This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/B12A39803A2A11F09E37DB48C4F9AE02.roa File: B12A39803A2A11F09E37DB48C4F9AE02.roa (raw, json) Hash identifier: ZBkz59AFukUtQQhUm9VALKebhx4SAnS6KuBa7oNjdTc= Subject key identifier: 35:43:9B:12:C7:7B:81:88:9B:68:19:07:4F:D7:1B:96:2B:6E:6B:CD Certificate issuer: /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Certificate serial: 74 Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/B12A39803A2A11F09E37DB48C4F9AE02.roa Signing time: Thu 01 Jan 2026 06:24:34 +0000 ROA not before: Thu 01 Jan 2026 06:24:34 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153320 IP address blocks: 2401:d960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 06:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Validity Not Before: Jan 1 06:24:34 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69561322-c421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:d7:ff:c3:0d:00:2e:c6:6a:aa:fc:77:94: 7d:8e:76:d4:53:99:e3:60:d2:e0:89:15:85:9a:80: 3d:fe:fa:67:9b:9f:11:67:54:7b:f1:71:98:b0:28: ec:5e:1e:3b:02:cc:9c:de:4c:79:ec:de:9c:77:e5: be:76:bd:c1:bc:3b:56:e2:37:a5:9e:96:08:7f:92: ab:5b:88:41:8c:be:c7:22:4f:88:e7:71:7c:c5:63: fc:cc:a7:3f:1c:54:31:7c:8e:7e:de:a8:41:67:bb: 48:26:c4:4f:cf:c8:d5:91:e9:ec:2e:74:f1:29:35: c2:c5:19:a2:28:38:77:18:3a:60:29:f8:a5:db:cb: 31:cd:79:e2:08:23:c8:0d:04:0d:5a:a8:67:68:48: af:a5:aa:cc:75:ba:39:31:50:a0:b3:79:dc:56:b2: 87:cc:16:40:a7:84:6b:5e:cb:0f:ec:7a:2f:58:b8: 3e:c7:a4:68:96:a2:ca:32:9e:d1:4a:ba:24:75:63: 09:41:f1:c1:13:f0:de:bc:19:6f:9a:59:c6:cc:7f: 92:8c:af:3b:c8:c4:19:14:0d:4d:16:2f:37:f5:f4: f8:99:60:9f:71:e3:a2:89:20:d1:ad:72:7a:f5:99: 8a:40:73:16:c8:db:31:6a:0b:dc:08:98:de:86:dc: cc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:43:9B:12:C7:7B:81:88:9B:68:19:07:4F:D7:1B:96:2B:6E:6B:CD X509v3 Authority Key Identifier: keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/B12A39803A2A11F09E37DB48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d960::/32 Signature Algorithm: sha256WithRSAEncryption 1b:08:73:bc:63:08:d1:ca:ee:01:c3:d8:1d:1c:94:1e:1e:81: 63:33:60:79:04:62:8d:2a:6a:e5:16:de:e7:4b:b9:b1:18:2d: c0:da:31:9a:1e:3e:3b:eb:5f:93:1e:34:2a:ce:b1:7e:db:57: ee:68:88:3e:a3:c5:d7:dd:31:3c:73:c9:cc:fd:d5:ad:23:03: 41:60:ff:e7:5d:18:2b:4c:3a:60:63:52:92:a7:bf:f6:07:5e: fe:2f:2d:ef:9c:64:0f:69:b3:1a:5d:b6:a6:5b:18:47:e2:81: 9b:bd:0f:02:e9:55:d0:3a:7f:1e:33:46:a0:b0:e1:2a:a4:00: 9e:08:cd:0d:9a:a9:89:7d:86:e9:2b:21:fc:53:33:c6:a6:f0: 32:1b:76:e5:e3:6a:49:3d:14:fb:1d:30:ab:01:6e:da:83:26: 3c:c9:1d:29:2b:5f:3f:d5:0f:7e:77:79:12:2b:80:38:c4:bf: ef:d4:06:57:a3:a3:03:b7:a2:f7:89:ff:e4:8c:06:90:a8:3e: bf:f5:07:24:69:14:68:6f:e7:19:d7:9f:b1:09:4b:f0:7b:39: e0:99:13:d9:5c:46:cb:f3:c9:99:99:07:1f:e8:9d:f9:f5:18: 38:67:ae:41:70:ae:70:da:9d:2f:55:63:57:48:43:84:5a:12: 30:58:41:67 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE3 MDk3NTExMC8GA1UEBRMoMEM2ODU4MjI4QzMwMTc0ODJCREM3RjM5ODFFODk4Qjk1 NkRBQTAyOTAeFw0yNjAxMDEwNjI0MzRaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NTYxMzIyLWM0MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCTntf/ww0ALsZqqvx3lH2OdtRTmeNg0uCJFYWagD3++mebnxFnVHvxcZiwKOxe HjsCzJzeTHns3px35b52vcG8O1biN6Welgh/kqtbiEGMvsciT4jncXzFY/zMpz8c VDF8jn7eqEFnu0gmxE/PyNWR6ewudPEpNcLFGaIoOHcYOmAp+KXbyzHNeeIII8gN BA1aqGdoSK+lqsx1ujkxUKCzedxWsofMFkCnhGteyw/sei9YuD7HpGiWosoyntFK uiR1YwlB8cET8N68GW+aWcbMf5KMrzvIxBkUDU0WLzf19PiZYJ9x46KJINGtcnr1 mYpAcxbI2zFqC9wImN6G3MyHAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUNUObEsd7 gYibaBkHT9cblitua80wHwYDVR0jBBgwFoAUDGhYIowwF0gr3H85geiYuVbaoCkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTc1LzY3QzdBNDJBM0Ey NjExRjBCQ0NGNUUxRkM0RjlBRTAyL0RHaFlJb3d3RjBncjNIODVnZWlZdVZiYW9D ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREdoWUlvd3dGMGdyM0g4NWdlaVl1VmJhb0NrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk3NS82N0M3QTQyQTNBMjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9CMTJBMzk4MDNB MkExMUYwOUUzN0RCNDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQB2WAwDQYJKoZIhvcNAQELBQADggEBABsIc7xjCNHK7gHD 2B0clB4egWMzYHkEYo0qauUW3udLubEYLcDaMZoePjvrX5MeNCrOsX7bV+5oiD6j xdfdMTxzycz91a0jA0Fg/+ddGCtMOmBjUpKnv/YHXv4vLe+cZA9psxpdtqZbGEfi gZu9DwLpVdA6fx4zRqCw4SqkAJ4IzQ2aqYl9hukrIfxTM8am8DIbduXjakk9FPsd MKsBbtqDJjzJHSkrXz/VD353eRIrgDjEv+/UBlejowO3oveJ/+SMBpCoPr/1ByRp FGhv5xnXn7EJS/B7OeCZE9lcRsvzyZmZBx/onfn1GDhnrkFwrnDanS9VY1dIQ4Ra EjBYQWc= -----END CERTIFICATE-----Generated at Thu Jan 1 09:06:46 2026 by rpki-client