This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/486F76B812BF11F0BA15A929C4F9AE02.roa File: 486F76B812BF11F0BA15A929C4F9AE02.roa (raw, json) Hash identifier: R8eJxtItRazPsCZ9nlDjiUaGQnio5Z28G0pGlAoxT8w= Subject key identifier: 2A:68:F2:9B:0D:B1:AF:D3:CB:7E:3A:4C:B8:FA:2A:B3:05:52:DA:72 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 0184 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/486F76B812BF11F0BA15A929C4F9AE02.roa Signing time: Mon 05 Jan 2026 09:10:52 +0000 ROA not before: Mon 05 Jan 2026 09:10:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 203363 IP address blocks: 2401:8360:3::/48 maxlen: 48 2401:8360:4::/48 maxlen: 48 2401:8360:7::/48 maxlen: 48 2401:8360:8::/48 maxlen: 48 2401:8360:9::/48 maxlen: 48 2401:8360:a::/48 maxlen: 48 2401:8360:a2::/48 maxlen: 48 2401:8360:a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Jan 5 09:10:52 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=695b801c-3ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:51:ee:42:90:d7:00:b1:dd:d2:47:01:a6: 3d:2c:88:36:e1:1d:0a:e9:76:98:45:1b:2f:1a:68: 98:86:fe:4a:37:ec:7e:42:0e:d6:11:69:d9:fd:bb: d0:0f:a9:5a:58:2c:eb:c3:57:b6:f2:b1:ec:bc:10: 1a:84:c1:b1:76:dc:1f:05:4f:4f:11:2f:a3:74:fa: 42:8c:f2:07:cb:00:66:d3:21:e4:2b:0a:99:ad:e6: 01:db:c8:e7:bb:3c:a2:66:96:e0:41:d4:ba:9b:27: 17:f1:2f:9b:88:57:b4:52:35:6b:a7:e5:74:f1:40: 93:ed:06:0a:f4:1a:5f:e1:4d:a1:ac:88:df:b6:72: 29:27:55:49:00:b1:70:f8:67:0d:b2:6c:7e:e5:b1: 31:bd:0a:b9:19:14:3e:25:94:68:1d:a5:e3:82:cf: ae:48:3e:92:7e:31:6a:0c:1d:3d:e0:e9:ad:7c:bb: 7f:e0:4d:9b:47:3c:31:5a:c8:8a:96:83:b2:36:32: 7c:8f:75:d1:79:bc:80:45:fd:c3:36:25:db:94:68: 79:39:08:e2:d4:0d:ac:71:01:ff:6f:ec:f0:cd:bf: e3:3d:ef:f0:60:64:1e:21:e3:b5:97:20:89:b2:89: 93:bb:57:68:2f:68:d6:57:27:41:97:20:66:fd:91: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:68:F2:9B:0D:B1:AF:D3:CB:7E:3A:4C:B8:FA:2A:B3:05:52:DA:72 X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/486F76B812BF11F0BA15A929C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:8360:3::-2401:8360:4:ffff:ffff:ffff:ffff:ffff 2401:8360:7::-2401:8360:a:ffff:ffff:ffff:ffff:ffff 2401:8360:a2::/47 Signature Algorithm: sha256WithRSAEncryption 13:a2:1d:57:52:e3:8f:ae:44:93:f5:58:41:91:01:2f:2d:bc: 9d:ee:df:fc:e6:b4:84:15:68:74:93:42:e3:fc:b8:7c:53:52: 8a:64:23:54:62:8f:bb:a9:bb:0c:b4:3d:86:6f:4f:c2:cd:9a: 45:12:59:b5:32:fd:c6:53:ba:f5:64:52:36:76:62:49:7f:9a: a3:f1:9a:e7:80:e3:91:40:fd:31:1c:ad:55:ee:73:e6:76:92: 68:a3:31:ee:97:e8:42:4c:b6:a0:90:bd:05:be:5c:a0:d8:a2: 67:40:15:ad:fd:96:dc:7e:e9:4a:c9:e8:a5:7f:77:d8:fb:1f: 75:95:a2:f4:a8:3f:2f:33:3a:8a:c6:07:c0:ab:70:57:62:7c: c5:29:21:f7:8a:45:c7:75:be:34:8f:d9:00:55:91:b3:30:21: ca:f6:b1:5e:b9:a1:b8:85:a0:1d:d1:fe:36:a3:36:af:c7:7c: d8:4d:30:7c:2d:6f:1a:16:90:c5:71:d6:c5:29:71:11:63:5d: 3b:fc:d7:2e:60:dd:bd:4b:77:65:ba:27:77:2c:89:9a:de:eb: a8:71:4d:95:3f:5e:3b:99:62:b7:f3:ec:d8:fc:ee:3e:99:44: 68:23:2f:74:f3:4a:12:0a:b1:f9:e2:ce:ce:fa:90:55:16:98: 4e:65:77:15 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjYwMTA1MDkxMDUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDDA02OTViODAxYy0zZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDhR7kKQ1wCx3dJHAaY9LIg24R0K6XaYRRsvGmiYhv5KN+x+Qg7WEWnZ/bvQ D6laWCzrw1e28rHsvBAahMGxdtwfBU9PES+jdPpCjPIHywBm0yHkKwqZreYB28jn uzyiZpbgQdS6mycX8S+biFe0UjVrp+V08UCT7QYK9Bpf4U2hrIjftnIpJ1VJALFw +GcNsmx+5bExvQq5GRQ+JZRoHaXjgs+uSD6SfjFqDB094OmtfLt/4E2bRzwxWsiK loOyNjJ8j3XRebyARf3DNiXblGh5OQji1A2scQH/b+zwzb/jPe/wYGQeIeO1lyCJ somTu1doL2jWVydBlyBm/ZF6RwIDAQABo4ICwDCCArwwHQYDVR0OBBYEFCpo8psN sa/Ty346TLj6KrMFUtpyMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBENzIvOEIyNUFEMDREMjJCMTFFRUJDMTQ1MzQzQzRGOUFFMDIvNDg2Rjc2Qjgx MkJGMTFGMEJBMTVBOTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MDcEAgACMDEwEgMHACQBg2AAAwMHACQBg2AABDASAwcAJAGDYAAHAwcAJAGD YAAKAwcBJAGDYACiMA0GCSqGSIb3DQEBCwUAA4IBAQAToh1XUuOPrkST9VhBkQEv Lbyd7t/85rSEFWh0k0Lj/Lh8U1KKZCNUYo+7qbsMtD2Gb0/CzZpFElm1Mv3GU7r1 ZFI2dmJJf5qj8ZrngOORQP0xHK1V7nPmdpJoozHul+hCTLagkL0Fvlyg2KJnQBWt /ZbcfulKyeilf3fY+x91laL0qD8vMzqKxgfAq3BXYnzFKSH3ikXHdb40j9kAVZGz MCHK9rFeuaG4haAd0f42ozavx3zYTTB8LW8aFpDFcdbFKXERY107/NcuYN29S3dl uid3LIma3uuocU2VP147mWK38+zY/O4+mURoIy9080oSCrH54s7O+pBVFphOZXcV -----END CERTIFICATE-----Generated at Sun Jan 11 06:50:35 2026 by rpki-client