This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/A7FF3E74AD2511EFB6717A1CC4F9AE02.roa
File: A7FF3E74AD2511EFB6717A1CC4F9AE02.roa (raw, json)
Hash identifier: 63XpX2kGWp3lPr6OU9PfcVXrD0xIXlydeDV24SgJERs=
Subject key identifier: D5:66:49:EF:4D:D6:5F:D5:B5:00:00:31:F4:91:80:86:D2:4D:24:DE
Certificate issuer: /CN=A916C016/serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Certificate serial: 09E9
Authority key identifier: B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/A7FF3E74AD2511EFB6717A1CC4F9AE02.roa
Signing time: Fri 14 Nov 2025 19:09:26 +0000
ROA not before: Fri 14 Nov 2025 19:09:26 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 45355
IP address blocks: 2401:d7c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl
rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2537 (0x9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C016, serialNumber=B5AE47DAD04A46593A3AD0825206E10BCF96F8CA
Validity
Not Before: Nov 14 19:09:26 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69177e66-5588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:17:aa:c4:f5:da:b3:35:c2:fb:f3:37:84:
31:0d:b6:ca:5d:ee:e6:46:9a:22:8e:bd:2c:dc:96:
f0:64:12:96:16:0e:b2:0e:1c:ef:22:ba:14:91:ec:
fd:26:f1:68:71:0a:7b:53:e4:7a:ea:be:5c:fe:81:
6d:97:5a:79:09:42:5c:6d:9e:72:21:7e:17:af:98:
a8:5a:a3:9e:2c:d8:bd:b8:a7:c8:a1:53:95:d0:54:
40:ad:67:db:43:74:42:c7:69:1a:e1:09:eb:80:c0:
9d:c8:cd:8d:14:7b:3b:8e:f5:53:73:35:b4:62:78:
e4:e8:01:8f:3f:15:4c:11:2a:c2:92:9e:5a:6c:79:
7b:c4:f3:19:f0:d2:86:5e:3d:90:fa:91:3f:86:c8:
92:33:1d:63:b2:f5:9f:6d:c5:e3:bb:00:dc:f9:68:
4f:9e:4c:34:0b:18:de:38:c5:e4:08:e7:9e:f0:d7:
41:20:1a:b4:cf:03:35:10:c6:dc:38:76:b9:58:e7:
2c:63:5f:0c:5a:20:d1:30:5f:22:6e:83:bf:48:98:
07:d4:eb:82:1b:95:65:99:b7:1e:bb:39:68:29:38:
3f:96:86:91:1b:68:b8:97:0a:1c:73:fb:d6:88:c6:
f9:c6:a5:a8:14:fc:02:46:cc:5f:ed:e0:c9:b3:37:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:49:EF:4D:D6:5F:D5:B5:00:00:31:F4:91:80:86:D2:4D:24:DE
X509v3 Authority Key Identifier:
keyid:B5:AE:47:DA:D0:4A:46:59:3A:3A:D0:82:52:06:E1:0B:CF:96:F8:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ta5H2tBKRlk6OtCCUgbhC8-W-Mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C016/CF5F29CA8F3911EAB3C3174AC4F9AE02/A7FF3E74AD2511EFB6717A1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:d7c0::/32
Signature Algorithm: sha256WithRSAEncryption
43:f2:d9:37:77:dc:7a:5e:a0:ff:cf:60:53:85:8b:ba:27:66:
36:bb:46:a1:0c:1c:1e:a6:2a:9a:57:f1:68:10:57:6e:f3:87:
c6:27:f8:c7:7a:86:04:07:d3:9a:82:c8:23:03:19:aa:2a:b7:
12:37:c8:8f:70:a6:6e:f2:55:e0:fa:8c:21:78:6b:ea:b0:32:
46:03:ae:22:6d:20:63:28:22:ef:61:1d:50:1a:41:3e:c1:81:
b9:e2:73:bb:4e:56:66:2c:25:68:0d:db:0b:a5:44:fc:b0:dc:
1f:09:db:d8:aa:74:99:5b:e8:54:2a:b7:65:70:78:e8:67:b7:
ba:f9:89:44:02:71:e5:20:84:bc:b4:3f:d7:49:e7:a4:b0:47:
93:02:00:6c:71:9b:77:bf:9c:fd:02:06:de:96:e6:85:e0:a4:
0f:9e:ee:c7:e2:ab:fe:6f:e8:a0:47:12:5e:be:53:38:81:c8:
d4:b0:bc:00:3a:67:e9:ba:3b:01:a6:40:b5:ad:4d:15:58:7d:
49:4a:8c:28:0d:13:38:f0:ad:63:05:3c:91:53:91:69:80:7f:
93:cd:d8:17:79:f1:9b:42:34:96:08:c2:4e:47:20:ab:ec:2e:
11:bc:05:4c:6f:06:1e:4e:cd:6b:9d:77:05:7b:aa:e5:c0:58:
24:97:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:17:23 2025 by rpki-client