This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa File: 5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa (raw, json) Hash identifier: 0pzKKUDi8I5wmawXMvsnYBP2IX8f3vry9Bpy1YjoPY4= Subject key identifier: 04:09:F7:8C:36:E3:84:A4:15:E7:B6:6F:40:7A:7A:71:99:8D:0A:D5 Certificate issuer: /CN=A91EE5E5/serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Certificate serial: C6 Authority key identifier: A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa Signing time: Mon 15 Dec 2025 05:25:00 +0000 ROA not before: Mon 15 Dec 2025 05:25:00 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153391 IP address blocks: 2401:d320::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE5E5, serialNumber=A00E02DC783F9084021DF94F7586264EC47D3438 Validity Not Before: Dec 15 05:25:00 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=693f9bac-b008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:b4:1b:7b:86:df:4e:56:08:e7:bc:b5:66: da:d7:f6:4e:f0:11:71:ed:13:4d:ed:e0:8f:d8:46: 71:26:b6:e1:e7:8a:fb:ff:ea:73:53:6a:77:f5:fe: a0:96:01:b2:9f:24:4f:11:b9:28:9d:72:46:50:5a: d2:72:ba:ca:8c:96:68:ff:5f:d6:12:de:c1:0c:4c: 7e:71:09:fe:95:b0:d4:b3:75:d1:6d:8e:17:dc:8a: 39:69:8e:8c:a0:77:ec:05:7f:fd:28:b2:f1:5a:be: 9d:22:e6:84:3f:1a:c7:33:a2:f5:c6:b1:7c:39:45: 84:2b:0b:59:be:04:c1:80:31:9e:f5:aa:91:86:5c: ca:92:5c:8d:33:d3:ba:e7:80:7e:b6:5d:bc:bb:29: 9b:68:60:86:91:b8:76:64:3d:ff:94:4b:61:47:8a: 4c:e9:3f:18:2b:45:80:3e:4b:f5:4e:17:e3:5f:28: a4:db:f8:5a:4b:0b:e6:94:ab:ad:7b:3e:ae:9d:28: 33:58:5b:43:7e:ee:9e:e9:30:5b:8c:a6:b7:87:3f: 05:d2:b0:3b:1d:63:33:8f:ab:69:d0:d9:9e:a7:92: cf:b2:59:05:e2:47:61:34:93:14:98:41:21:38:19: f7:17:78:49:38:e6:0e:ad:44:ab:34:be:80:8a:d9: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:09:F7:8C:36:E3:84:A4:15:E7:B6:6F:40:7A:7A:71:99:8D:0A:D5 X509v3 Authority Key Identifier: keyid:A0:0E:02:DC:78:3F:90:84:02:1D:F9:4F:75:86:26:4E:C4:7D:34:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/oA4C3Hg_kIQCHflPdYYmTsR9NDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oA4C3Hg_kIQCHflPdYYmTsR9NDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F97BC302AFBF11EFA28A3654C4F9AE02/5D5CEDCEAFC011EFAA2E3455C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:d320::/32 Signature Algorithm: sha256WithRSAEncryption 8d:7d:05:60:d7:9c:b9:27:7e:18:db:d6:02:61:a7:08:00:65: c8:66:50:8e:77:63:f0:88:4e:fa:a0:e6:f4:e8:58:3c:9a:72: c6:c3:25:6a:d5:0c:a9:a0:fe:9a:a5:09:cc:2f:40:87:26:b2: c0:be:dd:07:7e:be:57:fa:48:f7:dd:68:77:79:b9:15:b5:85: 88:01:90:cd:04:ce:a1:f5:ec:ba:59:cb:07:5d:74:47:29:ef: cc:30:50:d4:61:02:26:61:6b:e2:ca:e6:e7:2a:fd:2b:aa:37: cb:b8:10:ca:67:0a:26:e8:41:ae:e2:81:60:5a:51:56:cb:74: 40:df:27:9b:30:65:fd:4d:3b:00:c6:df:27:57:e8:8a:ff:61: 29:b0:f6:94:a7:69:bd:53:6b:79:90:3d:cc:e5:ae:ca:f9:74: 00:1a:b4:46:37:e8:39:91:15:b9:a2:48:a5:66:5e:3b:25:89: f0:9a:61:8e:19:7f:45:ae:bf:93:94:90:c0:61:76:6b:a1:51: bb:25:f5:bd:84:e0:f4:a0:85:1d:06:08:c0:ed:66:52:83:4a: 41:d0:79:71:33:5c:e0:47:7c:37:5e:95:8c:8b:73:90:08:1f: 46:a9:79:5a:73:51:92:9d:1d:b7:45:50:2e:28:98:b6:29:f2: 5e:7b:e8:4d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU1RTUxMTAvBgNVBAUTKEEwMEUwMkRDNzgzRjkwODQwMjFERjk0Rjc1ODYyNjRF QzQ3RDM0MzgwHhcNMjUxMjE1MDUyNTAwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTNmOWJhYy1iMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuy0G3uG305WCOe8tWba1/ZO8BFx7RNN7eCP2EZxJrbh54r7/+pzU2p39f6g lgGynyRPEbkonXJGUFrScrrKjJZo/1/WEt7BDEx+cQn+lbDUs3XRbY4X3Io5aY6M oHfsBX/9KLLxWr6dIuaEPxrHM6L1xrF8OUWEKwtZvgTBgDGe9aqRhlzKklyNM9O6 54B+tl28uymbaGCGkbh2ZD3/lEthR4pM6T8YK0WAPkv1ThfjXyik2/haSwvmlKut ez6unSgzWFtDfu6e6TBbjKa3hz8F0rA7HWMzj6tp0Nmep5LPslkF4kdhNJMUmEEh OBn3F3hJOOYOrUSrNL6AitnLlwIDAQABo4ICljCCApIwHQYDVR0OBBYEFAQJ94w2 44SkFee2b0B6enGZjQrVMB8GA1UdIwQYMBaAFKAOAtx4P5CEAh35T3WGJk7EfTQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTVFNS9GOTdCQzMwMkFG QkYxMUVGQTI4QTM2NTRDNEY5QUUwMi9vQTRDM0hnX2tJUUNIZmxQZFlZbVRzUjlO RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BNEMzSGdfa0lRQ0hmbFBkWVltVHNSOU5EZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUU1RTUvRjk3QkMzMDJBRkJGMTFFRkEyOEEzNjU0QzRGOUFFMDIvNUQ1Q0VEQ0VB RkMwMTFFRkFBMkUzNDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E ETAPMA0EAgACMAcDBQAkAdMgMA0GCSqGSIb3DQEBCwUAA4IBAQCNfQVg15y5J34Y 29YCYacIAGXIZlCOd2PwiE76oOb06Fg8mnLGwyVq1QypoP6apQnML0CHJrLAvt0H fr5X+kj33Wh3ebkVtYWIAZDNBM6h9ey6WcsHXXRHKe/MMFDUYQImYWviyubnKv0r qjfLuBDKZwom6EGu4oFgWlFWy3RA3yebMGX9TTsAxt8nV+iK/2EpsPaUp2m9U2t5 kD3M5a7K+XQAGrRGN+g5kRW5okilZl47JYnwmmGOGX9Frr+TlJDAYXZroVG7JfW9 hOD0oIUdBgjA7WZSg0pB0HlxM1zgR3w3XpWMi3OQCB9GqXlac1GSnR23RVAuKJi2 KfJee+hN -----END CERTIFICATE-----Generated at Fri Dec 19 20:25:30 2025 by rpki-client