This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/7035C2E6CF7111F0A638EC6BC4F9AE02.roa
File: 7035C2E6CF7111F0A638EC6BC4F9AE02.roa (raw, json)
Hash identifier: t33RheNvT6AZs0YGzltpL3HsFmPDCdK8QLo3GUeUtsI=
Subject key identifier: 22:BF:42:CF:8D:1D:A3:E2:46:4D:9A:19:BF:93:F4:8A:2E:55:40:74
Certificate issuer: /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Certificate serial: 0CBC
Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/7035C2E6CF7111F0A638EC6BC4F9AE02.roa
Signing time: Tue 02 Dec 2025 11:24:17 +0000
ROA not before: Tue 02 Dec 2025 11:24:17 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138614
IP address blocks: 2404:67c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:51:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3260 (0xcbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6
Validity
Not Before: Dec 2 11:24:17 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=692ecc61-436b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:fa:04:f4:fe:6e:c7:dd:8b:fc:89:7d:ae:
5f:26:b7:80:b1:68:08:8b:fe:97:77:6b:b2:bb:f7:
56:f9:8c:85:c7:6d:b8:1e:84:e3:04:06:10:0a:ea:
91:57:a0:67:7d:c6:29:fd:39:24:e5:42:5f:4d:8a:
5e:57:06:87:3e:6a:43:56:14:a4:de:43:e0:df:9c:
18:51:9c:18:47:37:a4:f5:f5:4a:a1:cf:43:fc:4d:
94:13:6f:52:b4:be:8e:81:fe:fb:a2:2c:2e:88:d2:
fe:98:32:17:14:52:45:73:b5:0f:01:73:92:09:2e:
ee:f0:83:4a:3b:0f:75:21:35:b4:9a:97:c9:5f:f2:
01:16:41:ed:fe:c2:52:3d:d9:e3:a3:9c:eb:c8:df:
95:26:f2:51:5c:8a:9c:1e:9c:98:cb:df:10:6a:10:
b9:3c:15:79:a2:0f:a4:a4:c8:48:b0:55:67:96:e1:
32:94:52:e1:f3:a7:3a:f9:2f:31:47:80:ca:1a:9f:
30:b9:00:ad:30:36:d8:38:59:38:38:41:97:c6:af:
f4:08:7a:23:6e:7e:04:73:ba:4b:a2:95:07:c9:a0:
d3:31:14:c8:10:24:78:20:15:7d:96:26:74:c4:ee:
83:e5:88:b8:bf:82:4c:6a:73:c6:1e:4c:e5:25:bd:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BF:42:CF:8D:1D:A3:E2:46:4D:9A:19:BF:93:F4:8A:2E:55:40:74
X509v3 Authority Key Identifier:
keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/7035C2E6CF7111F0A638EC6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:67c0::/32
Signature Algorithm: sha256WithRSAEncryption
b8:e6:07:a2:2f:b6:d0:c2:cd:ef:f1:2f:26:2e:ed:79:de:d7:
03:a6:fc:57:ae:e1:cb:dd:2f:5f:c5:ed:95:54:44:61:38:91:
5f:58:69:99:e4:a5:74:d7:9f:09:51:b3:3a:d6:d3:7e:bf:bf:
e7:78:db:73:b8:9e:ac:64:02:cb:7c:92:a2:23:60:79:ff:57:
79:ba:7e:08:7c:b3:4f:f1:28:98:76:07:14:59:d8:f8:d6:f5:
5b:fd:84:09:83:29:23:d3:36:f2:c4:9f:61:90:85:dc:90:56:
4c:73:8f:47:a6:bc:e5:53:fe:82:86:1b:d0:d1:00:9c:c6:5c:
0e:7b:23:9b:1b:76:fd:78:4b:72:8f:e6:5b:07:ed:0e:40:b0:
72:22:0e:26:83:3c:3f:02:79:11:d8:40:9c:8e:6b:c6:33:ad:
3e:25:89:26:51:2c:4e:45:71:7a:da:44:3e:17:80:bf:99:e3:
67:76:f3:01:4d:95:97:dc:e2:73:ff:1b:a9:6c:d9:f9:bb:fd:
17:21:c9:d7:66:2e:15:a1:b7:9b:38:75:b4:5e:55:ea:1b:ef:
fe:9a:0e:17:a8:e1:07:83:7c:1b:0b:52:96:5d:fc:0a:c8:bd:
df:af:28:6c:d6:75:b5:e9:8b:8a:8d:73:b1:a1:ba:6e:3a:cd:
c2:f4:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:08:20 2025 by rpki-client