This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa File: A8949F64D86E11E982BA0712C4F9AE02.roa (raw, json) Hash identifier: r6ZmJmXo5KHVG/yLQVWI5msuFaPg0Y7qHUR8OuUmDmQ= Subject key identifier: 29:7B:5C:F9:83:67:FA:C5:B2:1F:3C:1D:DD:0D:23:7A:EA:59:68:C4 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 138B Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa Signing time: Sat 20 Dec 2025 17:14:35 +0000 ROA not before: Sat 20 Dec 2025 17:14:35 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139653 IP address blocks: 2403:cfc0:1014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5003 (0x138b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 20 17:14:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6946d97b-90a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:ce:b1:3f:ea:87:58:36:03:78:b4:25:48: df:e2:c8:f4:c9:6b:ee:1b:0f:75:d5:93:e0:83:1f: 2b:ac:38:12:81:b3:95:a4:2e:ad:77:6d:a8:c9:94: ab:99:e4:11:2e:39:79:40:6d:c8:64:05:1c:89:b0: 4f:d0:56:cf:ec:63:ed:4d:7c:2d:11:bf:75:9d:2b: 0d:3f:ec:98:b0:0b:bd:8f:c4:1f:25:3f:64:ce:87: ef:db:02:4a:15:8a:91:19:2c:f5:d8:1a:f4:61:76: ef:1a:50:47:1b:a8:e7:99:99:d6:67:16:4e:72:50: 90:28:d4:ee:76:bb:f3:1b:86:76:58:c0:6c:20:03: 5a:05:35:7c:93:ab:19:99:13:a3:53:25:59:71:3f: 4a:bb:db:1a:12:f9:95:b0:8d:38:61:7e:9b:40:d8: 6c:49:1e:5d:c2:e9:17:50:ea:5c:bb:0c:bd:f3:62: 43:60:34:1a:fa:e6:80:e6:da:a0:b6:51:2f:23:52: 58:91:34:15:05:19:2b:33:75:a3:80:fa:9e:a4:92: d1:71:5b:5c:ae:9a:ca:36:4b:2b:8a:11:d3:5e:8e: b5:6d:6e:d7:0a:58:d7:10:1d:c4:5b:7b:e9:6f:85: 95:95:20:bc:c5:db:3a:65:9e:45:cb:d8:98:9e:f5: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7B:5C:F9:83:67:FA:C5:B2:1F:3C:1D:DD:0D:23:7A:EA:59:68:C4 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:1014::/48 Signature Algorithm: sha256WithRSAEncryption 65:f5:c3:e8:82:57:ae:4a:d8:4d:52:6d:aa:48:bf:19:60:9e: d8:4b:28:bc:be:82:28:39:69:f0:c1:5b:8f:87:c1:9f:02:59: b9:37:5a:81:aa:94:30:db:4d:d5:e1:b1:40:7e:31:73:e4:7c: e3:a8:52:4a:a7:57:21:b0:03:7a:89:c7:5d:fc:b6:8d:ce:ce: 80:57:9e:f3:c2:8f:67:b9:8c:2e:46:1f:e4:79:b6:da:be:70: 7d:22:65:76:11:5c:76:3f:da:4e:80:93:9a:61:61:d5:37:2f: 22:d2:4a:27:2c:43:01:17:77:5d:6f:c5:d3:1b:c8:71:b0:ee: 37:db:db:01:ec:10:53:10:f3:17:0d:c5:e2:a6:ca:b3:c0:ab: 9a:49:c5:22:30:e4:3b:d1:03:59:f8:3b:fc:3c:9d:5c:57:b8: 59:e2:79:a2:99:67:e4:3e:f3:3b:13:96:c1:8b:ee:1f:de:61: 50:91:a8:2c:df:b9:8c:00:d3:68:cd:fa:03:0c:9d:78:13:51: 34:b7:48:3d:3a:bb:7d:21:8b:d4:8a:e5:e7:88:0e:60:7b:50: b8:b0:e9:d8:2e:7a:06:a1:de:cc:9e:01:00:a8:14:bb:d4:3d: 48:b2:17:e0:70:8f:29:f5:b2:70:44:2a:06:27:dc:db:60:7b: bf:13:ff:4e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICE4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjUxMjIwMTcxNDM1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ2ZDk3Yi05MGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjnOsT/qh1g2A3i0JUjf4sj0yWvuGw911ZPggx8rrDgSgbOVpC6td22oyZSr meQRLjl5QG3IZAUcibBP0FbP7GPtTXwtEb91nSsNP+yYsAu9j8QfJT9kzofv2wJK FYqRGSz12Br0YXbvGlBHG6jnmZnWZxZOclCQKNTudrvzG4Z2WMBsIANaBTV8k6sZ mROjUyVZcT9Ku9saEvmVsI04YX6bQNhsSR5dwukXUOpcuwy982JDYDQa+uaA5tqg tlEvI1JYkTQVBRkrM3WjgPqepJLRcVtcrprKNksrihHTXo61bW7XCljXEB3EW3vp b4WVlSC8xds6ZZ5Fy9iYnvUXUwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCl7XPmD Z/rFsh88Hd0NI3rqWWjEMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvQTg5NDlGNjRE ODZFMTFFOTgyQkEwNzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkA8/AEBQwDQYJKoZIhvcNAQELBQADggEBAGX1w+iCV65K 2E1SbapIvxlgnthLKLy+gig5afDBW4+HwZ8CWbk3WoGqlDDbTdXhsUB+MXPkfOOo UkqnVyGwA3qJx138to3OzoBXnvPCj2e5jC5GH+R5ttq+cH0iZXYRXHY/2k6Ak5ph YdU3LyLSSicsQwEXd11vxdMbyHGw7jfb2wHsEFMQ8xcNxeKmyrPAq5pJxSIw5DvR A1n4O/w8nVxXuFnieaKZZ+Q+8zsTlsGL7h/eYVCRqCzfuYwA02jN+gMMnXgTUTS3 SD06u30hi9SK5eeIDmB7ULiw6dguegah3syeAQCoFLvUPUiyF+Bwjyn1snBEKgYn 3Ntge78T/04= -----END CERTIFICATE-----Generated at Sun Dec 21 07:24:34 2025 by rpki-client