This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/F99AFAFE1D5411EA921E0351C4F9AE02.roa File: F99AFAFE1D5411EA921E0351C4F9AE02.roa (raw, json) Hash identifier: xso6zKvBbi3wM6Wy7sgUcNmQLyVakEEliXt2454vT2g= Subject key identifier: CE:86:9A:5F:C6:2F:31:65:BC:00:2A:EF:6D:D9:15:FD:4A:83:85:E6 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 138D Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/F99AFAFE1D5411EA921E0351C4F9AE02.roa Signing time: Sat 20 Dec 2025 17:14:36 +0000 ROA not before: Sat 20 Dec 2025 17:14:36 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139882 IP address blocks: 2403:cfc0:1016::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5005 (0x138d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Dec 20 17:14:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6946d97c-df63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:32:b9:28:ae:33:6d:ab:50:9a:55:64:7d:7a: b8:c5:c1:ef:9f:96:83:00:08:01:d3:1b:86:61:58: 96:8f:10:7d:d7:e0:71:20:13:15:54:13:b0:1f:82: ac:bc:79:97:df:66:29:38:74:e0:c5:c3:46:5a:80: 38:74:22:ad:9f:b2:07:c9:da:a2:b9:e6:3f:e3:fb: 99:a8:2a:90:d5:76:f1:51:d1:8b:8f:7e:60:f9:dc: e5:c7:e1:3f:bb:d8:1c:6e:d0:6a:64:2b:1c:95:a4: a2:af:b1:86:ea:ad:d2:6c:e8:ce:81:16:de:78:3a: 1c:bd:1f:fd:18:14:af:66:c1:76:60:8f:7d:89:23: c0:93:b1:7a:ff:37:a9:f8:3a:38:50:17:61:f8:81: d4:2d:fb:06:a2:c7:6e:9c:83:ec:ff:09:94:8a:ee: cd:83:25:94:34:fa:84:b1:54:7f:f5:de:23:f3:f1: 6f:ea:7f:2c:90:e0:6f:3a:7a:d6:e4:e0:2f:43:30: 4d:d1:3d:38:be:14:c3:ad:12:f3:dc:58:96:1e:33: 9a:78:ce:52:ba:d1:64:42:ed:ad:d9:13:a6:f5:64: 91:4a:dc:df:1e:d3:89:d0:76:0d:e8:bd:36:64:6c: f3:65:16:a4:f5:7c:76:d5:6b:17:4c:a5:c5:87:d7: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:86:9A:5F:C6:2F:31:65:BC:00:2A:EF:6D:D9:15:FD:4A:83:85:E6 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/F99AFAFE1D5411EA921E0351C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2403:cfc0:1016::/48 Signature Algorithm: sha256WithRSAEncryption 08:a9:14:58:b0:19:d5:0e:25:80:0a:bd:5b:58:15:26:45:ef: b6:83:26:8b:7d:79:09:01:f4:73:6d:40:aa:3a:86:da:f5:92: 62:5f:7a:1b:09:70:0d:1c:83:ab:eb:4d:83:e1:4d:58:0d:90: d4:5b:cf:11:e1:20:8e:2e:e7:60:7e:57:4a:3f:ef:f9:46:83: e8:ff:71:26:6b:a4:fe:b2:4c:1f:4a:c7:cf:83:4a:25:87:c0: 11:27:9c:17:d0:6a:16:cf:2a:68:a8:0d:78:57:71:e1:70:aa: 3f:c8:5e:35:68:b7:c0:77:9f:70:fe:a7:8c:08:cb:7d:fd:91: 93:eb:1b:df:00:69:ae:a6:e3:d9:ff:96:e9:28:c4:80:cd:b6: b7:3a:1c:a9:c4:be:8c:56:8a:ab:a2:ca:66:c0:0a:09:42:65: 6b:c1:d0:9f:9f:67:b6:66:01:6d:8d:3a:27:df:ae:fe:f9:89: cb:4a:8f:80:58:cf:34:60:3a:a9:41:9f:b7:15:79:5a:06:64: 4c:7b:34:1d:4f:81:f5:46:90:c1:ab:db:4e:98:b5:2c:4f:b7: 7c:f2:3f:43:1e:99:12:7d:38:ef:65:31:0a:3d:77:10:89:6d: 46:7b:6b:2b:db:7f:d0:36:3b:4a:88:9d:77:fe:74:b3:c8:2d: 3c:fa:69:63 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICE40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjUxMjIwMTcxNDM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQ2ZDk3Yy1kZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzK5KK4zbatQmlVkfXq4xcHvn5aDAAgB0xuGYViWjxB91+BxIBMVVBOwH4Ks vHmX32YpOHTgxcNGWoA4dCKtn7IHydqiueY/4/uZqCqQ1XbxUdGLj35g+dzlx+E/ u9gcbtBqZCsclaSir7GG6q3SbOjOgRbeeDocvR/9GBSvZsF2YI99iSPAk7F6/zep +Do4UBdh+IHULfsGosdunIPs/wmUiu7NgyWUNPqEsVR/9d4j8/Fv6n8skOBvOnrW 5OAvQzBN0T04vhTDrRLz3FiWHjOaeM5SutFkQu2t2ROm9WSRStzfHtOJ0HYN6L02 ZGzzZRak9Xx21WsXTKXFh9ccXwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFM6Gml/G LzFlvAAq723ZFf1Kg4XmMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNjE2NjZDMEVENjg5MTFFOEI2ODExNDMzQzRGOUFFMDIvRjk5QUZBRkUx RDU0MTFFQTkyMUUwMzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkA8/AEBYwDQYJKoZIhvcNAQELBQADggEBAAipFFiwGdUO JYAKvVtYFSZF77aDJot9eQkB9HNtQKo6htr1kmJfehsJcA0cg6vrTYPhTVgNkNRb zxHhII4u52B+V0o/7/lGg+j/cSZrpP6yTB9Kx8+DSiWHwBEnnBfQahbPKmioDXhX ceFwqj/IXjVot8B3n3D+p4wIy339kZPrG98Aaa6m49n/lukoxIDNtrc6HKnEvoxW iquiymbACglCZWvB0J+fZ7ZmAW2NOiffrv75ictKj4BYzzRgOqlBn7cVeVoGZEx7 NB1PgfVGkMGr206YtSxPt3zyP0MemRJ9OO9lMQo9dxCJbUZ7ayvbf9A2O0qInXf+ dLPILTz6aWM= -----END CERTIFICATE-----Generated at Sun Dec 21 07:24:59 2025 by rpki-client