This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9CA607DA3C8411F0BDA85229C4F9AE02.roa File: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (raw, json) Hash identifier: QE//TTd8y+NKPY9SFnvheS4pfkoCI9qiU5fU+9iwaFc= Subject key identifier: 4D:2A:44:CA:46:60:5E:5D:22:FE:74:DA:ED:A1:6A:15:F2:70:26:8A Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 0243 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9CA607DA3C8411F0BDA85229C4F9AE02.roa Signing time: Mon 08 Dec 2025 08:04:24 +0000 ROA not before: Mon 08 Dec 2025 08:04:24 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150785 IP address blocks: 2400:e3e0:c000::/36 maxlen: 36 2400:e3e0:e000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Jan 2026 01:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: Dec 8 08:04:24 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69368688-0acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:14:49:85:11:fe:f1:96:e8:d0:06:48:c0: f1:d8:24:41:97:87:0a:13:52:aa:5e:e7:00:1e:45: 86:db:07:7e:7f:c8:43:54:39:b6:9a:1b:20:04:7a: 7d:9a:a1:32:61:0e:89:82:4f:14:65:8d:e6:eb:9c: 2c:42:5f:e7:63:af:89:1d:f9:ab:d4:b6:a2:25:78: 35:99:08:a2:70:62:f8:10:a0:a7:52:a8:39:fd:58: e2:d4:a8:e6:3a:e6:28:7f:21:14:d8:cd:88:f7:31: 55:7f:54:ae:61:3e:39:49:78:aa:7a:e6:da:dc:94: 2f:a1:60:93:2e:f5:ce:16:2f:49:8a:54:52:63:1f: 9c:be:bd:30:95:00:a0:e6:55:68:53:a3:fe:8c:9d: 23:42:15:24:98:e0:0b:32:aa:ce:8d:fc:b9:66:6b: 37:c2:de:5a:4d:b1:a5:ef:ff:0b:39:f7:1f:ee:73: 26:e5:60:f6:94:0e:6c:20:9e:d7:87:83:41:5d:91: 65:ff:27:44:b1:9e:98:bf:5d:df:f9:bc:d6:da:34: e5:06:80:10:e3:fc:0b:a0:b5:91:22:af:3c:bd:8e: 5c:b0:5c:a5:ed:e5:15:00:f3:6f:0f:1a:7a:d3:ce: c2:16:23:05:60:c0:82:2b:44:95:db:8a:22:69:94: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2A:44:CA:46:60:5E:5D:22:FE:74:DA:ED:A1:6A:15:F2:70:26:8A X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/9CA607DA3C8411F0BDA85229C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2400:e3e0:c000::/36 2400:e3e0:e000::/36 Signature Algorithm: sha256WithRSAEncryption 2d:d3:ee:40:d4:71:a5:98:55:7d:40:6c:d6:4c:4b:4d:b3:e4: 4d:72:10:cd:48:bf:62:a1:08:3b:b0:dc:f4:15:f3:00:93:aa: 1e:e3:8f:9b:0d:42:b1:55:49:1b:82:87:d7:e6:4a:a1:4a:4c: c4:b5:57:b9:d6:0f:8d:25:39:a5:18:61:bd:42:da:98:58:f5: 94:91:8c:b1:70:99:71:c7:24:c0:26:8d:7c:62:1d:ff:b9:02: 1b:46:fe:4e:fb:bc:6c:f7:40:a9:2f:2b:93:c6:50:eb:8c:b4: 86:f6:20:93:5b:4a:2f:c3:4b:88:39:e7:b0:23:83:b6:12:1e: 21:69:d6:38:24:dd:10:50:5f:cd:9e:56:1e:f0:02:e1:e4:21: 68:29:e2:ec:df:8e:41:37:de:01:3e:7d:29:ed:4d:57:19:06: 72:f6:c3:c9:b7:df:75:8e:47:6d:85:61:4c:73:54:92:09:06: af:c4:96:23:53:e6:12:44:59:cb:68:67:f3:8e:e1:9a:76:74: c6:ca:91:4d:f9:62:61:0e:6a:71:0b:84:d0:10:f5:6d:81:46: a5:17:d3:d1:13:63:5c:7d:53:e3:44:3f:64:93:e2:00:1c:53: d6:79:1b:ea:14:b4:8e:48:ed:6e:9b:ac:d2:ed:db:c0:4c:e3: 6b:43:70:62 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUxMjA4MDgwNDI0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTM2ODY4OC0wYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHUUSYUR/vGW6NAGSMDx2CRBl4cKE1KqXucAHkWG2wd+f8hDVDm2mhsgBHp9 mqEyYQ6Jgk8UZY3m65wsQl/nY6+JHfmr1LaiJXg1mQiicGL4EKCnUqg5/Vji1Kjm OuYofyEU2M2I9zFVf1SuYT45SXiqeuba3JQvoWCTLvXOFi9JilRSYx+cvr0wlQCg 5lVoU6P+jJ0jQhUkmOALMqrOjfy5Zms3wt5aTbGl7/8LOfcf7nMm5WD2lA5sIJ7X h4NBXZFl/ydEsZ6Yv13f+bzW2jTlBoAQ4/wLoLWRIq88vY5csFyl7eUVAPNvDxp6 087CFiMFYMCCK0SV24oiaZSEvQIDAQABo4ICnzCCApswHQYDVR0OBBYEFE0qRMpG YF5dIv502u2hahXycCaKMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJFOUEvOEZBMUY1NkVCODVFMTFFRDhFNkY0MjEzQzRGOUFFMDIvOUNBNjA3REEz Qzg0MTFGMEJEQTg1MjI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKQYIKwYBBQUHAQcBAf8E GjAYMBYEAgACMBADBgQkAOPgwAMGBCQA4+DgMA0GCSqGSIb3DQEBCwUAA4IBAQAt 0+5A1HGlmFV9QGzWTEtNs+RNchDNSL9ioQg7sNz0FfMAk6oe44+bDUKxVUkbgofX 5kqhSkzEtVe51g+NJTmlGGG9QtqYWPWUkYyxcJlxxyTAJo18Yh3/uQIbRv5O+7xs 90CpLyuTxlDrjLSG9iCTW0ovw0uIOeewI4O2Eh4hadY4JN0QUF/NnlYe8ALh5CFo KeLs345BN94BPn0p7U1XGQZy9sPJt991jkdthWFMc1SSCQavxJYjU+YSRFnLaGfz juGadnTGypFN+WJhDmpxC4TQEPVtgUalF9PRE2NcfVPjRD9kk+IAHFPWeRvqFLSO SO1um6zS7dvATONrQ3Bi -----END CERTIFICATE-----Generated at Fri Jan 9 23:49:37 2026 by rpki-client