This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/D4F24058870411EF8D8D2635C4F9AE02.roa
File: D4F24058870411EF8D8D2635C4F9AE02.roa (raw, json)
Hash identifier: 4yHPAUnpS39lBAS9Yk3Jy/YMrvPgOTgA0J928B8GM4M=
Subject key identifier: D9:D3:C2:DE:CC:D8:C0:A0:B8:6F:4A:49:57:24:67:AA:29:0C:C2:A3
Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Certificate serial: EB
Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/D4F24058870411EF8D8D2635C4F9AE02.roa
Signing time: Thu 01 Jan 2026 05:23:58 +0000
ROA not before: Thu 01 Jan 2026 05:23:58 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153362
IP address blocks: 2001:df4:6640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6
Validity
Not Before: Jan 1 05:23:58 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=695604ee-bd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:31:49:3c:f8:cc:09:d2:73:70:dd:b9:35:
a9:78:bc:0d:bb:ea:7a:b7:08:54:ec:02:b2:ed:5e:
db:5f:ae:bc:cd:e0:be:db:36:20:14:9a:15:90:22:
68:e0:ff:c4:f6:7b:a7:6b:ed:9e:ba:9b:96:0f:b8:
ae:18:ec:ba:6d:1d:19:30:51:25:7e:d4:c6:16:77:
6e:f6:4e:cf:03:0e:25:bb:a6:c4:ae:95:38:74:95:
28:fe:b0:78:46:a3:37:9b:d6:cc:36:39:b7:3c:fc:
13:f7:e9:6d:bf:cb:e9:24:40:2d:10:84:f2:88:a6:
c9:f4:0a:14:30:2d:db:6a:11:aa:e0:4a:b6:81:b8:
bf:09:08:35:72:90:ee:06:e2:fc:64:82:bc:63:a8:
4a:46:df:55:7c:71:eb:df:75:d0:d6:67:e1:0e:d8:
06:5c:3a:40:e4:ac:8a:8f:39:ed:7d:14:a0:90:55:
93:e4:d1:6c:27:38:7b:11:e9:07:0d:aa:82:39:88:
df:0b:f7:38:c5:d9:54:26:e0:81:07:13:72:54:42:
1b:80:f5:42:c3:1d:c4:56:26:eb:88:70:fd:79:82:
82:f7:36:ac:b8:fd:1b:41:12:e5:3f:31:76:b6:1d:
5b:af:22:5e:c3:00:c4:92:7e:7e:28:28:98:f3:f9:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D3:C2:DE:CC:D8:C0:A0:B8:6F:4A:49:57:24:67:AA:29:0C:C2:A3
X509v3 Authority Key Identifier:
keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/D4F24058870411EF8D8D2635C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:6640::/48
Signature Algorithm: sha256WithRSAEncryption
87:95:9a:6b:47:77:6d:eb:00:3a:0a:b5:78:7c:2a:59:b2:3f:
33:25:0a:5a:33:42:b3:8e:df:15:1d:17:40:19:83:4a:28:ec:
18:a8:87:1e:5b:2b:94:3b:35:46:83:fc:74:af:53:08:23:05:
dd:a4:6b:f8:30:f1:bd:e7:92:20:34:b6:1c:39:54:ce:2e:b0:
b4:2e:db:64:35:9b:f4:69:14:90:e3:14:86:b8:b6:98:f6:79:
33:b6:a9:28:96:26:13:3b:df:26:f0:9f:ca:c1:0f:a1:f0:85:
8c:a2:ca:10:fe:9a:7e:91:6e:12:aa:99:c0:48:34:1f:f9:d9:
00:3d:88:10:4d:da:85:49:71:eb:fc:bb:7e:c3:b5:44:34:1d:
49:61:6a:58:5a:78:f2:fa:e8:ab:8f:82:15:02:c1:37:54:4b:
ff:ae:8f:a0:81:f8:8f:c6:7d:ab:ae:7c:e0:dd:3f:54:7e:b0:
bc:5d:a4:00:33:da:18:cd:63:a9:4c:4f:c3:24:54:69:45:af:
46:f2:a6:30:f2:ee:52:0d:7a:11:14:de:d2:78:08:e5:cb:9e:
f4:00:f0:85:6b:45:a3:d8:e4:3e:2f:4b:da:d7:22:e5:e2:be:
b7:1e:35:c6:85:09:5c:43:cd:2f:f1:3e:54:25:9d:59:c7:ed:
ad:75:b3:0b
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy
NjBCOTk1RTYwHhcNMjYwMTAxMDUyMzU4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU2MDRlZS1iZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxPsxSTz4zAnSc3DduTWpeLwNu+p6twhU7AKy7V7bX668zeC+2zYgFJoVkCJo
4P/E9nuna+2eupuWD7iuGOy6bR0ZMFElftTGFndu9k7PAw4lu6bErpU4dJUo/rB4
RqM3m9bMNjm3PPwT9+ltv8vpJEAtEITyiKbJ9AoUMC3bahGq4Eq2gbi/CQg1cpDu
BuL8ZIK8Y6hKRt9VfHHr33XQ1mfhDtgGXDpA5KyKjzntfRSgkFWT5NFsJzh7EekH
DaqCOYjfC/c4xdlUJuCBBxNyVEIbgPVCwx3EVibriHD9eYKC9zasuP0bQRLlPzF2
th1bryJewwDEkn5+KCiY8/nVrwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFNnTwt7M
2MCguG9KSVckZ6opDMKjMB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2
RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzEyMEEvODI5QTc0QTg4NkYzMTFFRkJFMDI1MzZCQzRGOUFFMDIvRDRGMjQwNTg4
NzA0MTFFRjhEOEQyNjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ30ZkAwDQYJKoZIhvcNAQELBQADggEBAIeVmmtHd23r
ADoKtXh8KlmyPzMlClozQrOO3xUdF0AZg0oo7Biohx5bK5Q7NUaD/HSvUwgjBd2k
a/gw8b3nkiA0thw5VM4usLQu22Q1m/RpFJDjFIa4tpj2eTO2qSiWJhM73ybwn8rB
D6HwhYyiyhD+mn6RbhKqmcBINB/52QA9iBBN2oVJcev8u37DtUQ0HUlhalhaePL6
6KuPghUCwTdUS/+uj6CB+I/GfauufODdP1R+sLxdpAAz2hjNY6lMT8MkVGlFr0by
pjDy7lINehEU3tJ4COXLnvQA8IVrRaPY5D4vS9rXIuXivrceNcaFCVxDzS/xPlQl
nVnH7a11sws=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:28 2026 by rpki-client