This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/DD3F28CC93D111F0B0A32B0BC4F9AE02.roa File: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (raw, json) Hash identifier: ZHiY86UbhSecd/BruIybu0ekH1iPSREhwZrvetRUzIQ= Subject key identifier: B2:F9:27:29:3D:C3:F3:1F:16:2E:E0:03:2E:7F:AE:AC:31:A3:23:FC Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Certificate serial: 3F Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/DD3F28CC93D111F0B0A32B0BC4F9AE02.roa Signing time: Wed 31 Dec 2025 07:24:43 +0000 ROA not before: Wed 31 Dec 2025 07:24:42 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 63956 IP address blocks: 2001:df5:f040::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Validity Not Before: Dec 31 07:24:42 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6954cfba-487b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5f:a4:5d:a3:4e:fc:61:79:85:a0:cc:26:78: 4b:16:11:71:72:80:4c:17:e1:25:2b:f6:07:a0:ae: 6c:f8:6f:de:e8:85:61:3d:59:10:cd:d4:1a:45:a7: b3:76:91:8a:54:da:b9:2b:52:25:01:aa:d7:c9:e3: 32:ca:f9:c4:d9:9e:bb:39:36:48:1a:da:ef:89:15: 3f:a4:ce:c4:51:62:03:ff:2b:d8:a2:af:01:2f:3b: ea:11:91:95:73:87:76:6b:d8:24:89:98:d5:42:67: 75:7d:9e:68:1a:f0:99:77:89:7d:34:d4:12:fd:54: 44:08:a6:b1:1e:c2:1c:e7:f0:ec:7a:5c:74:91:66: 0d:f7:96:97:7e:d7:ed:d4:42:4d:7d:60:b8:b1:b2: 11:bc:65:f0:2a:52:0e:9a:0a:3c:d9:5c:db:b4:3b: 83:e6:b4:9f:9c:72:e1:04:90:51:5e:43:21:df:3c: ba:2d:78:92:8e:8f:a0:a1:fc:b3:d5:00:96:e4:25: c7:98:f9:82:7b:0c:36:38:5a:3f:c7:0e:13:d7:6a: a6:08:bf:a9:01:4a:ea:b8:25:f9:c8:6c:91:4b:f4: 0f:3d:3a:76:8c:1a:8e:6c:59:b9:43:0c:cb:d2:51: 71:67:4c:e3:a7:b3:a9:cc:d1:23:82:a4:81:72:31: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F9:27:29:3D:C3:F3:1F:16:2E:E0:03:2E:7F:AE:AC:31:A3:23:FC X509v3 Authority Key Identifier: keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/DD3F28CC93D111F0B0A32B0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df5:f040::/47 Signature Algorithm: sha256WithRSAEncryption 9e:d0:eb:4a:9a:26:63:18:f5:ac:88:67:3f:66:9b:2e:81:85: 90:97:49:72:99:38:c1:fe:dc:2d:06:48:1a:92:02:d3:8c:73: cb:42:59:b5:e7:bb:0a:74:33:2f:30:11:c2:d1:3f:88:f0:2d: b8:7b:cb:91:08:a9:bd:5d:0f:79:cc:ed:dd:d4:98:96:70:f2: 5f:a2:26:ad:e5:7c:e9:0a:02:8c:24:e8:f1:53:48:90:90:33: d4:5d:6c:c1:1a:d3:39:ac:16:ec:0a:35:34:b5:bd:f2:14:de: de:b5:47:ae:54:5e:c1:da:6b:71:48:98:ce:54:2b:ba:ee:cd: 33:43:06:92:33:91:41:73:f3:14:38:a8:9f:4a:b5:2b:8b:3e: 54:1a:49:62:9c:3f:db:4f:d3:91:70:7f:fc:23:43:4c:5b:ce: db:4d:07:cd:37:dc:63:5f:68:57:67:84:f6:16:4a:a4:40:f0: 53:1a:33:23:ed:65:34:77:fa:e3:ab:7b:cd:12:71:ee:79:4d: 41:ab:e5:f8:8e:51:d8:e3:c0:53:a8:85:42:74:28:ff:73:bb: cc:1a:3a:57:cc:99:65:6b:68:8e:02:cc:de:ba:42:57:c4:62: 28:f2:f5:59:84:01:92:bd:8e:3c:0c:a4:8b:e9:cb:90:54:ee: 7b:ab:7f:20 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE RjE5NTExMC8GA1UEBRMoNjE1Nzc1QTRERTIzRTQ2QThCNTdDOEY3QjlDOUUxRTg4 NkU1RDhENTAeFw0yNTEyMzEwNzI0NDJaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NTRjZmJhLTQ4N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbX6Rdo078YXmFoMwmeEsWEXFygEwX4SUr9gegrmz4b97ohWE9WRDN1BpFp7N2 kYpU2rkrUiUBqtfJ4zLK+cTZnrs5Nkga2u+JFT+kzsRRYgP/K9iirwEvO+oRkZVz h3Zr2CSJmNVCZ3V9nmga8Jl3iX001BL9VEQIprEewhzn8Ox6XHSRZg33lpd+1+3U Qk19YLixshG8ZfAqUg6aCjzZXNu0O4PmtJ+ccuEEkFFeQyHfPLoteJKOj6Ch/LPV AJbkJceY+YJ7DDY4Wj/HDhPXaqYIv6kBSuq4JfnIbJFL9A89OnaMGo5sWblDDMvS UXFnTOOns6nM0SOCpIFyMSDJAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUsvknKT3D 8x8WLuADLn+urDGjI/wwHwYDVR0jBBgwFoAUYVd1pN4j5GqLV8j3ucnh6Ibl2NUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1Lzc0QzE4RjcwOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdxTFY4ajN1Y25oNklibDJO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVZkMXBONGo1R3FMVjhqM3Vjbmg2SWJsMk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjE5NS83NEMxOEY3MDkzOEExMUYwQkJENjIzODVDNEY5QUUwMi9ERDNGMjhDQzkz RDExMUYwQjBBMzJCMEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHASABDfXwQDANBgkqhkiG9w0BAQsFAAOCAQEAntDrSpomYxj1 rIhnP2abLoGFkJdJcpk4wf7cLQZIGpIC04xzy0JZtee7CnQzLzARwtE/iPAtuHvL kQipvV0Peczt3dSYlnDyX6ImreV86QoCjCTo8VNIkJAz1F1swRrTOawW7Ao1NLW9 8hTe3rVHrlRewdprcUiYzlQruu7NM0MGkjORQXPzFDion0q1K4s+VBpJYpw/20/T kXB//CNDTFvO200HzTfcY19oV2eE9hZKpEDwUxozI+1lNHf646t7zRJx7nlNQavl +I5R2OPAU6iFQnQo/3O7zBo6V8yZZWtojgLM3rpCV8RiKPL1WYQBkr2OPAyki+nL kFTue6t/IA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:17:43 2026 by rpki-client