This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa File: AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa (raw, json) Hash identifier: lCh4qNG4MxGwgSOCokRlEuxslOzYqyQd9BkSkWApWyM= Subject key identifier: 7D:7E:FF:1B:8A:D0:96:CC:B0:37:8E:70:6D:95:2E:78:49:BF:0B:29 Certificate issuer: /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Certificate serial: 042E Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa Signing time: Wed 31 Dec 2025 00:19:46 +0000 ROA not before: Wed 31 Dec 2025 00:19:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2400:16e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1070 (0x42e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE Validity Not Before: Dec 31 00:19:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69546c22-3408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:29:7d:b0:75:41:86:3b:8f:fe:86:e2:95: e1:21:7b:f0:de:ee:2c:4a:d6:10:1e:74:59:ac:3d: 15:22:cf:2e:fb:42:34:f0:d5:2c:36:96:3b:74:5b: 86:b1:4d:37:b4:73:3b:35:24:62:6a:7b:7b:45:74: be:07:db:44:95:2c:e5:39:05:18:c3:2d:ee:3f:28: ba:79:21:3c:e3:7a:50:b9:a8:a8:5a:51:25:d5:2e: 0f:54:3d:8f:9e:d1:dc:58:6e:9a:6f:af:f1:05:ae: c4:d9:d0:71:51:dd:e0:cc:41:41:a5:70:63:c0:52: 76:65:df:45:cf:bd:2f:40:9c:ae:3d:4f:6f:66:f2: 35:d3:16:a4:30:c4:3e:6f:31:f7:5c:87:bd:de:ac: 01:00:6d:7e:65:b3:40:11:17:48:72:be:05:a2:ee: 05:59:32:aa:d4:3b:cf:9a:94:09:94:a8:35:f0:70: 7d:79:d8:42:e1:d7:2f:b4:27:ad:fb:28:a3:ef:16: ef:65:72:f5:28:16:0a:c1:f9:90:1b:8c:fd:d7:a4: 32:52:41:6a:1a:72:ae:fe:21:ad:c6:63:47:da:80: fa:77:ea:02:39:5b:ef:13:cf:ac:01:a9:af:e9:a5: d4:25:8d:82:59:9d:46:e6:45:f4:99:bf:f3:b8:22: 6f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7E:FF:1B:8A:D0:96:CC:B0:37:8E:70:6D:95:2E:78:49:BF:0B:29 X509v3 Authority Key Identifier: keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/AF6BB6C21F5A11F0BA7E6961C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:16e0::/48 Signature Algorithm: sha256WithRSAEncryption 21:d0:98:32:54:4d:74:6d:a3:4a:5f:56:fc:da:d2:00:69:79: 25:64:d0:da:1e:17:90:bc:e0:37:ff:55:5b:58:3b:13:dc:45: 85:0a:c5:5f:5e:36:8e:e3:87:0e:4d:93:8c:ef:1f:f6:97:96: 21:7e:c6:f9:d5:42:b2:69:6e:26:21:cd:81:03:c8:20:05:0a: e1:e1:98:11:57:92:b0:15:d5:2e:c8:04:3d:5e:62:2f:30:18: 9b:41:80:c4:c8:84:af:41:c6:a3:8b:a3:7f:5d:5c:1a:d6:6e: 31:43:c9:0a:e3:f5:94:6b:e4:52:ec:4e:d9:ff:30:94:fc:10: 71:c5:81:80:68:0f:15:6e:70:ab:79:76:d6:33:ee:66:94:fd: f6:3e:76:c3:ed:82:df:e8:2b:c0:a7:41:eb:da:68:80:89:81: 17:a3:73:02:1e:61:27:24:bd:c3:39:55:92:0c:ad:31:81:0b: ac:93:21:20:06:3d:13:8a:65:1b:53:c5:24:08:db:dd:6d:71: 3d:2b:a7:0f:29:6d:8e:e3:ce:ca:21:2e:01:ec:5b:9c:a7:6a: 8f:64:ec:c9:55:85:42:ce:9d:fd:26:af:85:83:63:e6:6a:68: ae:f8:b7:aa:b7:cc:f1:ec:b0:d3:dc:65:6e:10:90:06:60:a1: 4c:47:45:51 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjU4QzkxMTAvBgNVBAUTKDE5Mjk3N0REQUEwOTVCNDA3N0VFMEQ3NjIzODQ2M0Yx QjZGNDBBRUUwHhcNMjUxMjMxMDAxOTQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTU0NmMyMi0zNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuskpfbB1QYY7j/6G4pXhIXvw3u4sStYQHnRZrD0VIs8u+0I08NUsNpY7dFuG sU03tHM7NSRiant7RXS+B9tElSzlOQUYwy3uPyi6eSE843pQuaioWlEl1S4PVD2P ntHcWG6ab6/xBa7E2dBxUd3gzEFBpXBjwFJ2Zd9Fz70vQJyuPU9vZvI10xakMMQ+ bzH3XIe93qwBAG1+ZbNAERdIcr4Fou4FWTKq1DvPmpQJlKg18HB9edhC4dcvtCet +yij7xbvZXL1KBYKwfmQG4z916QyUkFqGnKu/iGtxmNH2oD6d+oCOVvvE8+sAamv 6aXUJY2CWZ1G5kX0mb/zuCJvmwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFH1+/xuK 0JbMsDeOcG2VLnhJvwspMB8GA1UdIwQYMBaAFBkpd92qCVtAd+4NdiOEY/G29Aru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNThDOS80MEUwQzBFRTkz NkMxMUVDQkRDMTFBMjBDNEY5QUUwMi9HU2wzM2FvSlcwQjM3ZzEySTRSajhiYjBD dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dTbDMzYW9KVzBCMzdnMTJJNFJqOGJiMEN1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU4QzkvNDBFMEMwRUU5MzZDMTFFQ0JEQzExQTIwQzRGOUFFMDIvQUY2QkI2QzIx RjVBMTFGMEJBN0U2OTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkABbgAAAwDQYJKoZIhvcNAQELBQADggEBACHQmDJUTXRt o0pfVvza0gBpeSVk0NoeF5C84Df/VVtYOxPcRYUKxV9eNo7jhw5Nk4zvH/aXliF+ xvnVQrJpbiYhzYEDyCAFCuHhmBFXkrAV1S7IBD1eYi8wGJtBgMTIhK9BxqOLo39d XBrWbjFDyQrj9ZRr5FLsTtn/MJT8EHHFgYBoDxVucKt5dtYz7maU/fY+dsPtgt/o K8CnQevaaICJgRejcwIeYSckvcM5VZIMrTGBC6yTISAGPROKZRtTxSQI291tcT0r pw8pbY7jzsohLgHsW5ynao9k7MlVhULOnf0mr4WDY+ZqaK74t6q3zPHssNPcZW4Q kAZgoUxHRVE= -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:39 2026 by rpki-client