This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/12300E80ECD911EEB21F7B7FC4F9AE02.roa File: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (raw, json) Hash identifier: hei/cgFAUZIGCHaatDAW34u7WoWx8+SizsC0TsbKAW0= Subject key identifier: 05:91:B8:65:12:ED:1A:D9:5E:56:CD:85:AE:E8:CC:C9:CB:E5:3D:B9 Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 12E2 Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/12300E80ECD911EEB21F7B7FC4F9AE02.roa Signing time: Sat 02 Aug 2025 14:50:24 +0000 ROA not before: Sat 02 Aug 2025 14:50:24 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38272 IP address blocks: 2001:253::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4834 (0x12e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Aug 2 14:50:24 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688e25b0-1d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:3a:bb:9f:83:b6:57:6c:c0:34:72:a8:33: 7a:c6:24:28:2a:d1:ba:cf:25:ef:61:2f:9b:a2:ff: 41:2f:22:43:10:75:c2:a0:e9:c2:c9:6b:98:4c:42: 26:46:0c:92:18:3d:6d:dc:bd:46:5a:74:bb:ba:5c: bd:42:56:5f:01:86:64:51:48:3b:fd:15:1d:91:f1: 66:75:10:95:ee:bb:8f:07:c5:24:41:66:4a:06:76: 76:ce:52:4f:81:47:b7:70:99:be:61:67:67:45:2e: ae:37:90:d7:ce:15:88:b6:0d:1b:77:ff:4f:e5:bc: 1c:6e:93:b1:9f:61:5e:29:f9:db:62:61:6c:33:2d: 4b:b2:a8:da:b1:ea:d9:9d:bb:f3:96:04:bc:35:08: 89:47:8c:07:1b:1f:79:b7:39:0a:85:c3:a5:82:11: 2f:31:0f:9c:e1:d8:51:ac:e8:5e:c0:82:d8:18:dd: 67:a0:44:b1:7a:3a:87:02:f6:e5:88:62:5b:b8:b8: 62:43:d2:41:f5:af:81:e4:38:52:74:33:c3:37:20: e4:71:e5:18:96:ab:00:ed:8b:a6:1f:4e:95:fa:6c: fe:e2:72:c1:27:24:da:0f:57:f0:65:7e:e6:4a:7f: 4c:40:1c:ae:51:df:6c:0b:54:d2:dd:d6:e3:b4:40: 32:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:91:B8:65:12:ED:1A:D9:5E:56:CD:85:AE:E8:CC:C9:CB:E5:3D:B9 X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/12300E80ECD911EEB21F7B7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:253::/32 Signature Algorithm: sha256WithRSAEncryption 70:81:bf:f8:49:94:4b:9b:61:5c:c0:54:be:c7:73:6e:25:5d: a3:75:97:ed:07:ae:fe:2d:88:a8:9f:70:a4:05:8c:70:c0:9c: b0:f4:98:aa:1b:7b:2d:84:31:13:24:70:5e:1e:48:d1:a0:42: e5:67:a4:09:8d:c2:92:81:1d:5e:2b:5b:0d:97:04:26:0e:46: 4e:43:3a:27:ba:e2:47:a7:3b:ff:6b:e7:80:57:41:7a:09:3f: 9a:c3:fb:28:b9:c5:a3:3f:cf:50:15:40:a4:2b:b7:fe:d2:55: 84:ff:d1:21:11:d5:d8:e5:2f:f2:df:a9:98:be:8d:fc:78:9b: e8:9c:2f:cc:f0:b5:ac:da:1c:c2:58:21:8f:1b:d7:e3:25:16: d9:f7:c7:38:ea:9d:f6:d8:ff:99:a7:c3:f4:a5:d1:a2:48:98: f0:3e:b2:23:78:9e:e4:81:11:ca:8c:d0:b1:f1:62:46:da:6d: 11:18:6b:80:68:2f:e9:7b:f0:d8:c2:b4:d8:d5:c3:6f:6e:b8: 22:f8:e7:8a:83:de:65:50:94:3e:3f:4a:bd:f1:ed:55:d6:1f: 49:2c:f2:1f:51:22:6a:00:26:d1:81:1c:56:c8:d9:d3:dd:5f: 62:42:31:b9:21:c7:10:32:f4:00:a0:a5:80:3c:2f:6e:c4:94: 27:93:6c:80 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICEuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjUwODAyMTQ1MDI0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMjViMC0xZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRM6u5+DtldswDRyqDN6xiQoKtG6zyXvYS+bov9BLyJDEHXCoOnCyWuYTEIm RgySGD1t3L1GWnS7uly9QlZfAYZkUUg7/RUdkfFmdRCV7ruPB8UkQWZKBnZ2zlJP gUe3cJm+YWdnRS6uN5DXzhWItg0bd/9P5bwcbpOxn2FeKfnbYmFsMy1LsqjaserZ nbvzlgS8NQiJR4wHGx95tzkKhcOlghEvMQ+c4dhRrOhewILYGN1noESxejqHAvbl iGJbuLhiQ9JB9a+B5DhSdDPDNyDkceUYlqsA7YumH06V+mz+4nLBJyTaD1fwZX7m Sn9MQByuUd9sC1TS3dbjtEAytwIDAQABo4ICljCCApIwHQYDVR0OBBYEFAWRuGUS 7RrZXlbNha7ozMnL5T25MB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVENjEvMEM2QTBDOUUxRDc5MTFFMjg3OUUzOEM1MDhCMDJDRDIvMTIzMDBFODBF Q0Q5MTFFRUIyMUY3QjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAgAQJTMA0GCSqGSIb3DQEBCwUAA4IBAQBwgb/4SZRLm2Fc wFS+x3NuJV2jdZftB67+LYion3CkBYxwwJyw9JiqG3sthDETJHBeHkjRoELlZ6QJ jcKSgR1eK1sNlwQmDkZOQzonuuJHpzv/a+eAV0F6CT+aw/soucWjP89QFUCkK7f+ 0lWE/9EhEdXY5S/y36mYvo38eJvonC/M8LWs2hzCWCGPG9fjJRbZ98c46p322P+Z p8P0pdGiSJjwPrIjeJ7kgRHKjNCx8WJG2m0RGGuAaC/pe/DYwrTY1cNvbrgi+OeK g95lUJQ+P0q98e1V1h9JLPIfUSJqACbRgRxWyNnT3V9iQjG5IccQMvQAoKWAPC9u xJQnk2yA -----END CERTIFICATE-----Generated at Sun Dec 7 08:31:43 2025 by rpki-client