This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/9EE31802996B11E9B3FEED46C4F9AE02.roa File: 9EE31802996B11E9B3FEED46C4F9AE02.roa (raw, json) Hash identifier: GtCwmWc8gA6Yj8DbZ5w0Aat1zBOR2vnVTBDt8/HEVGA= Subject key identifier: E1:67:96:6A:4B:4B:A1:97:34:8A:8D:46:1C:B4:AA:E9:0B:5D:63:36 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 138A Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/9EE31802996B11E9B3FEED46C4F9AE02.roa Signing time: Sat 20 Dec 2025 17:14:34 +0000 ROA not before: Sat 20 Dec 2025 17:14:34 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139264 IP address blocks: 2403:cfc0:100b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5002 (0x138a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 20 17:14:34 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6946d97a-a3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:82:06:99:9b:8f:61:ea:f6:7e:74:91:3b: 7b:91:df:63:4e:d3:9e:83:5d:2b:35:24:c6:17:d0: 5f:23:ad:c1:95:0a:2c:d8:f0:85:e9:04:86:fa:83: de:ce:a0:ee:aa:1d:dd:95:ca:83:e8:b6:ec:d4:bf: 12:4c:40:c2:18:fa:3f:78:9f:c3:50:96:4d:07:8a: 1b:fa:ca:1b:61:3e:15:53:a1:98:c0:fe:a3:9d:e0: 9f:81:19:fa:10:97:1d:d8:57:18:ea:19:2f:4d:42: fe:f9:47:6f:24:75:99:83:be:41:cd:b2:07:35:b2: c2:35:0f:d4:05:b9:ce:d3:c7:38:1d:3c:82:f5:be: c4:86:3c:77:60:a3:ab:f3:12:bb:27:23:55:63:99: 3e:88:47:cc:ba:4c:46:f9:d3:1e:2b:72:a3:e4:7e: 3a:a7:22:ac:88:bd:b9:a2:86:26:c9:b5:fa:e4:be: 45:60:f3:03:a3:8d:43:39:37:ff:5a:d3:79:f1:56: c1:45:c2:22:03:74:e7:42:1f:2e:9a:fc:26:41:61: a3:d7:41:cc:88:5b:7f:f3:11:b4:0a:f7:55:75:36: c8:19:e6:c2:43:20:30:62:7e:8c:0e:cb:2a:55:20: 67:ac:8f:4d:5d:6d:97:15:24:dd:40:38:9d:a6:1a: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:67:96:6A:4B:4B:A1:97:34:8A:8D:46:1C:B4:AA:E9:0B:5D:63:36 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/9EE31802996B11E9B3FEED46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:100b::/48 Signature Algorithm: sha256WithRSAEncryption 4d:9b:8d:22:d3:de:06:5b:98:ba:09:8e:8b:a5:4c:e0:e1:56: e8:fc:8a:b3:e1:27:36:b0:17:d2:1a:79:42:f4:f4:c4:90:f8: 38:69:26:10:fa:07:00:91:05:18:1b:77:a1:bb:58:d0:78:1b: ec:30:7c:5c:33:63:e6:96:5d:83:3c:df:15:1a:09:91:63:48: e6:b3:b0:1c:7c:8d:b4:51:4d:13:d2:13:e7:a2:2a:63:02:59: df:cd:e7:00:dc:e3:dc:95:85:47:fa:16:20:19:8b:cd:b5:31: 43:64:99:90:8e:a8:6d:37:ac:b1:46:32:9c:14:e9:29:82:65: 4d:58:d0:37:f9:5e:cc:ad:a4:a4:fe:c8:b3:25:6f:34:77:b4: f3:e2:07:ac:f4:b7:c8:a8:b1:ab:4c:50:3e:4a:56:ff:ef:f2: d1:50:f7:6e:c3:ca:50:af:3c:35:11:aa:bb:40:4a:48:71:9d: 19:b4:20:61:ea:5a:86:71:f5:ec:e3:46:5a:91:d5:bb:78:d4: 50:4c:f4:ac:e7:ad:6a:ee:d7:f0:96:22:a5:0f:f1:6d:d7:ff: f8:8e:35:3e:d3:ea:6a:94:77:f2:85:ce:18:40:3a:f5:c5:da: 4e:e6:b1:01:ac:c2:d4:c6:fd:bb:a5:12:af:d7:d9:05:03:2c: 1e:68:8a:56 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICE4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjUxMjIwMTcxNDM0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ2ZDk3YS1hM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9mCBpmbj2Hq9n50kTt7kd9jTtOeg10rNSTGF9BfI63BlQos2PCF6QSG+oPe zqDuqh3dlcqD6Lbs1L8STEDCGPo/eJ/DUJZNB4ob+sobYT4VU6GYwP6jneCfgRn6 EJcd2FcY6hkvTUL++UdvJHWZg75BzbIHNbLCNQ/UBbnO08c4HTyC9b7Ehjx3YKOr 8xK7JyNVY5k+iEfMukxG+dMeK3Kj5H46pyKsiL25ooYmybX65L5FYPMDo41DOTf/ WtN58VbBRcIiA3TnQh8umvwmQWGj10HMiFt/8xG0CvdVdTbIGebCQyAwYn6MDssq VSBnrI9NXW2XFSTdQDidphrfhwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOFnlmpL S6GXNIqNRhy0qukLXWM2MB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvOUVFMzE4MDI5 OTZCMTFFOUIzRkVFRDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkA8/AEAswDQYJKoZIhvcNAQELBQADggEBAE2bjSLT3gZb mLoJjoulTODhVuj8irPhJzawF9IaeUL09MSQ+DhpJhD6BwCRBRgbd6G7WNB4G+ww fFwzY+aWXYM83xUaCZFjSOazsBx8jbRRTRPSE+eiKmMCWd/N5wDc49yVhUf6FiAZ i821MUNkmZCOqG03rLFGMpwU6SmCZU1Y0Df5XsytpKT+yLMlbzR3tPPiB6z0t8io satMUD5KVv/v8tFQ927DylCvPDURqrtASkhxnRm0IGHqWoZx9ezjRlqR1bt41FBM 9KznrWru1/CWIqUP8W3X//iONT7T6mqUd/KFzhhAOvXF2k7msQGswtTG/bulEq/X 2QUDLB5oilY= -----END CERTIFICATE-----Generated at Sun Dec 21 07:24:57 2025 by rpki-client