This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa File: F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa (raw, json) Hash identifier: q92FBPtlN73xvZl47H3ua0aZ/PHBFEXIqP012z5uPjs= Subject key identifier: BB:AF:53:8E:18:10:02:26:DB:4C:5F:0C:45:5C:FD:96:E5:6C:2F:D6 Certificate issuer: /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Certificate serial: 0255 Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa Signing time: Wed 17 Dec 2025 02:21:20 +0000 ROA not before: Wed 17 Dec 2025 02:21:20 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 8071 IP address blocks: 2404:f801:8050::/48 maxlen: 48 2404:f801:a808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Validity Not Before: Dec 17 02:21:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=694213a0-7fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b3:19:4e:5b:75:c4:3e:ed:0d:2a:68:b8:8c: c0:38:38:56:21:ba:c6:b8:fd:90:a0:1d:2c:f9:12: 65:8b:7d:da:58:af:9d:df:db:e3:58:f9:58:6c:4b: f0:55:17:d9:e1:53:9e:4c:91:65:60:9b:f8:f9:de: d8:a4:4e:f9:da:0c:70:8a:e1:c2:9b:2d:20:90:7c: 42:3c:fd:55:28:c6:bd:de:ee:6b:ea:92:de:de:0a: 84:96:55:6f:75:e1:52:fd:8b:b5:1d:9b:5d:cd:00: 4d:11:d5:da:ef:0b:2a:8b:48:41:98:7b:d5:4c:69: 61:bd:78:f7:59:2f:87:47:0b:25:b3:18:eb:e4:9f: 17:70:ad:f7:6c:88:4f:bc:c0:a3:02:7d:ab:42:f1: e0:c4:2e:6c:d4:0d:2c:9a:dc:18:35:ae:c8:a2:e7: c0:39:5b:b3:7f:92:51:a4:a7:16:9a:8a:63:95:89: 1b:a0:dc:f0:b5:bf:8b:d2:be:43:aa:f8:3a:44:63: a9:41:a7:d6:00:47:f1:a0:e9:45:3d:b5:90:b1:48: af:30:1a:d6:f9:38:8f:b6:0b:4a:4a:71:70:8f:05: 70:bd:d9:45:4e:34:40:dc:d1:82:55:1e:a8:56:17: ff:dc:f4:3b:57:dd:aa:89:d0:7e:ab:d2:9e:90:c4: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AF:53:8E:18:10:02:26:DB:4C:5F:0C:45:5C:FD:96:E5:6C:2F:D6 X509v3 Authority Key Identifier: keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/F3A5BAB47F4C11ED9D79DA66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f801:8050::/48 2404:f801:a808::/48 Signature Algorithm: sha256WithRSAEncryption b7:3a:f6:69:fb:57:9f:8b:fa:3b:a5:d7:3e:43:87:d7:db:e2: 0b:aa:d8:94:9b:c2:36:b6:dc:9e:78:81:82:c1:d3:97:4f:8d: 28:37:00:a4:4c:36:01:96:f2:10:60:b6:1e:a7:bb:af:81:b0: 69:79:5f:ca:6b:93:cf:68:83:d6:c0:f8:c1:b2:9d:a2:6a:3c: 89:c1:86:09:eb:3b:14:3b:bd:aa:fb:bc:37:2e:3a:32:21:13: 29:0a:5c:5b:10:af:34:e3:a7:bd:50:2a:c2:f0:09:9a:d9:4c: 9c:54:6d:66:16:23:2d:28:6b:77:58:1d:00:ab:d4:20:88:6a: a3:78:06:b7:f3:3a:dc:92:f1:ea:24:0c:62:f2:ed:25:05:15: b6:c3:9b:d0:69:8a:84:77:e5:17:7e:d6:d0:0b:c8:a5:a9:a1: b2:a0:00:3b:91:52:f5:97:76:e0:ee:9e:f8:ba:2a:38:6e:20: 69:a3:2b:99:b5:4c:82:db:dc:5b:62:13:7a:9e:e1:62:65:d1: b2:86:f8:09:55:5e:e2:d3:bb:8f:f8:e9:3a:10:13:46:48:98: 2b:af:8d:c4:6c:0b:5c:b8:4c:56:a0:d8:61:78:dc:1f:1d:91: 33:33:80:8a:3e:d9:4d:db:68:27:51:4b:37:33:e6:e9:de:68: 57:35:22:4e -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDU5RERDMzk2OUI5ODYzQ0ZCNUExNTUyOEFBNEEzOTFB RjIzMzdGNDMwHhcNMjUxMjE3MDIyMTIwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyMTNhMC03ZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkLMZTlt1xD7tDSpouIzAODhWIbrGuP2QoB0s+RJli33aWK+d39vjWPlYbEvw VRfZ4VOeTJFlYJv4+d7YpE752gxwiuHCmy0gkHxCPP1VKMa93u5r6pLe3gqEllVv deFS/Yu1HZtdzQBNEdXa7wsqi0hBmHvVTGlhvXj3WS+HRwslsxjr5J8XcK33bIhP vMCjAn2rQvHgxC5s1A0smtwYNa7IoufAOVuzf5JRpKcWmopjlYkboNzwtb+L0r5D qvg6RGOpQafWAEfxoOlFPbWQsUivMBrW+TiPtgtKSnFwjwVwvdlFTjRA3NGCVR6o Vhf/3PQ7V92qidB+q9KekMRUMQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLuvU44Y EAIm20xfDEVc/ZblbC/WMB8GA1UdIwQYMBaAFFndw5abmGPPtaFVKKpKORryM39D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi9GQkRGRkVDMDc2 ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4LTFvVlVvcWtvNUd2SXpm ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkM0RscHVZWTgtMW9WVW9xa281R3ZJemYwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNFM0YvRkJERkZFQzA3Njg2MTFFREE2Q0IzRjQxQzRGOUFFMDIvRjNBNUJBQjQ3 RjRDMTFFRDlENzlEQTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwAkBPgBgFADBwAkBPgBqAgwDQYJKoZIhvcNAQELBQADggEB ALc69mn7V5+L+jul1z5Dh9fb4guq2JSbwja23J54gYLB05dPjSg3AKRMNgGW8hBg th6nu6+BsGl5X8prk89og9bA+MGynaJqPInBhgnrOxQ7var7vDcuOjIhEykKXFsQ rzTjp71QKsLwCZrZTJxUbWYWIy0oa3dYHQCr1CCIaqN4BrfzOtyS8eokDGLy7SUF FbbDm9BpioR35Rd+1tALyKWpobKgADuRUvWXduDunvi6KjhuIGmjK5m1TILb3Fti E3qe4WJl0bKG+AlVXuLTu4/46ToQE0ZImCuvjcRsC1y4TFag2GF43B8dkTMzgIo+ 2U3baCdRSzcz5uneaFc1Ik4= -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:45 2025 by rpki-client