This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1E0CBABEC99B11F0BD75C310C4F9AE02.roa File: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (raw, json) Hash identifier: XDvsXiWUoJu9EmBSYtQ7IbkY7zSchFzyP33LQZcvmOQ= Subject key identifier: DF:7D:55:87:C1:34:C2:9C:A3:B0:93:36:CE:14:B9:FB:56:0C:E0:93 Certificate issuer: /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721 Certificate serial: E1 Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1E0CBABEC99B11F0BD75C310C4F9AE02.roa Signing time: Tue 09 Dec 2025 03:42:59 +0000 ROA not before: Tue 09 Dec 2025 03:42:59 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24511 IP address blocks: 2405:e40:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721 Validity Not Before: Dec 9 03:42:59 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69379ac3-19ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:d0:11:a4:38:50:e1:c9:cd:84:13:19:5b: 15:fd:c5:3f:df:2b:8c:ae:0a:cd:96:f4:36:91:85: ad:70:19:21:6e:a4:46:d9:24:b1:46:bb:86:46:a9: 9e:77:1e:34:76:f7:0d:7c:2e:f7:11:ea:a9:bd:13: e5:a5:89:5c:37:10:21:15:b0:2d:be:60:71:d4:6c: 12:3a:0b:3f:ec:c5:59:e4:91:40:2c:8e:40:35:c6: 5d:0c:2b:09:54:8e:5e:e6:8e:da:21:c7:8b:95:27: 6d:88:34:ae:e5:21:d6:ff:ad:24:22:a2:50:b2:f0: d7:b6:ee:0d:e1:77:94:b2:7b:57:a3:23:5d:ea:7a: 01:20:1b:f5:bb:92:0d:14:e9:36:71:1a:d2:78:b4: da:e6:9e:e7:b7:ef:ac:85:fa:9f:c2:83:fa:83:69: 47:01:7e:05:98:cb:b8:10:e4:fd:16:f5:95:47:09: 31:87:f6:10:51:4c:88:74:17:4b:b6:f1:70:d5:bd: 62:c5:b1:84:27:a9:54:5a:9e:74:98:3f:83:6c:92: 2e:0f:ed:34:0c:00:99:27:75:dd:f6:3d:e8:8b:5c: c8:f7:52:1f:40:2d:e1:c2:08:c2:7b:8e:81:63:c7: d0:37:96:59:a3:08:08:e0:19:fd:4e:e6:5b:26:51: 67:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7D:55:87:C1:34:C2:9C:A3:B0:93:36:CE:14:B9:FB:56:0C:E0:93 X509v3 Authority Key Identifier: keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1E0CBABEC99B11F0BD75C310C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:e40:8::/48 Signature Algorithm: sha256WithRSAEncryption 06:c8:ea:fc:7a:2c:b8:34:f4:fa:12:92:b6:81:3c:e7:eb:48: 5c:f3:82:9c:53:ff:de:77:75:cd:cf:b6:40:7f:5b:90:ed:8a: 1a:57:e9:80:ea:06:e4:ef:30:d9:d7:fe:b4:56:38:5f:eb:c4: 7e:5d:34:5c:b7:bc:42:17:f6:86:50:3a:b6:c0:24:0f:4c:bd: c5:8e:ae:da:09:6a:e3:b1:e4:0e:c6:d7:07:b6:33:c4:35:da: f7:ef:0f:42:bf:0a:45:4f:ec:5a:18:6d:e9:95:11:61:a1:b0: 1b:f7:4a:b2:10:c4:96:ed:c8:c3:90:f6:29:79:60:e3:48:44: 7b:4b:3d:8d:44:ab:87:41:a2:22:f4:62:ea:9e:d7:67:74:8b: bd:94:c6:98:87:c0:38:3b:24:d0:83:a6:b2:a7:2a:cb:09:2d: 44:1a:2e:2e:c8:3a:47:ad:b8:61:d5:73:56:f7:5f:5e:fe:d3: 94:f2:e7:99:0a:e1:7c:ec:6b:2f:69:1e:b9:7c:aa:11:91:ec: fd:df:07:66:f6:da:84:46:78:11:0c:f7:63:58:cf:54:c9:52: 18:aa:1a:d3:fb:8b:26:53:df:48:e5:95:7e:8f:9e:78:f4:fe: 6d:20:01:72:a4:1e:2a:7f:08:5c:1a:4e:86:d5:c0:c4:82:ca: e1:21:bd:13 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4QUQxMTAvBgNVBAUTKEQxMEMyMDk2RkI1REIzMDRBQkQyRjk5RjQ1QTI5NDg4 MjkyRDM3MjEwHhcNMjUxMjA5MDM0MjU5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTM3OWFjMy0xOWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFbQEaQ4UOHJzYQTGVsV/cU/3yuMrgrNlvQ2kYWtcBkhbqRG2SSxRruGRqme dx40dvcNfC73EeqpvRPlpYlcNxAhFbAtvmBx1GwSOgs/7MVZ5JFALI5ANcZdDCsJ VI5e5o7aIceLlSdtiDSu5SHW/60kIqJQsvDXtu4N4XeUsntXoyNd6noBIBv1u5IN FOk2cRrSeLTa5p7nt++shfqfwoP6g2lHAX4FmMu4EOT9FvWVRwkxh/YQUUyIdBdL tvFw1b1ixbGEJ6lUWp50mD+DbJIuD+00DACZJ3Xd9j3oi1zI91IfQC3hwgjCe46B Y8fQN5ZZowgI4Bn9TuZbJlFn4wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFN99VYfB NMKco7CTNs4UuftWDOCTMB8GA1UdIwQYMBaAFNEMIJb7XbMEq9L5n0WilIgpLTch MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC9ERUJBMjM4MDg2 QTAxMUVGQjM2RTMwMEVDNEY5QUUwMi8wUXdnbHZ0ZHN3U3Iwdm1mUmFLVWlDa3RO eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRd2dsdnRkc3dTcjB2bWZSYUtVaUNrdE55RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY4QUQvREVCQTIzODA4NkEwMTFFRkIzNkUzMDBFQzRGOUFFMDIvMUUwQ0JBQkVD OTlCMTFGMEJENzVDMzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBQ5AAAgwDQYJKoZIhvcNAQELBQADggEBAAbI6vx6LLg0 9PoSkraBPOfrSFzzgpxT/953dc3PtkB/W5DtihpX6YDqBuTvMNnX/rRWOF/rxH5d NFy3vEIX9oZQOrbAJA9MvcWOrtoJauOx5A7G1we2M8Q12vfvD0K/CkVP7FoYbemV EWGhsBv3SrIQxJbtyMOQ9il5YONIRHtLPY1Eq4dBoiL0Yuqe12d0i72UxpiHwDg7 JNCDprKnKssJLUQaLi7IOketuGHVc1b3X17+05Ty55kK4Xzsay9pHrl8qhGR7P3f B2b22oRGeBEM92NYz1TJUhiqGtP7iyZT30jllX6Pnnj0/m0gAXKkHip/CFwaTobV wMSCyuEhvRM= -----END CERTIFICATE-----Generated at Sat Dec 20 03:20:50 2025 by rpki-client