This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/5C2186C444B011F0B9799F48C4F9AE02.roa
File: 5C2186C444B011F0B9799F48C4F9AE02.roa (raw, json)
Hash identifier: CQ8BVNryOMMDiZaYMvTdMnDGtPM+LUYxLj0RQYHLmNQ=
Subject key identifier: 1D:A9:7F:63:46:BE:7D:71:D3:C1:C6:AF:9A:4D:90:B4:B8:28:FB:D8
Certificate issuer: /CN=A918196D/serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
Certificate serial: 050B
Authority key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/5C2186C444B011F0B9799F48C4F9AE02.roa
Signing time: Fri 02 Jan 2026 23:19:38 +0000
ROA not before: Fri 02 Jan 2026 23:19:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 147051
IP address blocks: 2400:1360:c000::/34 maxlen: 34
2400:1360:c000::/48 maxlen: 48
2400:1360:c001::/48 maxlen: 48
2400:1360:c002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl
rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1291 (0x50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F
Validity
Not Before: Jan 2 23:19:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6958528a-0a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:66:d0:75:73:9d:21:44:ad:9f:8d:7e:27:
bd:c7:d0:2c:19:2b:23:c4:24:f0:fe:8d:5c:ba:fd:
54:c9:96:06:a8:78:b1:19:6f:16:8f:85:96:ac:10:
ed:74:4c:c6:32:7f:4b:41:7c:a5:3d:f0:24:51:67:
b9:72:f6:d7:fd:d4:06:62:0d:c8:63:d9:0e:13:96:
05:c4:c3:19:38:46:80:a8:a1:62:96:7c:f3:86:45:
f8:8e:9e:7a:82:1f:7c:e8:b3:52:20:ff:10:e6:1e:
dd:25:a5:da:67:65:3f:39:a6:64:c1:37:d0:1a:d1:
f6:51:d2:ec:26:52:46:65:71:25:aa:df:5f:8a:11:
36:28:0d:00:16:ad:50:25:61:67:d2:ba:5e:e3:88:
9d:f9:3d:7f:d5:f4:5f:41:09:63:6b:d1:ba:07:2c:
76:b7:3f:60:d4:8c:f4:f5:13:f8:5b:40:28:29:7f:
5a:7b:54:87:f2:d8:e5:f4:e9:f9:8f:e3:d5:28:9b:
f9:0c:2b:4a:c6:3b:8f:a8:71:35:96:e7:cc:88:75:
ad:13:cf:76:ab:f5:26:33:a7:f1:00:81:57:2a:94:
86:6f:8c:74:54:3b:f0:25:c6:4a:35:56:68:68:fa:
b5:dc:34:b4:d6:08:ff:b8:e9:8a:c7:64:dd:66:c7:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A9:7F:63:46:BE:7D:71:D3:C1:C6:AF:9A:4D:90:B4:B8:28:FB:D8
X509v3 Authority Key Identifier:
keyid:68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/5C2186C444B011F0B9799F48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:1360:c000::/34
Signature Algorithm: sha256WithRSAEncryption
3b:d1:22:19:c2:6d:09:0f:75:07:46:ce:b2:0a:8e:9d:8b:dd:
f1:37:a2:a0:f9:52:c5:3f:13:da:6d:4c:f3:b5:b1:69:df:f2:
44:ac:e0:c5:cf:f5:92:cb:77:3b:0f:66:82:35:e6:7a:55:35:
ae:35:24:6b:de:cc:03:62:2b:4d:9f:76:d2:5a:af:b7:2e:92:
c2:29:6e:e4:e7:9f:f8:fa:1d:64:90:37:6f:33:5c:00:32:0b:
a1:39:64:a1:41:ec:e2:66:ee:b5:3b:cf:d8:3b:a5:b6:df:cc:
09:f8:91:75:95:7d:35:fe:94:a0:4b:d3:2e:2d:cc:1b:df:4c:
d9:98:72:81:a8:7e:8d:04:bd:f6:42:b7:e0:86:91:be:a1:21:
e7:e6:4b:c5:1d:d5:fc:e9:99:9b:d7:19:da:6a:e6:88:d7:52:
be:30:7b:cd:cf:53:ea:7b:d8:26:8f:19:62:4e:72:e1:51:67:
43:7a:8b:6b:c5:81:e7:7a:07:c5:96:83:eb:41:a1:b1:2f:53:
a2:80:f8:1a:fb:d3:72:6f:e9:68:2d:fc:cd:b0:53:08:01:02:
55:8b:19:26:09:17:e3:b2:96:b9:5f:2e:38:2d:32:f4:9e:37:
4f:74:b4:a8:1b:43:c0:59:26:92:43:36:d8:9c:b4:d8:b7:a3:
7f:80:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:51 2026 by rpki-client