This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/D6F76118231C11EF84144357C4F9AE02.roa
File: D6F76118231C11EF84144357C4F9AE02.roa (raw, json)
Hash identifier: MiuSv15VLIaeb36ClOcMlCFhKBkosPaBSp5hyovVY7I=
Subject key identifier: 01:5A:EC:23:5F:44:91:BF:0A:F2:74:9F:E1:71:E2:A8:82:A4:F1:14
Certificate issuer: /CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
Certificate serial: 0756
Authority key identifier: 22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/D6F76118231C11EF84144357C4F9AE02.roa
Signing time: Fri 28 Nov 2025 18:22:29 +0000
ROA not before: Fri 28 Nov 2025 18:22:29 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134723
IP address blocks: 2403:680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl
rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878 (0x756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C475, serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
Validity
Not Before: Nov 28 18:22:29 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6929e865-2324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:7b:81:26:45:98:83:c4:6d:ba:4e:a6:eb:
20:48:03:72:a1:0d:e1:30:e0:4a:b8:d5:8d:47:d1:
85:4d:ce:15:4c:3f:96:c1:7b:ce:54:7a:ec:12:8d:
c7:02:2c:90:2b:4f:0c:2a:5a:e6:0b:51:a4:83:94:
ff:d8:5a:ca:49:c0:49:f7:68:bc:98:8f:ad:e6:ea:
59:ab:0f:dd:53:b8:89:65:1a:16:34:6f:b1:e7:82:
05:3b:8c:ab:2e:c2:e6:d7:70:78:03:bf:b3:6a:bf:
9d:a6:0a:31:eb:49:29:b8:05:63:52:08:74:b3:bc:
72:61:b4:99:51:17:ff:74:98:28:51:e3:e1:f2:45:
98:90:bf:8b:23:c7:5f:61:14:13:c7:aa:00:28:90:
74:d4:47:49:59:00:2d:24:25:1e:67:aa:be:b6:10:
b9:54:40:80:43:f4:62:7b:c0:5d:30:75:d6:c0:1a:
87:81:86:41:d7:e2:71:7e:ac:b3:15:bf:58:f4:a7:
30:e1:31:d5:4a:0c:f7:90:97:95:6c:fd:f2:40:9d:
d7:6e:a1:e1:f9:63:b9:14:b4:43:ce:45:41:9e:64:
ad:fe:5a:8f:dd:c9:90:f5:14:2a:f2:a0:fa:8d:d8:
70:18:38:14:3a:ed:40:82:e9:88:41:71:f3:c1:56:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5A:EC:23:5F:44:91:BF:0A:F2:74:9F:E1:71:E2:A8:82:A4:F1:14
X509v3 Authority Key Identifier:
keyid:22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/D6F76118231C11EF84144357C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:680::/32
Signature Algorithm: sha256WithRSAEncryption
a5:7e:16:2d:d5:f0:31:4e:0b:d4:fc:1e:88:68:c5:68:cd:c5:
5c:29:7c:b2:e6:03:3a:cc:84:fa:75:12:06:1e:d1:9f:9c:e5:
d9:df:6f:0c:bf:9c:f9:6f:4c:9e:67:9d:a1:de:b7:da:65:7d:
33:24:9c:76:05:49:b2:b9:54:f1:cf:af:28:f4:b0:bd:9e:c7:
41:1a:a0:ce:aa:22:30:eb:ad:94:f1:27:21:80:08:41:ca:02:
5d:31:18:1f:83:31:34:18:af:08:de:b1:bb:80:7a:f4:1d:a2:
9a:92:20:01:d9:dd:37:70:1a:11:c2:ce:a3:fe:c8:49:5e:31:
d4:eb:32:59:15:9f:a2:61:58:73:cf:95:43:ec:59:b8:bf:db:
70:ec:3f:f1:26:bb:3d:1b:82:53:57:19:f0:73:d6:6f:97:81:
2d:14:c0:95:08:83:71:04:59:e0:9a:f6:fa:af:9d:81:ac:6c:
bf:05:b3:cb:f9:bb:4e:93:01:5d:32:36:66:e6:2f:ec:09:ff:
19:70:36:29:4e:71:b6:23:93:1b:cf:47:e2:7f:ff:f2:be:81:
48:ef:8a:f3:fd:ec:b5:e3:d6:53:d1:82:2f:3f:17:dd:60:fd:
f9:37:b2:7f:5b:0b:03:fc:47:19:5e:13:bc:a2:b1:d6:f0:06:
54:04:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:46 2025 by rpki-client