This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/793486E0C11A11EF99C19012C4F9AE02.roa File: 793486E0C11A11EF99C19012C4F9AE02.roa (raw, json) Hash identifier: OPtqpqRnPLGJpIAYeUv7g54Eop2JkKe6/L6zebgYnmU= Subject key identifier: 72:B3:CE:C9:82:FF:39:0E:C6:D9:43:46:C9:41:BB:5F:80:BC:68:A8 Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919 Certificate serial: C3 Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/793486E0C11A11EF99C19012C4F9AE02.roa Signing time: Sat 13 Dec 2025 05:45:08 +0000 ROA not before: Sat 13 Dec 2025 05:45:08 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153466 IP address blocks: 2001:df4:b5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919 Validity Not Before: Dec 13 05:45:08 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693cfd64-7c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:32:7d:0a:fb:5f:f1:22:b0:69:a5:e2:a2:03: dd:bc:6c:fa:d6:8e:9a:01:d9:c2:db:47:1d:44:66: f8:69:f9:b7:00:d5:dd:76:7c:70:12:a9:37:d4:98: 96:0d:68:17:36:6f:95:ca:71:94:10:c9:92:51:ad: a1:40:e6:dc:01:38:32:3c:51:9a:24:e3:67:c0:9e: b4:a6:90:71:1a:b3:56:8d:4b:23:3b:2f:bf:50:6d: d6:5d:ec:7b:a4:38:44:36:02:ca:eb:4c:bf:bd:36: 93:1d:ba:f6:0f:27:43:c8:20:58:4c:cc:ab:af:fd: c7:6e:25:08:e2:fa:75:31:7d:f1:87:80:bd:11:82: 80:4a:fd:3b:6b:44:4a:7b:44:ea:ff:9d:fd:15:f5: 51:2f:3e:c4:fc:cf:c0:5d:35:55:0f:1e:12:12:87: 21:55:6b:2d:2e:d2:b2:88:30:f6:7a:d7:24:61:4d: d7:8e:8f:e5:49:80:1e:4d:ac:e0:72:b0:92:63:71: 64:0b:24:ed:59:3e:cf:b4:74:82:99:b5:48:a0:d7: 9f:0d:13:eb:17:ea:78:5b:9f:38:92:f9:12:fd:3c: 35:b4:17:1f:c2:ff:34:72:f4:f6:dd:db:dc:e9:50: e4:1a:31:39:14:f9:8a:57:0f:2b:71:2e:74:27:00: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B3:CE:C9:82:FF:39:0E:C6:D9:43:46:C9:41:BB:5F:80:BC:68:A8 X509v3 Authority Key Identifier: keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/793486E0C11A11EF99C19012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:df4:b5c0::/48 Signature Algorithm: sha256WithRSAEncryption 41:4a:ba:a0:01:67:e2:9d:fe:8f:3e:88:6f:46:19:01:c8:7e: 39:26:9f:a0:9b:0d:4e:a4:48:95:34:cb:87:9a:01:56:86:a2: 74:51:75:7b:d7:01:9d:e6:72:c0:cb:ea:24:18:e2:e3:55:1f: 37:10:a2:7c:91:1c:f2:da:c1:e9:7d:36:ad:19:cd:c8:27:aa: 9f:df:04:51:c3:37:c2:d6:04:71:08:70:e2:f6:03:81:ea:ce: 08:dc:20:8a:c1:07:a0:b4:f9:9f:59:57:ff:1d:56:a4:0d:b2: 68:8f:90:48:52:ac:5d:68:ab:f3:5f:5a:af:5d:58:43:48:3c: 4a:b2:8b:20:37:f5:56:fe:c9:c8:0b:62:89:bc:7f:0b:77:db: f0:3b:f9:f9:4a:8b:df:5b:32:33:d5:72:7d:93:93:2d:74:b0: ee:5f:67:e0:e8:84:e9:35:1a:fc:c9:b4:a7:b0:28:72:da:0a: e9:29:f6:62:bd:01:e7:9f:ad:0c:39:eb:8a:e4:d6:b1:9e:9a: 59:a3:85:10:ad:4e:15:47:c1:7a:65:ba:b2:2b:07:60:6e:fe: c5:3c:7c:fb:04:99:28:4e:a9:7f:a5:62:26:fc:84:d3:39:cb: e2:42:32:cc:61:1d:ef:fd:7a:71:39:7a:02:1f:81:95:e8:61: 45:21:c9:b7 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEI0RDIxNzkzOUEyNzUxOTM4RTA3NjU5QTc5NDg4NUE5 Qzg4NDE5MTkwHhcNMjUxMjEzMDU0NTA4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNjZmQ2NC03YzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjjJ9Cvtf8SKwaaXiogPdvGz61o6aAdnC20cdRGb4afm3ANXddnxwEqk31JiW DWgXNm+VynGUEMmSUa2hQObcATgyPFGaJONnwJ60ppBxGrNWjUsjOy+/UG3WXex7 pDhENgLK60y/vTaTHbr2DydDyCBYTMyrr/3HbiUI4vp1MX3xh4C9EYKASv07a0RK e0Tq/539FfVRLz7E/M/AXTVVDx4SEochVWstLtKyiDD2etckYU3Xjo/lSYAeTazg crCSY3FkCyTtWT7PtHSCmbVIoNefDRPrF+p4W584kvkS/Tw1tBcfwv80cvT23dvc 6VDkGjE5FPmKVw8rcS50JwA67QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHKzzsmC /zkOxtlDRslBu1+AvGioMB8GA1UdIwQYMBaAFLTSF5OaJ1GTjgdlmnlIhanIhBkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy81MEJEMjMwRUIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVaT09CMldhZVVpRnFjaUVH UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVCMTMvNTBCRDIzMEVCMTI4MTFFRkI3NTBBNTJCQzRGOUFFMDIvNzkzNDg2RTBD MTFBMTFFRjk5QzE5MDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAgAQ30tcAwDQYJKoZIhvcNAQELBQADggEBAEFKuqABZ+Kd /o8+iG9GGQHIfjkmn6CbDU6kSJU0y4eaAVaGonRRdXvXAZ3mcsDL6iQY4uNVHzcQ onyRHPLawel9Nq0Zzcgnqp/fBFHDN8LWBHEIcOL2A4HqzgjcIIrBB6C0+Z9ZV/8d VqQNsmiPkEhSrF1oq/NfWq9dWENIPEqyiyA39Vb+ycgLYom8fwt32/A7+flKi99b MjPVcn2Tky10sO5fZ+DohOk1GvzJtKewKHLaCukp9mK9AeefrQw564rk1rGemlmj hRCtThVHwXplurIrB2Bu/sU8fPsEmShOqX+lYib8hNM5y+JCMsxhHe/9enE5egIf gZXoYUUhybc= -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:14 2025 by rpki-client