This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/2812D988D68111F09571D1A368D3641D.roa File: 2812D988D68111F09571D1A368D3641D.roa (raw, json) Hash identifier: 8AVBXqzu/k5TWiZVCIiuuT3LvFSHmugATjSSQTnC014= Subject key identifier: 09:F9:1C:C7:C8:18:9F:2E:35:33:83:35:04:D8:79:B1:39:37:BE:44 Certificate issuer: /CN=A9136067/serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C Certificate serial: 02 Authority key identifier: F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/2812D988D68111F09571D1A368D3641D.roa Signing time: Thu 11 Dec 2025 11:04:26 +0000 ROA not before: Thu 11 Dec 2025 11:04:26 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 154409 IP address blocks: 2001:df6:6ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136067, serialNumber=F503B965595CA9DA4188E4D9FD72C03FE1D6F68C Validity Not Before: Dec 11 11:04:26 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=693aa53a-a217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:2b:1f:a1:88:cd:36:34:5e:7a:fc:b4:41: 38:eb:48:d8:0b:d9:57:cd:1c:ad:70:4e:e5:9c:60: b6:58:75:13:33:c9:3d:a0:89:a7:84:b3:be:af:10: c4:25:02:00:9c:d0:99:8e:b8:be:53:1f:5a:f9:9a: 9c:a8:89:41:bb:55:70:a0:25:cb:32:db:83:ad:9f: 0e:6f:05:af:83:fe:e8:b7:e1:bd:a9:f8:59:4b:09: 0e:ba:7c:e8:f5:58:e6:f4:5c:72:a7:1c:45:3c:e5: 81:e7:28:59:f3:e7:bf:d1:db:bb:70:75:80:c4:d0: 94:0f:24:24:ce:34:1f:ee:6e:d8:90:33:3b:0f:0a: fa:f5:dc:8b:7a:89:9c:b1:57:49:24:f4:f9:ba:1c: 5d:13:fa:cf:04:f5:6e:1b:fd:68:3a:41:27:6d:e4: b8:39:a6:db:50:63:63:11:74:f4:61:84:79:cd:bc: de:cd:c2:9a:61:ca:70:1d:02:11:83:22:ef:a9:71: a7:6c:71:08:38:ba:ea:e9:99:48:72:21:3f:80:9d: bb:60:d1:2b:61:bf:ba:14:05:8c:ea:b7:82:03:83: 3b:b5:42:25:6a:83:7b:f3:c3:3d:c2:4a:d9:84:f6: 73:bd:dc:34:ad:5b:54:a7:ec:6b:8f:a9:91:2d:26: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F9:1C:C7:C8:18:9F:2E:35:33:83:35:04:D8:79:B1:39:37:BE:44 X509v3 Authority Key Identifier: keyid:F5:03:B9:65:59:5C:A9:DA:41:88:E4:D9:FD:72:C0:3F:E1:D6:F6:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9QO5ZVlcqdpBiOTZ_XLAP-HW9ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136067/387ED78CD68011F0B1B4C7A067D3641D/2812D988D68111F09571D1A368D3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df6:6ac0::/48 Signature Algorithm: sha256WithRSAEncryption c4:bd:29:74:41:9c:28:94:9e:57:2c:6e:df:02:1f:e8:df:f0: 