This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/DE1B9460EDF511EF86CB7315C4F9AE02.roa
File: DE1B9460EDF511EF86CB7315C4F9AE02.roa (raw, json)
Hash identifier: cRwLsutqQVxWT3ZK97DqtNM6mPPtYnnF8FmbKFlWINg=
Subject key identifier: BE:C5:DC:7B:D5:50:E7:78:E5:FF:8A:65:4B:C9:14:D6:B4:E0:7F:6E
Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial: B8
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/DE1B9460EDF511EF86CB7315C4F9AE02.roa
Signing time: Fri 07 Nov 2025 01:41:47 +0000
ROA not before: Fri 07 Nov 2025 01:41:47 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 35039
IP address blocks: 2405:4b00:1000::/36 maxlen: 36
2405:4b00:2000::/36 maxlen: 36
2405:4b00:3000::/36 maxlen: 36
2405:4b00:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Validity
Not Before: Nov 7 01:41:47 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690d4e5b-1d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:c7:c8:d9:02:23:a6:82:06:22:86:39:ca:
cb:e6:2a:af:12:3e:47:6a:23:43:45:09:84:92:fe:
db:d2:48:a5:b1:0d:f1:c8:a9:54:f9:40:d4:e3:f1:
e4:a7:86:e4:13:b0:94:c5:40:04:f2:5f:b6:b8:07:
e7:8f:a3:3e:db:ad:f3:0b:1c:3b:7d:ea:ce:f5:4c:
9d:5c:e1:1c:39:a0:ba:9e:73:d9:11:37:6c:dd:da:
5a:3c:e0:69:fa:66:62:63:7b:96:8c:99:7d:99:a8:
6e:3e:7a:42:03:75:c7:2b:19:84:2d:b0:9d:71:45:
50:c9:6c:38:71:ba:71:cf:bf:d1:dd:25:28:54:fd:
1a:90:1e:a9:b1:7f:62:7f:f3:53:49:0f:52:9c:e4:
63:b9:79:7f:0a:c9:78:5f:e1:e2:1f:5a:3d:56:0f:
06:b9:3b:79:fe:46:05:e4:b5:a4:fc:4d:44:6e:ed:
d5:06:05:52:c4:98:1d:5d:59:96:6e:d4:88:75:ad:
bb:ed:a5:dd:c6:7f:d8:17:bb:8a:f8:58:a8:cb:6a:
12:d8:13:29:b0:ce:b9:0e:a4:e7:99:ef:31:a6:d4:
2f:94:39:a3:78:e9:76:c7:77:df:0f:48:17:d3:6c:
e7:5f:0a:03:3f:d2:44:7a:20:73:6b:65:b6:2e:71:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:DC:7B:D5:50:E7:78:E5:FF:8A:65:4B:C9:14:D6:B4:E0:7F:6E
X509v3 Authority Key Identifier:
keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/DE1B9460EDF511EF86CB7315C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:4b00:1000::-2405:4b00:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:8e:eb:11:15:1c:f2:03:50:b9:b0:2c:f1:75:10:05:77:91:
8a:06:e9:21:6e:0b:62:4b:07:4c:37:75:20:82:70:2e:d8:bd:
c1:37:ea:d9:1d:13:84:94:49:6a:42:f0:15:e8:2f:15:f0:22:
e8:e7:cc:35:e7:56:ed:c6:c2:df:56:5d:1d:7e:93:75:d6:e0:
fa:97:a7:4e:86:9f:6f:0f:91:7c:a4:0f:ec:4e:f4:bc:78:bb:
74:ea:a2:5f:1b:91:a2:68:c0:df:0d:72:bf:cc:20:89:3a:84:
43:4b:de:7a:9d:6e:96:84:8b:12:4b:d4:7b:18:ca:85:80:ed:
e7:f8:ec:c6:d4:57:64:71:67:8d:72:55:9b:f0:7e:f5:13:ee:
b3:ee:b2:35:c9:de:dd:a6:e9:6e:bc:a9:ac:ca:e3:71:49:ae:
b9:c7:4d:e5:95:0b:2a:10:87:14:a3:5e:b4:08:81:36:c4:c0:
ef:6f:8d:f8:f4:2a:39:d7:16:f8:96:b3:6a:c3:d6:c1:5e:07:
1a:f9:9e:a4:aa:80:cf:ff:a3:3b:ed:54:4e:0b:f3:20:da:c6:
09:8d:37:a1:c8:d2:bf:fc:ba:83:02:2f:56:f1:59:a0:84:96:
0a:b6:2b:78:9d:1f:17:2b:38:2d:19:71:1b:74:72:49:0f:23:
ad:22:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:53:36 2025 by rpki-client