This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa File: 7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa (raw, json) Hash identifier: NXL/hMdSFSKARiWStwfBKFLmVnxv6k1UKdBZKMx+0Os= Subject key identifier: 46:12:2D:D8:E5:44:F4:6D:30:92:7F:A9:19:80:71:7A:7A:B1:1E:E6 Certificate issuer: /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259 Certificate serial: 19 Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa Signing time: Mon 08 Dec 2025 15:50:43 +0000 ROA not before: Mon 08 Dec 2025 15:50:43 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154386 IP address blocks: 2402:3b20::/32 maxlen: 32 2402:3b20::/48 maxlen: 48 2402:3b20:1::/48 maxlen: 48 2402:3b20:2::/48 maxlen: 48 2402:3b20:3::/48 maxlen: 48 2402:3b20:4::/48 maxlen: 48 2402:3b20:5::/48 maxlen: 48 2402:3b20:6::/48 maxlen: 48 2402:3b20:7::/48 maxlen: 48 2402:3b20:8::/48 maxlen: 48 2402:3b20:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259 Validity Not Before: Dec 8 15:50:43 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6936f3d3-383a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:49:43:bc:a4:80:af:18:b7:c3:b0:1f:f5: 0b:df:3f:e3:b5:74:14:5a:b8:1d:58:a8:50:3f:e5: 8f:b4:c2:85:c5:ae:ae:a1:56:f0:20:2e:e6:6b:60: 61:b5:91:f6:25:a2:92:b9:1a:91:94:56:71:1f:24: e8:59:23:ef:2b:11:6f:88:02:b9:d6:1f:40:da:cd: 94:ba:66:e0:cb:2f:96:40:ca:3e:8a:e1:22:13:b1: 85:09:c3:67:7d:2b:5d:91:9e:e6:c1:0a:09:1f:ce: 0e:85:ad:85:d5:81:12:e8:9a:e6:5b:68:a5:45:86: de:83:2d:4e:fa:9a:1b:be:b0:b1:76:45:71:ac:17: bc:05:8e:8c:10:ad:e8:ca:07:af:d9:f9:2b:84:c7: 04:62:f8:7e:79:7d:c4:fe:af:d8:65:4f:08:4a:07: 4f:66:2b:1e:b3:9e:50:97:ec:c4:3b:2c:06:c1:77: 40:13:2a:da:cd:51:b3:ee:a8:4a:cc:41:d8:10:bb: 6e:c0:ae:b1:4e:92:13:db:42:56:75:13:ee:06:fa: da:d8:1a:8a:22:70:f0:ff:a6:f2:8b:ac:a1:b0:e1: 40:99:6b:41:27:48:dd:7f:db:d3:f7:e4:70:05:3b: 47:e2:6a:93:39:69:34:83:52:d2:7f:e7:1e:1c:e4: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:2D:D8:E5:44:F4:6D:30:92:7F:A9:19:80:71:7A:7A:B1:1E:E6 X509v3 Authority Key Identifier: keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:3b20::/32 Signature Algorithm: sha256WithRSAEncryption 34:5f:0f:b3:4c:4f:25:5e:90:23:10:7e:95:c6:aa:46:1b:f7: 3f:72:b3:36:88:d5:27:93:b2:74:58:47:d8:62:48:02:44:d5: 60:79:ce:80:01:5e:fe:ab:1e:be:61:8c:2b:c7:8e:05:af:66: 47:07:94:e9:08:f2:5e:6f:03:91:10:bb:05:8a:15:95:bc:a6: a3:5d:e4:72:01:d8:5f:a3:61:64:53:63:5b:73:c8:98:f3:dd: 00:05:bb:fa:4e:9b:98:1a:14:d1:1b:94:40:45:a1:9c:a6:2a: 29:97:79:cd:8e:05:75:39:9c:2e:35:1b:9d:50:50:4b:4e:a1: 4a:59:5e:dd:85:0c:20:10:06:9f:e2:ac:c3:8a:4c:0b:5f:20: 45:0b:e9:63:4b:ec:a2:52:77:37:19:dd:50:18:a4:78:66:47: 0c:01:48:82:ee:d9:0e:f9:ea:fc:6e:40:15:92:c3:f9:fd:6e: f8:05:24:65:af:65:6c:0a:fa:f2:9e:e0:d6:d1:49:a7:78:e1: 7b:eb:4a:39:14:89:63:bd:87:9a:ac:34:98:57:2b:a2:58:37: 06:7e:75:38:e6:b8:98:74:a6:aa:75:0d:c8:8d:d5:2d:86:5a: 44:6f:a4:c7:17:3f:34:81:18:c3:55:42:30:98:7f:c9:c3:3a: f2:0f:0f:a6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDcwQzExMC8GA1UEBRMoMTk5RDRCRTA2MDhBNTZGNTA0ODBDMEFEMjY0NURBRDdC NjkwMDI1OTAeFw0yNTEyMDgxNTUwNDNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MzZmM2QzLTM4M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4SElDvKSArxi3w7Af9QvfP+O1dBRauB1YqFA/5Y+0woXFrq6hVvAgLuZrYGG1 kfYlopK5GpGUVnEfJOhZI+8rEW+IArnWH0DazZS6ZuDLL5ZAyj6K4SITsYUJw2d9 K12RnubBCgkfzg6FrYXVgRLomuZbaKVFht6DLU76mhu+sLF2RXGsF7wFjowQrejK B6/Z+SuExwRi+H55fcT+r9hlTwhKB09mKx6znlCX7MQ7LAbBd0ATKtrNUbPuqErM QdgQu27ArrFOkhPbQlZ1E+4G+trYGooicPD/pvKLrKGw4UCZa0EnSN1/29P35HAF O0fiapM5aTSDUtJ/5x4c5GctAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQURhIt2OVE 9G0wkn+pGYBxenqxHuYwHwYDVR0jBBgwFoAUGZ1L4GCKVvUEgMCtJkXa17aQAlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NzBDL0FDNEQwQUI0QzY4 OTExRjA4RDJCRkUwQUM0RjlBRTAyL0daMUw0R0NLVnZVRWdNQ3RKa1hhMTdhUUFs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1oxTDRHQ0tWdlVFZ01DdEprWGExN2FRQWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDcwQy9BQzREMEFCNEM2ODkxMUYwOEQyQkZFMEFDNEY5QUUwMi83QjMxRDVFNENE MEIxMUYwQTFFNjZENUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR MA8wDQQCAAIwBwMFACQCOyAwDQYJKoZIhvcNAQELBQADggEBADRfD7NMTyVekCMQ fpXGqkYb9z9yszaI1SeTsnRYR9hiSAJE1WB5zoABXv6rHr5hjCvHjgWvZkcHlOkI 8l5vA5EQuwWKFZW8pqNd5HIB2F+jYWRTY1tzyJjz3QAFu/pOm5gaFNEblEBFoZym KimXec2OBXU5nC41G51QUEtOoUpZXt2FDCAQBp/irMOKTAtfIEUL6WNL7KJSdzcZ 3VAYpHhmRwwBSILu2Q756vxuQBWSw/n9bvgFJGWvZWwK+vKe4NbRSad44XvrSjkU iWO9h5qsNJhXK6JYNwZ+dTjmuJh0pqp1DciN1S2GWkRvpMcXPzSBGMNVQjCYf8nD OvIPD6Y= -----END CERTIFICATE-----Generated at Fri Dec 19 18:59:09 2025 by rpki-client