This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/FA05DFF47F4911ED847FF862C4F9AE02.roa File: FA05DFF47F4911ED847FF862C4F9AE02.roa (raw, json) Hash identifier: uMxzvHiJURLP3tEDB3PjFM5N+AqLHVns+3PyMOzBdOY= Subject key identifier: 4C:81:CD:03:43:B3:DC:AC:6C:4B:F3:31:C4:3D:74:11:81:B6:61:A4 Certificate issuer: /CN=A91A3E3F/serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Certificate serial: 0253 Authority key identifier: 59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/FA05DFF47F4911ED847FF862C4F9AE02.roa Signing time: Wed 17 Dec 2025 02:21:18 +0000 ROA not before: Wed 17 Dec 2025 02:21:18 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 3598 IP address blocks: 2404:f801::/32 maxlen: 32 2404:f801:8028::/48 maxlen: 48 2404:f801:8058::/48 maxlen: 48 2404:f801:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=59DDC3969B9863CFB5A15528AA4A391AF2337F43 Validity Not Before: Dec 17 02:21:18 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6942139d-6337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:d3:ab:1c:1d:42:5d:21:f4:0d:a7:50:72: 43:2f:62:40:55:8a:98:c3:2b:28:3d:9a:a0:45:e9: 3e:c0:43:fb:7d:9e:94:17:f7:2f:97:36:5f:18:19: 01:2b:aa:d2:b4:e6:d8:99:19:b4:4f:c1:72:78:48: ee:bb:db:d0:9d:d0:d7:93:89:12:6e:60:c2:f2:ac: 64:5b:90:ce:a2:3c:86:4d:64:92:4f:dd:a0:21:95: 2f:c5:88:d3:b6:a9:e4:7f:86:8c:6a:8e:a4:2f:4e: c6:06:64:fc:14:98:07:1f:de:c4:51:58:f8:73:ac: 3b:e5:f2:3b:ee:23:8e:a9:c2:8d:ca:93:97:4b:23: 6b:d8:1f:47:26:e3:dd:db:3a:62:30:65:8a:a5:02: 02:c4:41:59:38:6e:2d:8d:d1:2a:d1:5b:cd:50:83: b2:77:25:52:54:b8:ab:03:1c:96:96:6f:9e:80:30: 55:94:05:b2:66:13:12:32:05:93:68:bf:84:63:10: 01:12:8d:1d:69:a3:3d:3c:29:a3:ef:78:13:29:ca: 18:86:92:96:88:b4:6b:7c:1e:d1:4f:b8:b6:d4:e6: 7a:20:03:63:7c:57:e9:12:73:d4:10:53:e5:0d:2a: 60:90:54:8e:b5:0a:74:2b:74:a4:46:63:e7:a5:87: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:81:CD:03:43:B3:DC:AC:6C:4B:F3:31:C4:3D:74:11:81:B6:61:A4 X509v3 Authority Key Identifier: keyid:59:DD:C3:96:9B:98:63:CF:B5:A1:55:28:AA:4A:39:1A:F2:33:7F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/Wd3DlpuYY8-1oVUoqko5GvIzf0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wd3DlpuYY8-1oVUoqko5GvIzf0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/FBDFFEC0768611EDA6CB3F41C4F9AE02/FA05DFF47F4911ED847FF862C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:f801::/32 Signature Algorithm: