This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/217645DAC5CC11F0B5963A5AC4F9AE02.roa
File: 217645DAC5CC11F0B5963A5AC4F9AE02.roa (raw, json)
Hash identifier: RXMfaFzW/9ZHGfERyZfeYe4UQqDUFD2avsOBKDr4G80=
Subject key identifier: 06:F3:02:43:31:55:9E:25:FE:D0:66:42:20:11:26:7B:FF:DC:89:5F
Certificate issuer: /CN=A9116297/serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
Certificate serial: 02
Authority key identifier: C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/217645DAC5CC11F0B5963A5AC4F9AE02.roa
Signing time: Thu 20 Nov 2025 04:48:17 +0000
ROA not before: Thu 20 Nov 2025 04:48:17 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 46559
IP address blocks: 2001:df6:4e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl
rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116297, serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
Validity
Not Before: Nov 20 04:48:17 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=691e9d91-a275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:a4:8a:37:55:fd:cb:b8:a4:6a:07:10:ed:
7e:bc:bc:90:e3:aa:36:b6:87:79:0f:a3:48:a0:93:
50:88:0d:44:f1:0e:4d:e4:97:85:fd:fa:14:73:4a:
b4:f7:48:8b:54:02:9a:b1:85:20:d2:44:73:98:2e:
46:ae:74:8e:f9:21:86:90:07:92:2d:f0:6f:6f:49:
71:9a:62:d3:f6:15:03:cf:78:89:e3:f0:87:af:bf:
df:7c:68:37:01:f2:2a:93:be:21:11:c3:f4:a0:d7:
49:20:97:ee:85:e6:2d:3b:86:8a:8f:2b:ee:22:8c:
91:aa:7f:57:08:9b:10:7f:65:4e:71:12:e5:f9:26:
27:d3:42:3b:a1:0a:cd:c5:73:f7:ef:b5:83:f8:fa:
2a:9e:fa:0b:5b:5f:f9:5f:81:c3:e6:78:d4:e5:66:
68:55:83:af:5f:72:5d:20:52:91:19:80:e9:88:db:
c9:bc:67:da:d7:b3:8c:fe:d0:d5:ff:ed:6d:dd:02:
23:56:2b:6a:1b:89:4b:4a:28:a2:9e:5c:cb:89:e9:
df:33:ca:25:23:69:46:5a:88:a4:95:ad:aa:f9:f5:
86:5a:6f:ec:e6:b2:a3:95:68:32:83:74:d0:5d:03:
81:1a:b9:91:64:37:4c:05:9c:5c:d7:b6:15:a9:44:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F3:02:43:31:55:9E:25:FE:D0:66:42:20:11:26:7B:FF:DC:89:5F
X509v3 Authority Key Identifier:
keyid:C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/217645DAC5CC11F0B5963A5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:4e40::/48
Signature Algorithm: sha256WithRSAEncryption
c2:ad:06:ba:4f:eb:2f:3d:8b:b2:bc:72:ec:1b:30:17:9f:e7:
18:52:7a:6d:f3:90:a3:8d:81:dd:8d:1d:06:5f:39:1d:7d:7d:
06:40:7f:39:ad:b2:10:c6:ec:3c:2f:f6:b3:a4:1e:bf:d3:f1:
2f:5b:2d:fe:df:76:07:46:2c:3f:dd:8b:f2:cb:c0:3a:a7:e9:
76:3a:2c:3b:21:73:7a:64:5f:62:d5:f8:6f:9d:da:ff:65:0b:
1a:31:9f:6d:a6:84:fe:96:df:93:69:fc:9c:b5:18:40:c1:96:
6c:e0:63:63:fd:80:b8:97:41:2a:9c:d8:6e:03:9a:fe:33:ba:
b1:0e:54:3e:a4:6c:84:b1:dd:5c:8d:8b:fe:d3:69:da:a9:b6:
03:9f:04:67:ce:21:b1:00:c8:fd:70:f8:73:7e:ab:46:93:02:
1d:7a:42:0e:cd:15:67:14:0f:0a:44:01:fa:49:a3:18:1f:4e:
ad:c5:92:c1:a7:f4:4b:eb:18:b9:5f:d8:25:5f:56:39:9a:2d:
01:bc:8b:dd:2c:b4:a3:6d:f0:eb:b6:74:02:01:56:33:9f:91:
a7:91:2a:8b:d4:70:9c:9d:ad:82:da:f4:b2:2b:4a:1a:93:a2:
11:3d:69:58:13:1a:9f:80:41:db:ee:07:21:48:8d:8b:af:55:
e0:0f:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:00:46 2025 by rpki-client