This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B9D8F9CE89D011EEB603FF75C4F9AE02.roa File: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (raw, json) Hash identifier: s7R4I3t8u8SuVTa6fXUjv0yO6d7dYzhfomh/PTsVV0g= Subject key identifier: 0D:89:D3:1E:57:CE:77:FD:C4:9B:75:76:F7:06:63:D5:AC:6D:9E:1D Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 024E Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B9D8F9CE89D011EEB603FF75C4F9AE02.roa Signing time: Fri 21 Nov 2025 00:47:14 +0000 ROA not before: Fri 21 Nov 2025 00:47:14 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 149201 IP address blocks: 2401:43e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Nov 21 00:47:14 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=691fb692-2b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:14:06:c4:4a:28:59:6a:8b:2e:a5:25:3f:c0: 58:66:47:2b:48:78:97:cd:c6:e6:4c:d9:27:c2:ae: fa:27:36:03:90:62:27:f3:01:35:8f:e0:8a:0e:b9: 91:24:dd:7d:17:7f:7e:c1:f3:bb:53:e2:8f:4c:24: 48:e6:46:35:de:79:fa:48:d7:72:6e:7d:a4:2b:39: f7:55:c0:22:9d:73:95:34:5e:ae:7c:74:9f:f7:3f: 6e:98:ce:09:5c:4d:9a:68:12:ab:54:09:5d:74:45: 21:3f:c1:41:8d:b3:d5:8c:f9:73:68:76:47:f2:59: 1f:5a:53:80:36:6c:c9:48:1d:1d:4d:1d:44:6a:be: c8:77:27:97:38:41:e0:8b:3c:49:ee:bc:21:73:f7: 38:d1:c6:b8:93:56:f2:e7:30:ea:73:eb:52:5d:3d: fd:28:2f:df:d6:b1:9f:e8:57:9e:ed:1a:26:c9:93: b3:2e:92:e1:2d:78:a8:07:8c:c5:a9:d4:62:17:99: 72:0a:48:09:d8:d4:51:07:d2:f8:f5:5e:56:c0:5c: 95:23:2e:91:ac:11:e0:e3:da:69:a3:31:ee:20:32: b4:7f:f5:85:f3:51:8a:59:69:66:56:ee:6f:ae:a8: ce:b1:95:97:08:f0:cd:4e:41:1d:c7:b1:d8:2c:02: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:D3:1E:57:CE:77:FD:C4:9B:75:76:F7:06:63:D5:AC:6D:9E:1D X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B9D8F9CE89D011EEB603FF75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:43e0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:a9:be:03:a1:d6:cb:1c:ac:10:09:4a:91:62:eb:97:69:ba: 16:39:c7:26:03:6e:f1:40:50:d7:0f:ef:d6:b1:55:3a:cb:13: 82:81:ca:44:2b:6f:a3:1e:0c:8b:7f:c9:fa:2b:82:82:16:20: 8b:f6:e3:44:8b:a5:8b:b7:b4:dc:28:47:70:50:5c:1d:67:30: 2c:4c:25:e8:34:8f:f6:08:4a:e8:6b:98:af:62:09:b7:52:90: af:62:2e:3b:92:9f:9c:b6:a1:10:7f:0d:a6:43:d5:ee:fe:30: 71:4d:3f:0c:5b:83:c0:11:bc:85:1b:4e:d9:48:68:25:56:f9: cc:4e:71:4e:93:33:2b:e6:77:0f:e6:3d:ef:cc:a2:7b:21:85: c9:30:11:10:df:a9:34:57:c1:2f:9e:63:23:ff:95:eb:5d:34: 45:32:95:56:ca:74:c9:57:2d:f9:b8:6a:4b:fd:2f:c5:65:35: 33:82:49:a1:8d:b6:fb:40:39:da:da:2f:a0:0e:47:d0:1c:40: a5:81:df:bd:bb:ac:a6:b6:2e:f2:7c:03:e2:13:19:35:22:a0: 6c:5b:fd:bd:2a:e3:38:13:15:df:95:31:75:c5:db:1a:e2:26: 76:37:37:16:cc:1b:cd:ba:21:f8:9f:01:e1:e4:92:9d:9c:8e: 4b:b0:18:28 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjUxMTIxMDA0NzE0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFmYjY5Mi0yYjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BQGxEooWWqLLqUlP8BYZkcrSHiXzcbmTNknwq76JzYDkGIn8wE1j+CKDrmR JN19F39+wfO7U+KPTCRI5kY13nn6SNdybn2kKzn3VcAinXOVNF6ufHSf9z9umM4J XE2aaBKrVAlddEUhP8FBjbPVjPlzaHZH8lkfWlOANmzJSB0dTR1Ear7IdyeXOEHg izxJ7rwhc/c40ca4k1by5zDqc+tSXT39KC/f1rGf6Fee7RomyZOzLpLhLXioB4zF qdRiF5lyCkgJ2NRRB9L49V5WwFyVIy6RrBHg49ppozHuIDK0f/WF81GKWWlmVu5v rqjOsZWXCPDNTkEdx7HYLAKVHwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFA2J0x5X znf9xJt1dvcGY9WsbZ4dMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUNDMjQvMTZDNjEzMTY2QUZBMTFFREI3MDZGRjNDQzRGOUFFMDIvQjlEOEY5Q0U4 OUQwMTFFRUI2MDNGRjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkAUPgAAAwDQYJKoZIhvcNAQELBQADggEBAC+pvgOh1ssc rBAJSpFi65dpuhY5xyYDbvFAUNcP79axVTrLE4KBykQrb6MeDIt/yforgoIWIIv2 40SLpYu3tNwoR3BQXB1nMCxMJeg0j/YISuhrmK9iCbdSkK9iLjuSn5y2oRB/DaZD 1e7+MHFNPwxbg8ARvIUbTtlIaCVW+cxOcU6TMyvmdw/mPe/MonshhckwERDfqTRX wS+eYyP/letdNEUylVbKdMlXLfm4akv9L8VlNTOCSaGNtvtAOdraL6AOR9AcQKWB 3727rKa2LvJ8A+ITGTUioGxb/b0q4zgTFd+VMXXF2xriJnY3NxbMG826IfifAeHk kp2cjkuwGCg= -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:58 2025 by rpki-client