This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/AC8A59D689D311EE81F03018C4F9AE02.roa File: AC8A59D689D311EE81F03018C4F9AE02.roa (raw, json) Hash identifier: IFndSimZu/lQNtVUndznjrd6wy5QTf0hVvA2OXtWMP0= Subject key identifier: 4F:2D:17:74:6D:D9:D2:6C:10:10:9F:40:A3:65:A5:A2:CB:B0:D4:A2 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 024C Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/AC8A59D689D311EE81F03018C4F9AE02.roa Signing time: Fri 21 Nov 2025 00:47:11 +0000 ROA not before: Fri 21 Nov 2025 00:47:11 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 149012 IP address blocks: 2401:43e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Nov 21 00:47:11 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691fb68f-3fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:72:c9:b8:d0:64:eb:23:66:0f:8c:5c:98:94: 70:48:ea:d8:fb:6e:a3:ee:f1:33:dc:29:f0:28:3b: 71:f9:77:2a:26:db:f3:98:20:7a:11:0e:62:21:f6: d8:16:04:4a:3e:7f:cf:ab:c8:ba:41:01:f4:69:d5: 2f:ad:91:43:ff:54:e8:4f:60:32:e3:ce:8d:b3:3b: 4f:bd:b3:56:cc:7d:8b:cd:17:e2:64:40:18:1b:ce: 06:e4:c0:3e:4c:6c:3b:8a:1c:9c:c3:4e:a0:a3:bd: 1c:c9:63:4d:81:41:d4:2d:a0:e2:e8:d4:48:ff:d4: 17:55:67:62:9a:db:e6:57:dc:77:70:29:e0:23:b8: f4:fe:7c:c1:51:15:aa:62:eb:8f:a5:8d:32:7e:a3: 68:b4:ea:71:37:f0:a9:41:7f:65:34:7e:2a:58:28: 74:c0:b6:fd:ad:67:7c:5a:1f:00:94:60:69:b2:ab: 60:8f:4e:d2:8d:6f:2a:55:28:a5:9c:97:0f:6e:67: f1:6c:c2:a3:e8:96:80:ac:5c:48:4e:82:87:d0:58: 61:a5:db:98:40:c1:71:72:d1:5d:66:1c:98:8b:22: 68:83:07:cb:ec:70:af:77:c3:88:a7:3e:db:0c:9a: 3c:ab:e7:2e:1f:56:29:e0:be:34:e2:e1:55:51:55: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2D:17:74:6D:D9:D2:6C:10:10:9F:40:A3:65:A5:A2:CB:B0:D4:A2 X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/AC8A59D689D311EE81F03018C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:43e0::/32 Signature Algorithm: sha256WithRSAEncryption 98:44:48:ad:5d:08:21:d0:a3:be:8b:f7:41:23:b5:07:0d:90: 0b:cc:3b:79:a1:4e:c7:42:b4:9a:0c:1b:aa:cb:53:0c:4f:c4: 6b:1f:a3:f3:a9:9a:86:a7:98:51:4f:36:47:61:a8:67:40:17: e9:5b:f1:35:15:19:8a:4c:d7:35:d7:20:9f:f4:2e:e5:24:00: f2:77:ed:b0:12:12:51:04:7b:73:01:c6:8d:3c:17:a2:21:e7: 33:c5:64:1e:00:d5:fc:21:c8:6d:32:25:f5:2d:9c:87:a6:5d: bc:54:1c:09:fa:03:19:62:10:d4:75:77:c0:09:ec:e4:bd:b1: 17:ee:be:cd:ed:b9:3c:dd:e2:61:e2:0f:c1:4a:44:e8:62:82: 0a:c1:05:2d:bf:0a:e7:d3:c4:a3:2c:d2:c9:63:e8:eb:ac:9d: 1e:ba:83:f2:b9:4f:5b:50:67:7e:74:4f:4d:18:8d:0e:42:f9: cb:0d:ea:fc:42:73:e6:1c:97:db:4c:e1:a8:fd:97:ca:33:9d: 2b:c1:c6:06:21:8c:63:57:ac:b7:6e:a5:3a:ab:1e:ea:68:62: 57:bb:61:b9:f9:36:15:09:bc:81:ce:b2:4e:3a:70:8b:cb:ba: 5e:9f:67:df:d5:6c:de:08:9f:84:96:0c:5b:4a:8f:02:b3:17: 46:fc:0d:a9 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUxMTIxMDA0NzExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmYjY4Zi0zZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03LJuNBk6yNmD4xcmJRwSOrY+26j7vEz3CnwKDtx+XcqJtvzmCB6EQ5iIfbY FgRKPn/Pq8i6QQH0adUvrZFD/1ToT2Ay486NsztPvbNWzH2LzRfiZEAYG84G5MA+ TGw7ihycw06go70cyWNNgUHULaDi6NRI/9QXVWdimtvmV9x3cCngI7j0/nzBURWq YuuPpY0yfqNotOpxN/CpQX9lNH4qWCh0wLb9rWd8Wh8AlGBpsqtgj07SjW8qVSil nJcPbmfxbMKj6JaArFxIToKH0FhhpduYQMFxctFdZhyYiyJogwfL7HCvd8OIpz7b DJo8q+cuH1Yp4L404uFVUVVTHQIDAQABo4ICljCCApIwHQYDVR0OBBYEFE8tF3Rt 2dJsEBCfQKNlpaLLsNSiMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNDMjQvMTZDNjEzMTY2QUZBMTFFREI3MDZGRjNDQzRGOUFFMDIvQUM4QTU5RDY4 OUQzMTFFRTgxRjAzMDE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAUPgMA0GCSqGSIb3DQEBCwUAA4IBAQCYREitXQgh0KO+ i/dBI7UHDZALzDt5oU7HQrSaDBuqy1MMT8RrH6PzqZqGp5hRTzZHYahnQBfpW/E1 FRmKTNc11yCf9C7lJADyd+2wEhJRBHtzAcaNPBeiIeczxWQeANX8IchtMiX1LZyH pl28VBwJ+gMZYhDUdXfACezkvbEX7r7N7bk83eJh4g/BSkToYoIKwQUtvwrn08Sj LNLJY+jrrJ0euoPyuU9bUGd+dE9NGI0OQvnLDer8QnPmHJfbTOGo/ZfKM50rwcYG IYxjV6y3bqU6qx7qaGJXu2G5+TYVCbyBzrJOOnCLy7pen2ff1WzeCJ+ElgxbSo8C sxdG/A2p -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:15 2025 by rpki-client