This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/55EFA6C0ECF711EF88590A69C4F9AE02.roa
File: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (raw, json)
Hash identifier: wDnirQsBVGr2+TbqtsfsrtJW3jBHzGAZ6azL84nOZGs=
Subject key identifier: 25:68:33:24:8E:EC:AF:00:88:33:54:13:8B:94:90:72:12:C6:6A:75
Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial: B7
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/55EFA6C0ECF711EF88590A69C4F9AE02.roa
Signing time: Fri 07 Nov 2025 01:41:47 +0000
ROA not before: Fri 07 Nov 2025 01:41:47 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 0
IP address blocks: 2405:4b00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Validity
Not Before: Nov 7 01:41:47 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690d4e5a-b2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:89:fc:d3:5b:66:bf:c5:83:3c:2c:6e:d2:
e6:af:dd:66:eb:31:f5:7a:f2:ad:5c:69:21:fb:e3:
18:cf:d9:3d:29:9d:21:eb:29:09:89:9a:44:43:98:
07:a2:44:d8:59:99:2b:56:63:90:fd:b9:08:aa:34:
51:d8:ff:66:69:06:27:64:08:d9:0e:3b:22:f4:63:
c9:c0:9d:e6:03:45:07:31:40:c0:d1:ce:b6:44:49:
85:e1:d1:81:88:20:53:be:85:61:54:12:64:20:6f:
f9:16:49:a9:c3:d4:70:64:ec:ab:36:c6:18:71:94:
2a:a2:c3:27:6a:23:00:8b:21:90:12:2e:f9:da:3e:
3e:a5:ee:6c:9b:3e:e5:f5:20:a4:66:0b:9c:0f:86:
7f:99:6a:b6:5a:d6:b3:75:8c:57:b3:a4:83:ea:e9:
6f:8c:93:eb:76:41:43:95:61:aa:73:b1:47:fe:20:
c3:ad:c6:ce:91:53:f3:ea:47:8c:6b:ef:a7:5e:53:
d1:ea:47:ab:9c:47:1d:2f:e0:c2:d2:0a:65:d3:b9:
1d:18:76:49:9f:2e:87:a9:90:08:ef:e0:40:ba:b0:
9a:50:86:0c:7f:b4:07:2e:4b:c4:1c:ed:b9:cf:80:
4b:5d:f2:a5:50:43:b9:e2:3f:ad:d5:18:2d:a7:aa:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:68:33:24:8E:EC:AF:00:88:33:54:13:8B:94:90:72:12:C6:6A:75
X509v3 Authority Key Identifier:
keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/55EFA6C0ECF711EF88590A69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
60:ae:3f:0d:43:12:ef:8e:3b:79:b6:b0:f5:38:11:57:89:4d:
02:23:c9:2d:d7:13:39:04:5f:30:d1:22:86:73:36:ca:2f:50:
1a:6e:72:8b:8c:bb:6d:6e:a4:38:22:2e:63:e2:d8:56:64:37:
ae:e8:96:40:a4:5c:d5:5f:5b:fa:7d:b5:91:05:4d:65:ac:0b:
87:39:c0:d6:e4:95:cb:dc:6e:90:49:34:91:32:de:f2:e4:67:
3d:04:76:f2:20:f2:57:6a:01:a1:2b:f6:4c:0a:ee:c4:ec:0e:
a0:be:24:57:15:b5:67:95:0f:16:89:47:03:25:35:7d:66:8b:
78:cd:eb:44:87:a1:c2:3a:53:c4:28:88:3a:97:9a:ca:ab:e3:
6a:34:44:23:5a:8f:d1:cd:fb:ae:f9:0c:71:0c:9e:1b:e5:d8:
3c:28:e5:c3:61:7a:fc:7c:ab:bd:2b:78:8b:5a:87:66:45:85:
da:f7:26:31:cb:a3:ec:29:2e:7b:c8:33:00:d8:9f:76:a7:7a:
9a:43:d2:8b:0b:58:0c:15:74:a6:7e:36:60:53:91:c4:f2:b3:
1e:3f:16:ce:ba:19:38:d0:54:1f:66:30:80:d9:b4:18:81:ca:
7c:36:cf:9b:cd:0c:63:8a:13:c0:6e:33:3f:f3:e2:b9:9d:87:
e1:5b:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:29 2025 by rpki-client