34:d2:b9:32:19:9e:2b:3e:2e:20:b5:64:f5:9a:70:aa:22:2b: bd:ff:08:4f:3d:fd:b2:c7:1e:00:4e:fd:64:f2:2b:ab:ca:a6: c3:e4:8d:10:88:74:ad:c3:58:19:bd:ad:be:f7:0a:d2:4e:7b: 9e:bc:88:b8:f8:42:f3:79:4b:df:fb:38:a0:3f:3d:55:b5:aa: 88:0b:bd:ed:4e:ab:97:f7:2b:0c:09:93:c6:69:3a:6b:13:21: 43:bb:f6:9c:66:e3:ec:1f:df:6d:31:4a:ff:31:76:87:f8:da: 5c:94:cd:8a:bd:02:3f:db:80:45:d5:63:1f:3a:15:00:6b:a6: 3e:af:7f:83:d2:a2:13:53:f2:34:c0:0d:6a:9b:30:19:87:69: f8:84:a1:ba:55:eb:1b:17:53:0e:e1:22:9b:de:7b:b5:1c:6c: 57:eb:8b:09:48:68:50:04:7e:1d:cf:b6:14:6b:b1:71:f6:f0: b8:5c:f2:90:54:f1:c0:d1:e7:1a:ef:75:7e:12:b2:f6:ee:8a: 1f:26:36:e3:0a:12:2d:52:50:e5:c1:f8:9f:5c:3e:e5:2e:82: 04:e3:76:9d:15:35:d0:2c:cb:b6:ed:24:e2:92:cd:c2:e0:de: 19:19:cd:c3 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjA2NzExMC8GA1UEBRMoRjUwM0I5NjU1OTVDQTlEQTQxODhFNEQ5RkQ3MkMwM0ZF MUQ2RjY4QzAeFw0yNTEyMTExMTA0MjZaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5M2FhNTNhLWEyMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTtCsfoYjNNjReevy0QTjrSNgL2VfNHK1wTuWcYLZYdRMzyT2giaeEs76vEMQl AgCc0JmOuL5TH1r5mpyoiUG7VXCgJcsy24Otnw5vBa+D/ui34b2p+FlLCQ66fOj1 WOb0XHKnHEU85YHnKFnz57/R27twdYDE0JQPJCTONB/ubtiQMzsPCvr13It6iZyx V0kk9Pm6HF0T+s8E9W4b/Wg6QSdt5Lg5pttQY2MRdPRhhHnNvN7NwpphynAdAhGD Iu+pcadscQg4uurpmUhyIT+Anbtg0Sthv7oUBYzqt4IDgzu1QiVqg3vzwz3CStmE 9nO93DStW1Sn7GuPqZEtJvRlAgMBAAGjggKYMIIClDAdBgNVHQ4EFgQUCfkcx8gY ny41M4M1BNh5sTk3vkQwHwYDVR0jBBgwFoAU9QO5ZVlcqdpBiOTZ/XLAP+HW9oww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MDY3LzM4N0VENzhDRDY4 MDExRjBCMUI0QzdBMDY3RDM2NDFELzlRTzVaVmxjcWRwQmlPVFpfWExBUC1IVzlv dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVFPNVpWbGNxZHBCaU9UWl9YTEFQLUhXOW93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjA2Ny8zODdFRDc4Q0Q2ODAxMUYwQjFCNEM3QTA2N0QzNjQxRC8yODEyRDk4OEQ2 ODExMUYwOTU3MUQxQTM2OEQzNjQxRC5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACABDfZqwDANBgkqhkiG9w0BAQsFAAOCAQEAxL0pdEGcKJSe Vyxu3wIf6N/wNNK5MhmeKz4uILVk9ZpwqiIrvf8ITz39ssceAE79ZPIrq8qmw+SN EIh0rcNYGb2tvvcK0k57nryIuPhC83lL3/s4oD89VbWqiAu97U6rl/crDAmTxmk6 axMhQ7v2nGbj7B/fbTFK/zF2h/jaXJTNir0CP9uARdVjHzoVAGumPq9/g9KiE1Py NMANapswGYdp+IShulXrGxdTDuEim957tRxsV+uLCUhoUAR+Hc+2FGuxcfbwuFzy kFTxwNHnGu91fhKy9u6KHyY24woSLVJQ5cH4n1w+5S6CBON2nRU10CzLtu0k4pLN wuDeGRnNww== -----END CERTIFICATE-----Generated at Fri Dec 19 19:08:56 2025 by rpki-client