This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/EF885538C28B11EBBF310469C4F9AE02.roa
File: EF885538C28B11EBBF310469C4F9AE02.roa (raw, json)
Hash identifier: zCtYWfWmMHrxhAWz295ThSf+06H/coZnMyFAor81eJY=
Subject key identifier: B6:E4:C5:33:20:EC:D1:0C:4A:1C:E4:21:65:BD:D2:2F:4E:6F:3D:B7
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 18EF
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/EF885538C28B11EBBF310469C4F9AE02.roa
Signing time: Thu 04 Dec 2025 16:15:55 +0000
ROA not before: Thu 04 Dec 2025 16:15:55 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 56207
IP address blocks: 2403:4c0:7000::/36 maxlen: 36
2403:4c0:7800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6383 (0x18ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Dec 4 16:15:55 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6931b3bb-51cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:a9:70:41:8a:d7:98:a1:0d:de:54:4e:27:
6b:0c:82:52:06:20:b6:c4:6b:39:bc:2f:08:bb:8a:
23:d8:ec:4d:35:87:36:8d:15:17:3c:55:c5:11:76:
d6:ba:d2:c4:bd:48:26:a3:06:7e:86:23:74:20:9e:
12:0d:bd:04:ef:69:d1:3e:5c:91:64:f0:83:87:c8:
e6:82:fe:be:3c:85:98:36:e1:9d:31:7b:85:e4:d3:
19:9f:a8:80:35:bc:a6:8e:e2:e4:53:72:a4:6c:2a:
bc:e2:51:42:57:c1:f2:ec:2b:b9:29:3d:04:bb:22:
fc:03:b7:6f:d3:7a:35:81:8f:f7:07:1d:30:3f:70:
40:40:17:26:21:26:8d:bc:07:df:ef:0a:0c:4e:1c:
a3:2d:8b:70:a6:3a:de:a5:50:63:af:55:82:a2:6c:
3d:3a:54:59:70:d5:84:b0:83:6f:b1:63:f8:10:4e:
08:e6:71:f8:f8:ae:96:29:36:13:f2:fb:27:a4:2b:
09:78:7a:16:fc:14:0d:6b:09:43:1d:1f:dc:70:53:
b9:30:4c:88:be:d5:ba:c3:d1:43:46:7f:7d:0e:c9:
f5:e8:59:2b:9e:6e:f1:32:ea:49:47:4d:0e:3e:d4:
68:b8:f8:32:5a:19:87:92:6c:5d:64:70:db:de:29:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E4:C5:33:20:EC:D1:0C:4A:1C:E4:21:65:BD:D2:2F:4E:6F:3D:B7
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/EF885538C28B11EBBF310469C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:4c0:7000::/36
Signature Algorithm: sha256WithRSAEncryption
3f:9e:6e:41:a2:10:9c:85:9d:6d:82:6b:9b:38:f8:57:7f:85:
18:2f:1b:a4:dc:35:ae:63:0d:62:28:95:f8:cd:39:28:25:ea:
78:f8:8c:ce:9c:db:6f:a0:c1:53:4e:ac:57:35:45:0b:35:be:
0e:c8:de:29:53:18:42:3b:94:64:29:20:02:aa:57:08:c7:1d:
cd:43:f7:92:3c:e3:92:26:36:38:7f:f9:c8:39:c6:18:e6:28:
86:2b:90:75:01:2e:bc:a9:98:f9:a9:9a:96:ec:58:1a:1d:c7:
1c:80:78:35:42:0d:68:e3:31:07:58:3c:e0:f5:38:47:4c:e9:
c4:5f:2e:38:8d:4c:3a:4e:74:a2:3b:89:1c:6b:22:81:97:8c:
97:7a:f4:15:3e:ad:64:b3:5e:6e:1f:50:cf:c9:c9:05:e2:69:
d3:f1:87:4a:ff:c6:da:bc:fe:90:69:8f:99:4a:9f:08:d0:0b:
dc:e6:56:b3:8e:64:ae:7b:2a:5b:70:3f:26:21:03:99:73:b8:
f6:31:ac:29:d2:d1:4a:e1:17:c8:83:ea:98:54:28:4a:1d:f2:
e0:2f:43:17:35:1e:de:c7:78:95:18:86:a1:1a:ca:30:46:7c:
4c:73:bb:ee:70:a2:47:46:cc:43:7e:c7:40:08:51:05:1a:5f:
77:74:74:11
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICGO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIxOEIxMTAvBgNVBAUTKEZERTM2QjZFOTQ5Mzk4RTUyRDk1RTg5RDQwQkRGNjBC
MjVEQjY5QjkwHhcNMjUxMjA0MTYxNTU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxYjNiYi01MWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzo+pcEGK15ihDd5UTidrDIJSBiC2xGs5vC8Iu4oj2OxNNYc2jRUXPFXFEXbW
utLEvUgmowZ+hiN0IJ4SDb0E72nRPlyRZPCDh8jmgv6+PIWYNuGdMXuF5NMZn6iA
NbymjuLkU3KkbCq84lFCV8Hy7Cu5KT0EuyL8A7dv03o1gY/3Bx0wP3BAQBcmISaN
vAff7woMThyjLYtwpjrepVBjr1WComw9OlRZcNWEsINvsWP4EE4I5nH4+K6WKTYT
8vsnpCsJeHoW/BQNawlDHR/ccFO5MEyIvtW6w9FDRn99Dsn16Fkrnm7xMupJR00O
PtRouPgyWhmHkmxdZHDb3imNsQIDAQABo4IClzCCApMwHQYDVR0OBBYEFLbkxTMg
7NEMShzkIWW90i9Obz23MB8GA1UdIwQYMBaAFP3ja26Uk5jlLZXonUC99gsl22m5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi82MjhERTUwMkRG
MjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1PVXRsZWlkUUwzMkN5WGJh
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19lTnJicFNUbU9VdGxlaWRRTDMyQ3lYYmFiay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIxOEIvNjI4REU1MDJERjIzMTFFNzk3MjI1RDJFQzRGOUFFMDIvRUY4ODU1MzhD
MjhCMTFFQkJGMzEwNDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgQkAwTAcDANBgkqhkiG9w0BAQsFAAOCAQEAP55uQaIQnIWd
bYJrmzj4V3+FGC8bpNw1rmMNYiiV+M05KCXqePiMzpzbb6DBU06sVzVFCzW+Dsje
KVMYQjuUZCkgAqpXCMcdzUP3kjzjkiY2OH/5yDnGGOYohiuQdQEuvKmY+amaluxY
Gh3HHIB4NUINaOMxB1g84PU4R0zpxF8uOI1MOk50ojuJHGsigZeMl3r0FT6tZLNe
bh9Qz8nJBeJp0/GHSv/G2rz+kGmPmUqfCNAL3OZWs45krnsqW3A/JiEDmXO49jGs
KdLRSuEXyIPqmFQoSh3y4C9DFzUe3sd4lRiGoRrKMEZ8THO77nCiR0bMQ37HQAhR
BRpfd3R0EQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:16 2025 by rpki-client