sha256WithRSAEncryption 91:24:ba:7a:a1:62:fb:6b:96:24:cd:cc:21:65:52:32:6f:69: 9f:7d:6b:51:de:03:fa:7d:f6:c6:9b:a4:e6:a5:5c:b9:7a:dd: e6:02:24:81:85:5f:63:ca:f2:4a:4f:9f:18:81:1e:96:1c:0f: fc:76:07:f6:fc:c7:4c:f6:1e:5d:07:7a:0e:81:8e:17:d5:34: 20:c7:6c:65:41:c6:ab:69:b5:66:1a:3d:c0:45:f9:f9:b1:34: 02:c3:39:04:d5:07:3d:57:4e:75:fe:81:38:13:2e:09:99:74: d7:46:06:d1:7c:f1:00:2b:2c:e1:05:6b:ea:8b:b8:c1:81:ed: f5:88:cb:9f:7d:50:94:08:47:68:b1:23:e8:0f:4f:e6:b3:e5: 36:10:e5:94:0d:3e:91:ac:12:aa:6c:dc:13:18:be:e2:78:c5: 16:58:25:ba:2c:56:13:cf:3d:91:12:57:9a:a3:5b:dc:30:ea: bd:bb:ec:81:f3:7e:fa:02:06:2a:20:dc:60:58:18:8c:cf:51: 09:c7:34:1f:3e:e2:8f:29:37:ff:10:57:f1:bf:9a:ae:5e:e3: f6:6c:5a:70:f5:6e:7b:eb:fe:85:23:37:32:8c:c9:a7:47:67: a8:2d:67:2c:6d:d6:06:78:72:aa:52:be:76:a1:1f:f1:00:9a: 0d:fa:63:20 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDU5RERDMzk2OUI5ODYzQ0ZCNUExNTUyOEFBNEEzOTFB RjIzMzdGNDMwHhcNMjUxMjE3MDIyMTE4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTQyMTM5ZC02MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqbTqxwdQl0h9A2nUHJDL2JAVYqYwysoPZqgRek+wEP7fZ6UF/cvlzZfGBkB K6rStObYmRm0T8FyeEjuu9vQndDXk4kSbmDC8qxkW5DOojyGTWSST92gIZUvxYjT tqnkf4aMao6kL07GBmT8FJgHH97EUVj4c6w75fI77iOOqcKNypOXSyNr2B9HJuPd 2zpiMGWKpQICxEFZOG4tjdEq0VvNUIOydyVSVLirAxyWlm+egDBVlAWyZhMSMgWT aL+EYxABEo0daaM9PCmj73gTKcoYhpKWiLRrfB7RT7i21OZ6IANjfFfpEnPUEFPl DSpgkFSOtQp0K3SkRmPnpYeF6wIDAQABo4ICljCCApIwHQYDVR0OBBYEFEyBzQND s9ysbEvzMcQ9dBGBtmGkMB8GA1UdIwQYMBaAFFndw5abmGPPtaFVKKpKORryM39D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi9GQkRGRkVDMDc2 ODYxMUVEQTZDQjNGNDFDNEY5QUUwMi9XZDNEbHB1WVk4LTFvVlVvcWtvNUd2SXpm ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkM0RscHVZWTgtMW9WVW9xa281R3ZJemYwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNFM0YvRkJERkZFQzA3Njg2MTFFREE2Q0IzRjQxQzRGOUFFMDIvRkEwNURGRjQ3 RjQ5MTFFRDg0N0ZGODYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkBPgBMA0GCSqGSIb3DQEBCwUAA4IBAQCRJLp6oWL7a5Yk zcwhZVIyb2mffWtR3gP6ffbGm6TmpVy5et3mAiSBhV9jyvJKT58YgR6WHA/8dgf2 /MdM9h5dB3oOgY4X1TQgx2xlQcarabVmGj3ARfn5sTQCwzkE1Qc9V051/oE4Ey4J mXTXRgbRfPEAKyzhBWvqi7jBge31iMuffVCUCEdosSPoD0/ms+U2EOWUDT6RrBKq bNwTGL7ieMUWWCW6LFYTzz2REleao1vcMOq9u+yB8376AgYqINxgWBiMz1EJxzQf PuKPKTf/EFfxv5quXuP2bFpw9W576/6FIzcyjMmnR2eoLWcsbdYGeHKqUr52oR/x AJoN+mMg -----END CERTIFICATE-----Generated at Sat Dec 20 13:42:06 2025 by rpki-client