This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4C5B5424B4D411F09DC6A443C4F9AE02.roa
File: 4C5B5424B4D411F09DC6A443C4F9AE02.roa (raw, json)
Hash identifier: PC+XpQFJb12N8i8oSK6xOyazhaRsX58Y+O3xDWXTgl4=
Subject key identifier: 09:77:7E:F6:D3:30:DB:F9:D3:BD:2D:63:9D:5D:08:95:7D:E8:DA:8E
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0FD3
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4C5B5424B4D411F09DC6A443C4F9AE02.roa
Signing time: Thu 20 Nov 2025 01:06:06 +0000
ROA not before: Thu 20 Nov 2025 01:06:06 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 213903
IP address blocks: 2406:840:c200::/39 maxlen: 39
2406:840:c200::/40 maxlen: 48
2406:840:c300::/40 maxlen: 48
2406:840:c400::/40 maxlen: 48
2406:840:fde8::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4051 (0xfd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Nov 20 01:06:06 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=691e697e-841c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:de:6c:bc:e9:66:7b:1d:19:6a:47:84:36:
1f:35:4f:89:24:1e:6d:60:8b:aa:94:59:3a:f9:c5:
c8:e1:32:27:97:59:e8:fd:82:3e:f7:f0:8b:ea:61:
29:63:38:78:b3:35:8e:44:12:08:e0:f1:4f:30:ec:
42:8d:e6:7c:4f:ea:a9:9f:fd:f4:0b:2e:14:34:a3:
1c:76:5b:96:ef:db:74:cc:bd:65:e9:33:73:be:a6:
c7:7f:a8:30:5c:f3:01:54:38:1f:cf:47:3e:25:50:
cd:64:4c:dd:16:af:2e:7d:bd:b7:29:82:44:61:da:
08:e0:0c:3f:a6:67:91:72:1c:db:72:c5:f1:92:57:
28:24:69:ff:73:90:3b:89:cc:10:b4:01:7d:c5:48:
d3:46:c1:a0:43:14:63:1d:40:01:0f:9e:d2:c7:3f:
86:dd:b0:19:a9:14:f5:87:ea:a0:2a:71:f1:67:25:
63:af:ec:dc:2d:0e:f1:25:f8:67:69:ef:b5:fd:ec:
f9:ff:c2:b8:31:f3:b6:50:9f:51:4c:1f:8c:cc:b0:
5b:14:fe:26:fb:66:e8:f7:45:7e:f2:de:97:da:a8:
73:6b:59:36:d8:e7:d5:e7:5c:ea:aa:a3:20:92:e2:
d4:4f:43:fc:4a:25:3a:99:d6:1e:d9:a3:1d:d5:e4:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:77:7E:F6:D3:30:DB:F9:D3:BD:2D:63:9D:5D:08:95:7D:E8:DA:8E
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/4C5B5424B4D411F09DC6A443C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:c200::-2406:840:c4ff:ffff:ffff:ffff:ffff:ffff
2406:840:fde8::/47
Signature Algorithm: sha256WithRSAEncryption
74:6f:cf:c2:d6:c5:ed:23:3a:f5:43:47:08:81:6a:fa:d3:89:
b1:4d:13:d6:8b:16:32:0d:42:5b:03:8f:db:3b:b3:98:8a:15:
36:1f:ac:b2:08:82:b9:75:c7:16:f0:e0:49:71:84:fe:85:a6:
38:86:b0:18:7b:8b:d5:4c:84:c9:1b:9d:da:f6:89:b0:7f:41:
d8:4e:b1:c9:c5:2d:e7:a3:36:56:2d:80:bc:03:5a:95:95:12:
c0:e1:b4:ca:45:03:87:a5:6e:38:f5:ea:be:4d:c1:f6:78:b4:
2a:13:c7:14:63:62:a1:2a:6c:68:53:31:07:f7:07:a8:79:2e:
50:cd:f9:5b:ea:44:cf:f1:c2:98:31:a3:ae:4e:8e:d2:8e:67:
89:47:d3:e3:1e:b7:5c:24:71:2a:a8:48:c4:d0:80:1f:ac:1b:
59:ff:40:95:f3:7e:c2:f5:22:a5:2c:bb:5e:99:4d:4e:48:45:
e4:90:91:a9:4c:2d:33:f7:9e:15:ec:b9:3b:d0:70:1e:90:c6:
e2:f8:e2:c1:50:a9:14:3a:6a:4a:c2:94:7e:68:29:34:af:e4:
f2:a7:7b:1b:e4:3a:3a:87:03:cc:00:fe:99:51:a5:c3:3f:70:
1e:64:a3:33:65:55:f8:ca:f2:6e:9a:8e:a7:76:93:d4:95:ce:
cb:18:53:f0
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICD9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUxMTIwMDEwNjA2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFlNjk3ZS04NDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6YnebLzpZnsdGWpHhDYfNU+JJB5tYIuqlFk6+cXI4TInl1no/YI+9/CL6mEp
Yzh4szWORBII4PFPMOxCjeZ8T+qpn/30Cy4UNKMcdluW79t0zL1l6TNzvqbHf6gw
XPMBVDgfz0c+JVDNZEzdFq8ufb23KYJEYdoI4Aw/pmeRchzbcsXxklcoJGn/c5A7
icwQtAF9xUjTRsGgQxRjHUABD57Sxz+G3bAZqRT1h+qgKnHxZyVjr+zcLQ7xJfhn
ae+1/ez5/8K4MfO2UJ9RTB+MzLBbFP4m+2bo90V+8t6X2qhza1k22OfV51zqqqMg
kuLUT0P8SiU6mdYe2aMd1eSrFwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAl3fvbT
MNv5070tY51dCJV96NqOMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNEM1QjU0MjRC
NEQ0MTFGMDlEQzZBNDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMCEEAgACMBswEAMGASQGCEDCAwYAJAYIQMQDBwEkBghA/egwDQYJKoZIhvcN
AQELBQADggEBAHRvz8LWxe0jOvVDRwiBavrTibFNE9aLFjINQlsDj9s7s5iKFTYf
rLIIgrl1xxbw4ElxhP6FpjiGsBh7i9VMhMkbndr2ibB/QdhOscnFLeejNlYtgLwD
WpWVEsDhtMpFA4elbjj16r5NwfZ4tCoTxxRjYqEqbGhTMQf3B6h5LlDN+VvqRM/x
wpgxo65OjtKOZ4lH0+Met1wkcSqoSMTQgB+sG1n/QJXzfsL1IqUsu16ZTU5IReSQ
kalMLTP3nhXsuTvQcB6QxuL44sFQqRQ6akrClH5oKTSv5PKnexvkOjqHA8wA/plR
pcM/cB5kozNlVfjK8m6ajqd2k9SVzssYU/A=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:32 2025 by rpki-client