This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/81D3CB186B7D11F0A482004CC4F9AE02.roa
File: 81D3CB186B7D11F0A482004CC4F9AE02.roa (raw, json)
Hash identifier: qNYtSlmPM+Uvz/D6x/pLP0palJS2i+Z/G329nGefhRQ=
Subject key identifier: 91:90:33:8E:AB:7A:FD:ED:DE:F4:DA:72:FE:60:2B:10:70:85:50:F0
Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
Certificate serial: 019E
Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/81D3CB186B7D11F0A482004CC4F9AE02.roa
Signing time: Fri 21 Nov 2025 02:19:24 +0000
ROA not before: Fri 21 Nov 2025 02:19:24 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147261
IP address blocks: 2401:4260:fff2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl
rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
Validity
Not Before: Nov 21 02:19:24 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691fcc2c-4b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:3a:7d:a3:31:da:4c:20:8c:6f:95:56:58:
6b:e2:38:bc:36:fc:89:62:43:01:83:de:41:4f:52:
cd:30:b6:f1:b9:6a:28:28:a0:1f:ac:bb:e3:d5:07:
ba:cd:6a:f0:b8:96:23:58:f4:0d:1b:d5:e0:45:b3:
4e:36:7c:c4:73:30:9e:ef:ac:c5:6b:7b:81:ac:f7:
cf:d2:bb:71:e7:00:a5:ab:e5:9b:c8:25:f2:4c:6d:
dd:23:af:3e:68:d8:74:df:cd:75:ea:98:8f:b1:ad:
e9:d3:85:bc:8f:eb:31:be:ae:96:a9:26:99:ea:b3:
ed:61:4b:0d:21:6f:e4:f2:b0:ef:ba:1b:7b:8e:21:
63:66:c1:6c:85:67:8d:b4:c8:fd:c3:51:bc:ba:27:
b1:cb:16:d6:57:67:43:37:f5:77:2c:d3:47:83:68:
64:b9:1e:36:10:69:18:32:b3:16:5c:0a:94:63:7c:
bc:a5:4a:05:bd:16:7b:c5:ce:35:3f:01:17:91:f0:
fc:bf:4d:17:1c:85:e7:f4:2f:1d:d5:3b:fb:e6:9f:
9b:05:50:db:52:92:53:12:18:9c:a3:1c:a0:f5:76:
d2:e6:23:10:8a:37:e2:e6:da:74:45:c1:65:35:3f:
7a:7e:1c:13:88:64:7b:31:7c:58:df:60:76:94:40:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:90:33:8E:AB:7A:FD:ED:DE:F4:DA:72:FE:60:2B:10:70:85:50:F0
X509v3 Authority Key Identifier:
keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/81D3CB186B7D11F0A482004CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:4260:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
67:89:4f:5a:e6:b4:66:25:d0:fe:7f:7e:17:23:0d:de:a0:9e:
3f:5f:15:02:b3:6d:68:80:5b:8d:6a:27:93:ff:92:7c:37:54:
8d:78:28:cb:fa:75:9b:bd:84:0e:d0:6d:ab:9e:59:eb:02:f3:
57:ea:42:7c:44:0a:34:18:4f:ed:ae:84:ba:1f:c7:72:00:c2:
0f:53:87:74:bf:c8:61:50:46:5b:22:2b:83:34:0f:4b:97:d8:
6a:ed:93:c6:98:30:bb:62:f6:95:ef:17:f7:cd:e3:ce:cd:02:
e2:da:b5:bb:42:76:86:a7:03:cf:92:f5:56:68:47:fa:8e:a7:
ee:ab:66:71:f2:5a:76:d3:37:4b:22:d2:ae:53:f1:d8:dc:d4:
1f:4a:76:d0:3d:25:47:cf:ea:2b:18:f3:ed:c4:a9:01:4e:3d:
6b:4a:6e:6a:70:65:d6:4e:01:65:bb:04:0a:7d:06:3c:f0:a7:
c9:02:78:88:c9:e6:f7:08:e2:8f:a5:4a:41:f0:84:22:2f:3e:
d5:8c:4a:9f:35:4a:e1:3b:6b:46:9e:8a:e9:d0:19:3f:76:7a:
1e:24:cc:20:e9:10:5a:6b:b7:27:7c:50:3f:6b:40:39:ac:26:
2c:44:38:63:5f:35:84:a1:ec:45:0d:b1:c4:80:0d:3b:e7:44:
6d:7c:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:52 2025 by rpki-client