This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/60C72042052911F0A2361C50C4F9AE02.roa File: 60C72042052911F0A2361C50C4F9AE02.roa (raw, json) Hash identifier: 1W/Ku8Per+xY46HAlC2+lLppFiPLfU3dJzCTX5pbGbs= Subject key identifier: C1:1C:E9:3C:A0:4D:59:2B:85:F1:9C:58:04:3E:0C:8A:2F:91:A0:F2 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 01E7 Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/60C72042052911F0A2361C50C4F9AE02.roa Signing time: Mon 29 Dec 2025 02:22:20 +0000 ROA not before: Mon 29 Dec 2025 02:22:20 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138077 IP address blocks: 101.1.4.0/24 maxlen: 24 2401:44c0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 02:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Validity Not Before: Dec 29 02:22:20 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6951e5db-042e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:fa:77:b7:8c:ab:a3:c2:d7:de:6b:4b:7b: d4:f6:44:fc:5c:ca:33:5b:ff:23:1a:44:4d:ab:58: 3b:ba:51:55:75:8a:89:b4:db:a5:b4:d1:f7:bf:10: 3f:4d:dc:58:3b:9a:75:d7:ec:03:fd:d8:ec:b1:d5: 37:c3:fe:4c:9f:bd:b0:66:7f:21:80:70:76:04:aa: cc:54:79:30:fd:8d:62:58:04:b3:26:c9:7e:ae:df: cc:ad:8f:40:e0:0f:c1:a7:a9:1a:f4:f3:f6:5b:88: 51:01:a6:61:a2:d2:73:d2:7e:38:1f:84:0e:eb:0a: d8:7e:ea:a1:06:ba:58:33:8e:9a:56:b4:80:13:3f: 4a:98:a6:0a:50:44:ba:90:cf:38:b1:0c:11:61:13: 95:79:e1:44:68:d1:ee:b5:72:72:bc:27:ad:86:75: 46:88:ce:12:38:e0:15:b9:56:96:a3:a1:dd:08:e8: c1:2b:e1:ed:5d:84:3c:86:5e:4e:97:17:d9:51:db: aa:ee:f2:fa:86:60:d7:88:4c:52:0a:b5:76:25:86: dc:e3:f0:5c:cf:cb:ab:5a:f0:51:53:15:99:73:3d: 95:94:e9:f8:a9:b8:8b:5c:ca:b0:f8:3e:03:75:1b: aa:4d:c3:21:b3:75:32:95:fb:d0:b7:a6:e6:ee:25: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1C:E9:3C:A0:4D:59:2B:85:F1:9C:58:04:3E:0C:8A:2F:91:A0:F2 X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/60C72042052911F0A2361C50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.1.4.0/24 IPv6: 2401:44c0:3::/48 Signature Algorithm: sha256WithRSAEncryption aa:e1:1d:89:d8:18:c0:bd:97:d9:1c:bb:b4:ba:41:c6:40:c8: 8b:40:53:12:fa:80:eb:f6:b6:8a:3e:31:cf:fc:ef:2b:7d:2f: 22:1c:04:79:91:94:69:89:44:ad:2c:32:f4:02:80:d2:39:53: 50:d0:cb:95:7c:a6:a6:f1:6b:a3:ea:73:b5:45:4c:a4:cb:44: 01:50:c6:ca:8a:6c:99:5d:19:0f:f1:4d:76:93:e0:5e:65:ef: dc:ca:44:6c:8f:ff:d2:d6:d0:6e:74:0f:fe:b2:a9:96:19:67: 2d:ea:dc:1d:99:25:ae:4a:13:7e:7a:42:78:55:fb:6c:69:98: c0:45:a5:51:22:6a:a0:a3:e8:3e:3e:1d:ec:db:87:b1:62:4e: 97:9e:9a:55:01:c3:4d:1c:a7:92:99:ae:20:41:8b:39:f5:76: 69:3e:79:00:cc:2b:87:d4:e6:36:ef:53:93:2d:e7:b9:23:c0: 65:f0:56:e6:3b:1b:38:10:96:ee:d1:e6:da:e6:7a:d0:2c:c8: 5b:29:57:51:ae:cb:80:f2:3c:41:05:7a:55:5d:d9:fd:a5:95: 78:05:97:24:b2:7f:5d:86:59:ad:0a:0d:2d:f9:a1:81:eb:44: a1:9a:6f:72:3f:7d:70:62:36:e1:57:a8:c5:0f:77:97:82:ef: d0:9f:f9:ee -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjUxMjI5MDIyMjIwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTUxZTVkYi0wNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpj6d7eMq6PC195rS3vU9kT8XMozW/8jGkRNq1g7ulFVdYqJtNultNH3vxA/ TdxYO5p11+wD/djssdU3w/5Mn72wZn8hgHB2BKrMVHkw/Y1iWASzJsl+rt/MrY9A 4A/Bp6ka9PP2W4hRAaZhotJz0n44H4QO6wrYfuqhBrpYM46aVrSAEz9KmKYKUES6 kM84sQwRYROVeeFEaNHutXJyvCethnVGiM4SOOAVuVaWo6HdCOjBK+HtXYQ8hl5O lxfZUduq7vL6hmDXiExSCrV2JYbc4/Bcz8urWvBRUxWZcz2VlOn4qbiLXMqw+D4D dRuqTcMhs3UylfvQt6bm7iVYGQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMEc6Tyg TVkrhfGcWAQ+DIovkaDyMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkEyOTQvOTkyRjFEMEU0QUQ2MTFFRTk3QjUzRjcyQzRGOUFFMDIvNjBDNzIwNDIw NTI5MTFGMEEyMzYxQzUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABlAQQwDwQCAAIwCQMHACQBRMAAAzANBgkqhkiG9w0BAQsF AAOCAQEAquEdidgYwL2X2Ry7tLpBxkDIi0BTEvqA6/a2ij4xz/zvK30vIhwEeZGU aYlErSwy9AKA0jlTUNDLlXympvFro+pztUVMpMtEAVDGyopsmV0ZD/FNdpPgXmXv 3MpEbI//0tbQbnQP/rKplhlnLercHZklrkoTfnpCeFX7bGmYwEWlUSJqoKPoPj4d 7NuHsWJOl56aVQHDTRynkpmuIEGLOfV2aT55AMwrh9TmNu9Tky3nuSPAZfBW5jsb OBCW7tHm2uZ60CzIWylXUa7LgPI8QQV6VV3Z/aWVeAWXJLJ/XYZZrQoNLfmhgetE oZpvcj99cGI24VeoxQ93l4Lv0J/57g== -----END CERTIFICATE-----Generated at Fri Jan 9 15:55:38 2026 by rpki-client