This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/821C9E64DB3611F09027CD7F8DD3641D.roa File: 821C9E64DB3611F09027CD7F8DD3641D.roa (raw, json) Hash identifier: aGikAw6ur9giQIjk2K9axRh3pUr3t4JrL5PiXk6nBCw= Subject key identifier: B6:51:7A:10:57:47:17:D9:B5:45:B1:C6:37:7C:57:CE:9F:FC:EA:FA Certificate issuer: /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Certificate serial: 02 Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/821C9E64DB3611F09027CD7F8DD3641D.roa Signing time: Wed 17 Dec 2025 10:52:41 +0000 ROA not before: Wed 17 Dec 2025 10:52:41 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137127 IP address blocks: 2402:4120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F Validity Not Before: Dec 17 10:52:41 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69428b78-1d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:4c:00:aa:f0:62:82:e5:b7:15:84:75:7c: 93:0f:ac:42:75:d7:be:6e:49:43:93:e2:03:60:73: 40:f1:ae:1a:47:84:d0:cb:91:7c:a3:fd:fb:9e:17: f1:be:e3:ef:60:0e:41:84:71:5a:d8:6a:1e:8e:b3: 28:94:f7:d2:cd:ca:11:be:a1:c7:b7:2b:6a:a3:f6: 13:e9:5c:69:6b:5c:64:4e:ed:99:7d:22:03:2c:bc: 92:55:9b:2a:ce:ae:5c:6b:36:c6:8f:9c:68:d8:af: 7e:92:1d:e1:3d:47:10:fd:11:e2:6e:9d:bd:da:34: 5a:08:39:d5:22:c2:f2:9b:cf:0f:a3:68:ee:b5:d8: bf:f4:05:4d:d2:5c:06:ca:08:8e:5a:15:76:f1:39: b6:51:3e:aa:52:51:68:fc:11:44:55:40:31:bc:f9: 2b:55:97:8a:99:cc:78:be:80:5e:bb:69:ea:70:23: 5f:2e:90:37:66:79:81:23:23:50:95:03:1a:be:34: a8:79:f0:6b:bc:df:17:68:6c:9f:df:8f:f5:4c:cd: 48:c1:31:f3:27:49:64:6e:ce:d5:9c:b4:35:77:ae: 4f:57:00:3d:d0:43:fc:f8:50:35:3f:61:ef:f0:8e: c5:44:b4:4c:a9:27:70:13:f1:94:dc:10:14:f6:61: 6a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:51:7A:10:57:47:17:D9:B5:45:B1:C6:37:7C:57:CE:9F:FC:EA:FA X509v3 Authority Key Identifier: keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/821C9E64DB3611F09027CD7F8DD3641D.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:4120::/32 Signature Algorithm: sha256WithRSAEncryption 7d:16:ef:e9:51:8b:16:b8:58:c2:b0:9a:c0:42:d1:61:ef:b0: 55:3d:d2:85:7b:d7:ee:79:3e:89:49:e3:d7:c1:f9:21:d7:ed: 8d:0b:5e:1f:dc:68:6c:c7:c3:fb:07:c4:36:d4:fc:83:32:fc: b5:88:24:11:c4:2f:f7:c0:a2:a8:ba:30:e8:13:bf:26:71:c4: 8a:24:00:8d:10:7c:6c:52:f1:55:2c:20:1e:02:de:1d:76:fd: c8:b5:bb:c6:2e:61:48:af:62:5e:7f:ab:d8:e4:25:d9:fe:6c: 77:21:44:08:60:ba:95:fa:6c:e9:0e:a9:79:a0:88:04:6d:63: 3b:ee:d8:a6:fd:45:1f:e1:9c:6d:32:1f:94:b1:ee:6a:ba:02: a5:54:ce:1a:4f:68:f6:a8:17:41:03:51:5b:b6:e2:ae:92:7e: 02:0b:6d:e8:61:47:c8:4d:f4:98:44:ae:c9:68:a2:74:f4:a2: 48:45:f2:37:64:e2:06:7c:1f:56:2b:dd:3a:25:eb:45:a0:7c: 58:a4:29:bf:fb:36:14:9e:fc:13:f3:d2:d5:a8:ed:d5:d3:9a: a2:61:ee:68:a6:c6:37:06:c2:a1:14:2a:ea:1e:32:76:87:8a: 57:1c:78:7e:16:3f:9b:52:e1:99:14:5a:ba:e0:a8:8c:92:b1: 89:27:18:6c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjk0NjExMC8GA1UEBRMoOEIwNkRERkNFNkYxOUM0MUJFMzk5RDNCQzdCRTJBRTNF M0JGRDQ1RjAeFw0yNTEyMTcxMDUyNDFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMMDTY5NDI4Yjc4LTFkMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbG0wAqvBiguW3FYR1fJMPrEJ1175uSUOT4gNgc0DxrhpHhNDLkXyj/fueF/G+ 4+9gDkGEcVrYah6OsyiU99LNyhG+oce3K2qj9hPpXGlrXGRO7Zl9IgMsvJJVmyrO rlxrNsaPnGjYr36SHeE9RxD9EeJunb3aNFoIOdUiwvKbzw+jaO612L/0BU3SXAbK CI5aFXbxObZRPqpSUWj8EURVQDG8+StVl4qZzHi+gF67aepwI18ukDdmeYEjI1CV Axq+NKh58Gu83xdobJ/fj/VMzUjBMfMnSWRuztWctDV3rk9XAD3QQ/z4UDU/Ye/w jsVEtEypJ3AT8ZTcEBT2YWp1AgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUtlF6EFdH F9m1RbHGN3xXzp/86vowHwYDVR0jBBgwFoAUiwbd/ObxnEG+OZ07x74q4+O/1F8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOTQ2L0I2NzEwMTMwREIz MzExRjBBMkNFNTM2ODhDRDM2NDFEL2l3YmRfT2J4bkVHLU9aMDd4NzRxNC1PXzFG OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXdiZF9PYnhuRUctT1owN3g3NHE0LU9fMUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjk0Ni9CNjcxMDEzMERCMzMxMUYwQTJDRTUzNjg4Q0QzNjQxRC84MjFDOUU2NERC MzYxMUYwOTAyN0NEN0Y4REQzNjQxRC5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCQSAwDQYJKoZIhvcNAQELBQADggEBAH0W7+lRixa4WMKw msBC0WHvsFU90oV71+55PolJ49fB+SHX7Y0LXh/caGzHw/sHxDbU/IMy/LWIJBHE L/fAoqi6MOgTvyZxxIokAI0QfGxS8VUsIB4C3h12/ci1u8YuYUivYl5/q9jkJdn+ bHchRAhgupX6bOkOqXmgiARtYzvu2Kb9RR/hnG0yH5Sx7mq6AqVUzhpPaPaoF0ED UVu24q6SfgILbehhR8hN9JhErsloonT0okhF8jdk4gZ8H1Yr3Tol60WgfFikKb/7 NhSe/BPz0tWo7dXTmqJh7mimxjcGwqEUKuoeMnaHilcceH4WP5tS4ZkUWrrgqIyS sYknGGw= -----END CERTIFICATE-----Generated at Fri Dec 19 20:23:40 2025 by rpki-client