: /CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE Certificate serial: CA Authority key identifier: 15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/71DD0A968C8311EF81E2B476C4F9AE02.roa Signing time: Wed 05 Nov 2025 06:20:44 +0000 ROA not before: Wed 05 Nov 2025 06:20:44 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153312 IP address blocks: 2401:c060::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE Validity Not Before: Nov 5 06:20:44 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690aecbc-9bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:53:7b:9d:08:c3:90:48:96:4b:c1:5e:4c: 4f:77:27:f4:09:bd:07:50:05:96:8e:da:a3:ae:68: fd:6e:4b:e9:d5:b8:a7:39:85:f8:74:54:f7:8d:3d: 08:72:c7:1f:73:69:f6:f9:89:ec:db:a3:47:b2:71: 3e:20:6d:33:bc:7e:0f:43:c5:ea:83:4d:d1:f6:b5: 09:76:fd:e5:4c:51:ca:fc:fe:ed:3b:5a:83:af:27: 53:65:bb:42:b5:94:d2:4c:40:00:f8:07:40:40:7a: b1:28:86:74:53:1a:e0:93:a1:0b:e0:0f:e9:58:1a: 98:7a:86:ca:68:f6:17:77:7d:d1:d9:28:bb:22:91: 3c:93:e9:c9:ce:6d:32:1b:6b:47:65:b8:a3:47:84: 1b:07:a9:68:84:29:00:b2:fc:2d:a7:5a:66:e6:63: 78:63:54:b0:aa:ff:ac:13:d0:6f:3d:48:cd:68:88: 21:24:ea:9c:27:40:31:ea:7d:a2:a0:e9:e8:ec:99: b9:6b:60:fe:61:9a:5b:41:a5:f7:a0:6b:c1:e2:3e: b8:9b:84:da:ae:d4:ef:f7:3d:6c:49:e2:81:55:4b: 52:1e:de:c1:9a:3b:1a:a8:05:12:cc:3e:fc:e9:22: 9d:57:a3:a4:56:dc:45:fd:b1:dc:1c:8e:99:ff:ac: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:87:BA:56:2D:2A:7F:D8:28:D3:31:73:11:A2:0F:F0:DB:E5:59:CF X509v3 Authority Key Identifier: keyid:15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/71DD0A968C8311EF81E2B476C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:c060::/32 Signature Algorithm: sha256WithRSAEncryption 08:6e:b4:f4:4d:a5:58:7b:ff:2f:6b:7c:df:98:c1:27:de:4d: 21:a4:95:b4:26:eb:0a:fd:30:ad:8b:a7:0a:2f:1f:09:11:95: e8:e2:60:a1:3a:fa:84:5b:38:7a:12:dd:ae:78:33:e0:d1:49: bc:17:7a:f9:a3:a8:a2:5d:e9:c0:95:ba:ac:7c:b3:88:1c:0d: 78:0f:f7:37:36:70:23:99:56:50:83:47:89:67:e0:29:21:6b: 13:9a:7f:9b:96:a1:78:60:9f:b6:6b:36:59:60:58:14:8f:6c: d2:5b:97:1a:d6:80:a4:c7:9c:09:e4:32:b6:c6:f9:9a:f0:25: 1b:a4:e5:84:68:45:7c:86:2f:bc:3e:89:f0:26:b3:a6:90:6b: 1e:dd:b6:f9:4b:e1:0f:bb:38:06:76:cc:c3:1c:98:b8:18:3c: 53:41:46:77:c3:32:78:8f:e3:3a:a7:26:a5:8d:4f:ea:ed:bc: 1e:2a:2d:5c:bc:9d:a3:df:6d:25:25:d3:80:bf:5b:ce:6f:c5: a5:82:0c:e5:53:f2:80:34:3a:cf:5a:ab:5f:9a:61:f8:95:c2: 41:25:4b:f6:eb:b1:ee:da:12:bd:90:d1:53:2d:3b:57:bd:29: 59:e9:68:da:f5:ce:f9:d8:b9:48:61:e7:fa:0e:b5:39:5a:f2: 42:0a:0d:36 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKDE1NDhGMTA5NUYxRTBGOUI3ODRCMUI3RkREOEYwRTc1 OUM4NDJERkUwHhcNMjUxMTA1MDYyMDQ0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhZWNiYy05YmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTNTe50Iw5BIlkvBXkxPdyf0Cb0HUAWWjtqjrmj9bkvp1binOYX4dFT3jT0I cscfc2n2+Yns26NHsnE+IG0zvH4PQ8Xqg03R9rUJdv3lTFHK/P7tO1qDrydTZbtC tZTSTEAA+AdAQHqxKIZ0Uxrgk6EL4A/pWBqYeobKaPYXd33R2Si7IpE8k+nJzm0y G2tHZbijR4QbB6lohCkAsvwtp1pm5mN4Y1Swqv+sE9BvPUjNaIghJOqcJ0Ax6n2i oOno7Jm5a2D+YZpbQaX3oGvB4j64m4TartTv9z1sSeKBVUtSHt7BmjsaqAUSzD78 6SKdV6OkVtxF/bHcHI6Z/6yKQwIDAQABo4ICljCCApIwHQYDVR0OBBYEFL2HulYt Kn/YKNMxcxGiD/Db5VnPMB8GA1UdIwQYMBaAFBVI8QlfHg+beEsbf92PDnWchC3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80QTBGRkE5NjhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9GVWp4Q1Y4ZUQ1dDRTeHRfM1k4T2RaeUVM ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVanhDVjhlRDV0NFN4dF8zWThPZFp5RUxmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJGMEMvNEEwRkZBOTY4QzVCMTFFRkE3MDY3NTdGQzRGOUFFMDIvNzFERDBBOTY4 QzgzMTFFRjgxRTJCNDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAcBgMA0GCSqGSIb3DQEBCwUAA4IBAQAIbrT0TaVYe/8v a3zfmMEn3k0hpJW0JusK/TCti6cKLx8JEZXo4mChOvqEWzh6Et2ueDPg0Um8F3r5 o6iiXenAlbqsfLOIHA14D/c3NnAjmVZQg0eJZ+ApIWsTmn+blqF4YJ+2azZZYFgU j2zSW5ca1oCkx5wJ5DK2xvma8CUbpOWEaEV8hi+8PonwJrOmkGse3bb5S+EPuzgG dszDHJi4GDxTQUZ3wzJ4j+M6pyaljU/q7bweKi1cvJ2j320lJdOAv1vOb8Wlggzl U/KANDrPWqtfmmH4lcJBJUv267Hu2hK9kNFTLTtXvSlZ6Wja9c752LlIYef6DrU5 WvJCCg02 -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:29 2025 by rpki-client