This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/9FC8CE38936E11EC92AF8421C4F9AE02.roa File: 9FC8CE38936E11EC92AF8421C4F9AE02.roa (raw, json) Hash identifier: O0CTocw9S+aKMmyVNlp/W2ilJB5h65RMybZN3Xiy9s0= Subject key identifier: 06:9C:A4:63:C0:8C:21:5A:73:AC:61:7B:47:02:F1:F6:72:35:DA:A4 Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 042C Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/9FC8CE38936E11EC92AF8421C4F9AE02.roa Signing time: Wed 31 Dec 2025 00:19:45 +0000 ROA not before: Wed 31 Dec 2025 00:19:45 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 149512 IP address blocks: 2400:16e0::/32 maxlen: 32 2400:16e0::/48 maxlen: 48 2400:16e0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Dec 31 00:19:45 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69546c20-787a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:ca:09:e1:30:8b:a1:03:ea:b3:a4:ca:7f: d4:01:d9:cd:07:21:2b:31:d7:61:30:0e:51:20:e9: b7:0c:b5:f5:a1:57:dc:a4:96:cd:63:c7:05:a7:f9: 17:c9:ce:e0:02:1e:dd:81:ed:11:42:c1:d1:ff:c0: 60:55:8b:1b:62:c6:76:8a:24:8e:ff:c1:04:ed:e3: ce:aa:a6:d3:b9:a0:c5:11:3f:b9:a2:a7:c0:9a:7f: 48:22:b0:51:33:69:4f:c6:d7:10:3b:0b:29:29:a6: ff:87:eb:4c:aa:6e:17:f6:86:1c:4f:f8:11:3e:99: f1:2a:e5:55:5c:82:34:2c:22:4e:98:07:8b:f0:ff: 9b:6d:64:3c:03:dc:0b:2d:ce:e8:dd:d9:7b:8b:fa: 4c:7c:a0:ae:7a:7b:83:40:27:2b:0c:03:49:e5:3e: ed:04:27:c0:91:e8:e5:b0:77:7a:77:e0:85:3c:72: fd:39:dc:5f:7f:e1:ea:d7:10:99:01:5c:4f:c0:d4: d4:87:be:11:55:62:8c:d0:ec:cc:14:1e:0f:97:ed: 34:77:43:73:9a:c0:1c:2f:74:60:1a:27:74:7f:73: 79:0d:9c:69:b2:92:ae:9b:1f:f7:0e:6b:11:ec:97: 72:7a:cc:f5:43:85:61:e0:1e:ea:b2:90:97:e5:f2: f2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9C:A4:63:C0:8C:21:5A:73:AC:61:7B:47:02:F1:F6:72:35:DA:A4 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/9FC8CE38936E11EC92AF8421C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:16e0::/32 Signature Algorithm: sha256WithRSAEncryption 46:59:6a:d2:e5:d9:09:c5:ba:32:45:ab:79:c9:e8:60:55:c0: aa:d1:02:20:bc:08:63:2b:1b:3b:3a:21:81:fe:49:8e:f7:58: 35:5b:55:82:21:28:86:ed:10:1a:dd:19:8f:1c:a0:de:b1:7a: 9a:b5:20:41:4e:4b:99:0c:ba:0b:1d:f8:6e:be:70:44:44:d7: e4:61:58:26:4c:cb:2f:d8:83:97:c7:3a:2e:99:d8:63:63:94: a4:c7:69:0e:df:44:04:ab:11:1a:35:2e:03:3e:8a:ba:20:ae: d4:6f:f3:e4:a5:cb:72:2d:c9:d3:de:96:2e:9b:2e:7a:4e:51: 9d:ac:a3:ae:ca:dd:4b:62:00:30:b9:57:d9:f2:c0:2f:30:20: bc:5c:65:bf:e5:e1:58:41:0a:33:c0:b9:85:76:10:0e:0a:42: f1:27:5c:d0:ad:3c:df:11:a6:ce:cb:b5:f3:33:72:e5:4f:6f: c4:28:99:26:bf:a2:b4:35:ab:44:26:86:3b:a1:ea:6f:8a:fc: 0b:56:fe:2b:e0:4d:1c:ef:93:fb:58:4d:b2:8e:08:9e:7a:2f: bd:cf:8c:da:65:40:97:68:6a:15:94:41:4f:4d:fd:34:c5:ea: a8:5d:02:5f:1e:28:6f:ef:27:5a:98:1a:89:a6:36:83:58:b4: d1:cb:0d:e2 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjUxMjMxMDAxOTQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0NmMyMC03ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKnKCeEwi6ED6rOkyn/UAdnNByErMddhMA5RIOm3DLX1oVfcpJbNY8cFp/kX yc7gAh7dge0RQsHR/8BgVYsbYsZ2iiSO/8EE7ePOqqbTuaDFET+5oqfAmn9IIrBR M2lPxtcQOwspKab/h+tMqm4X9oYcT/gRPpnxKuVVXII0LCJOmAeL8P+bbWQ8A9wL Lc7o3dl7i/pMfKCuenuDQCcrDANJ5T7tBCfAkejlsHd6d+CFPHL9Odxff+Hq1xCZ AVxPwNTUh74RVWKM0OzMFB4Pl+00d0NzmsAcL3RgGid0f3N5DZxpspKumx/3DmsR 7Jdyesz1Q4Vh4B7qspCX5fLy+wIDAQABo4ICljCCApIwHQYDVR0OBBYEFAacpGPA jCFac6xhe0cC8fZyNdqkMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU4QzkvNDBFMEMwRUU5MzZDMTFFQ0JEQzExQTIwQzRGOUFFMDIvOUZDOENFMzg5 MzZFMTFFQzkyQUY4NDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkABbgMA0GCSqGSIb3DQEBCwUAA4IBAQBGWWrS5dkJxboy Rat5yehgVcCq0QIgvAhjKxs7OiGB/kmO91g1W1WCISiG7RAa3RmPHKDesXqatSBB TkuZDLoLHfhuvnBERNfkYVgmTMsv2IOXxzoumdhjY5Skx2kO30QEqxEaNS4DPoq6 IK7Ub/PkpctyLcnT3pYumy56TlGdrKOuyt1LYgAwuVfZ8sAvMCC8XGW/5eFYQQoz wLmFdhAOCkLxJ1zQrTzfEabOy7XzM3LlT2/EKJkmv6K0NatEJoY7oepvivwLVv4r 4E0c75P7WE2yjgieei+9z4zaZUCXaGoVlEFPTf00xeqoXQJfHihv7ydamBqJpjaD WLTRyw3i -----END CERTIFICATE-----Generated at Sun Jan 25 09:23:03 2026 by rpki-client