This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/07FF86DACF3F11F0AF94352AC4F9AE02.roa
File: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (raw, json)
Hash identifier: h+Bf/dSTxmYNIw4E2dr2Pk1RCT+hYqXsNKneahGznRI=
Subject key identifier: D3:E8:4B:39:15:7F:0A:9B:2B:38:40:48:4A:F1:7E:95:DA:79:CC:96
Certificate issuer: /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial: 179F
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/07FF86DACF3F11F0AF94352AC4F9AE02.roa
Signing time: Tue 02 Dec 2025 05:23:27 +0000
ROA not before: Tue 02 Dec 2025 05:23:27 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 134146
IP address blocks: 2001:df4:3fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6047 (0x179f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Validity
Not Before: Dec 2 05:23:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=692e77cf-031d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:14:4e:7e:55:3a:1f:97:c5:52:01:c4:95:
b5:41:7a:8b:6f:77:fe:be:a7:64:1e:6b:d8:a2:53:
d7:a6:41:dc:3a:1c:39:f2:7e:02:85:29:ef:d7:f2:
0c:e9:c8:31:a4:95:90:ce:35:6a:52:c0:bc:ea:cd:
c8:f0:4a:75:1a:85:cc:30:94:c0:30:ee:04:30:45:
39:d1:e2:28:79:8b:6f:c2:44:80:51:6c:bd:cc:75:
4a:24:dc:92:20:f0:aa:60:1e:a3:f3:03:61:73:9b:
35:19:6d:7f:d3:90:d9:ba:c5:b8:c1:54:b2:b5:a3:
c6:ac:6f:69:aa:64:a5:30:b2:32:20:c7:cc:14:b4:
98:b9:a5:e8:89:83:b4:a8:87:86:b7:ca:0c:c6:50:
1f:3a:7e:4c:1c:3b:bd:ee:e7:9f:66:81:cf:38:a8:
62:67:0e:53:cf:81:77:e3:03:2f:bc:25:79:61:11:
d0:9d:68:1e:67:fe:35:91:86:3e:4f:49:bb:22:76:
f7:11:0b:52:8b:c2:ff:3f:63:55:69:33:f4:f5:6e:
bf:82:26:52:18:71:3e:0d:ce:09:8c:2e:ec:7c:5c:
b0:12:a7:12:18:30:33:ae:49:e0:88:12:ae:0e:05:
25:ab:e3:05:c3:13:14:c8:99:bd:03:bf:a5:80:7e:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:4B:39:15:7F:0A:9B:2B:38:40:48:4A:F1:7E:95:DA:79:CC:96
X509v3 Authority Key Identifier:
keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/07FF86DACF3F11F0AF94352AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3fc0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:4e:fd:7e:0c:2c:72:93:0b:b7:77:5b:6f:09:b2:76:75:a1:
2b:8a:97:7a:ae:3c:3f:3b:df:79:cd:29:07:d6:6a:de:ba:46:
e5:cd:c2:3b:95:e4:80:0a:77:5d:ed:3a:42:55:7c:f3:88:2d:
26:90:6a:62:58:6a:12:01:6d:2b:e4:bd:f7:16:d0:de:ee:94:
54:ed:fe:0d:e5:8e:bf:ff:6d:c0:be:3a:c9:54:29:5a:47:62:
a0:b9:1a:05:14:a6:07:c3:0e:ff:0e:2a:18:13:bf:a2:26:0c:
35:b5:41:1f:78:bb:7b:a2:5c:21:ad:60:a7:7c:e4:fd:15:d2:
1a:d7:ca:24:26:11:77:1e:2d:90:84:e2:95:28:e6:6b:22:e6:
33:0f:b6:24:30:c4:94:53:f9:11:eb:ed:c2:e3:71:36:e7:40:
b2:fc:7d:6d:0b:61:bb:93:08:ce:f0:a0:70:68:1d:01:17:dd:
d1:bc:e8:7d:14:ce:09:14:60:7c:5a:3c:97:c3:8f:fe:b4:16:
a2:a6:f0:b4:cc:4d:8b:4c:48:15:2c:ff:da:44:bf:8d:d3:a4:
f7:74:d8:4d:6e:5f:44:1a:33:d1:9b:05:22:00:0a:30:b6:b0:
2b:c0:9e:82:ff:41:65:c7:d0:37:f7:46:ec:3f:71:95:a1:a5:
b4:26:e6:e2
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICF58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg2MkQxMTAvBgNVBAUTKEQ4QzY3MzA5NUU4MkE5QjdFN0RGQ0Q0NjU4MEY3ODMx
QThEMThBQ0EwHhcNMjUxMjAyMDUyMzI3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJlNzdjZi0wMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzLAUTn5VOh+XxVIBxJW1QXqLb3f+vqdkHmvYolPXpkHcOhw58n4ChSnv1/IM
6cgxpJWQzjVqUsC86s3I8Ep1GoXMMJTAMO4EMEU50eIoeYtvwkSAUWy9zHVKJNyS
IPCqYB6j8wNhc5s1GW1/05DZusW4wVSytaPGrG9pqmSlMLIyIMfMFLSYuaXoiYO0
qIeGt8oMxlAfOn5MHDu97uefZoHPOKhiZw5Tz4F34wMvvCV5YRHQnWgeZ/41kYY+
T0m7Inb3EQtSi8L/P2NVaTP09W6/giZSGHE+Dc4JjC7sfFywEqcSGDAzrkngiBKu
DgUlq+MFwxMUyJm9A7+lgH4rqwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNPoSzkV
fwqbKzhASErxfpXaecyWMB8GA1UdIwQYMBaAFNjGcwlegqm359/NRlgPeDGo0YrK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODYyRC8zMjg3OUQzQUU4
QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3FiZm4zODFHV0E5NE1halJp
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJNWnpDVjZDcWJmbjM4MUdXQTk0TWFqUmlzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTg2MkQvMzI4NzlEM0FFOEJBMTFFNzhBNkE3MDQyQzRGOUFFMDIvMDdGRjg2REFD
RjNGMTFGMEFGOTQzNTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ30P8AwDQYJKoZIhvcNAQELBQADggEBAB5O/X4MLHKT
C7d3W28JsnZ1oSuKl3quPD8733nNKQfWat66RuXNwjuV5IAKd13tOkJVfPOILSaQ
amJYahIBbSvkvfcW0N7ulFTt/g3ljr//bcC+OslUKVpHYqC5GgUUpgfDDv8OKhgT
v6ImDDW1QR94u3uiXCGtYKd85P0V0hrXyiQmEXceLZCE4pUo5msi5jMPtiQwxJRT
+RHr7cLjcTbnQLL8fW0LYbuTCM7woHBoHQEX3dG86H0UzgkUYHxaPJfDj/60FqKm
8LTMTYtMSBUs/9pEv43TpPd02E1uX0QaM9GbBSIACjC2sCvAnoL/QWXH0Df3Ruw/
cZWhpbQm5uI=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:33:54 2025 by rpki-client