This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
File: 21D692500C1E11EFBA32F937C4F9AE02.roa (raw, json)
Hash identifier: UxGDysL/MPPlpy0I96m8zyqIXcYr7NufRv/5DmeMKi0=
Subject key identifier: 0D:0B:6D:41:BD:82:41:81:9E:F7:A8:FB:0D:0C:CF:2F:BB:AD:B6:83
Certificate issuer: /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial: 0148
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
Signing time: Fri 21 Nov 2025 03:20:48 +0000
ROA not before: Fri 21 Nov 2025 03:20:48 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 17990
IP address blocks: 2001:df0:a300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91846F6, serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Validity
Not Before: Nov 21 03:20:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=691fda90-4498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:b6:89:47:00:4b:2a:5b:ad:bf:d2:3d:29:
ed:bc:90:6a:fb:d7:95:f2:a7:20:a3:c7:9d:15:4c:
fc:50:95:0f:78:a4:67:8f:c8:ca:10:d8:6e:a5:e7:
e3:4e:aa:0c:87:2b:25:46:e5:0d:86:fb:c3:5a:14:
68:30:d6:21:c8:f4:62:10:70:f3:02:73:75:26:e9:
cd:70:7c:9e:db:e1:cd:dd:a0:e0:44:91:6b:80:11:
f2:34:62:54:27:1b:d3:da:5c:7f:71:a3:c7:41:f6:
33:7d:91:fa:3f:fd:2e:7f:24:22:83:70:8b:71:a4:
0b:1f:75:9b:25:65:5c:90:5c:1c:c3:58:4d:2c:41:
c8:33:bd:40:d6:04:b2:af:3e:1e:54:60:33:30:2e:
50:f1:cc:11:37:f8:87:ab:38:46:90:56:af:12:3c:
24:e7:0a:8b:d5:dd:be:40:71:68:f3:db:3e:d9:2e:
ed:45:53:40:32:f4:b5:2f:d6:f1:87:81:d3:a6:b2:
94:c3:50:0e:2c:ff:25:49:21:06:3a:78:ff:fc:fb:
98:1f:e5:16:8a:e1:6a:99:cb:c5:a7:2f:87:07:15:
f4:0b:40:fb:b3:37:78:bb:1d:c5:a6:5e:18:e4:aa:
15:6b:e5:ee:6c:4b:97:86:fc:50:c5:21:51:56:3c:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0B:6D:41:BD:82:41:81:9E:F7:A8:FB:0D:0C:CF:2F:BB:AD:B6:83
X509v3 Authority Key Identifier:
keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:a300::/48
Signature Algorithm: sha256WithRSAEncryption
36:80:a3:03:46:12:78:ee:0a:d1:2a:e7:0f:10:61:2a:f5:f6:
d0:c9:c4:b5:ae:e7:fd:7d:f5:b4:a5:0f:0d:8c:81:df:dc:23:
eb:01:b9:3a:81:a3:1b:07:6d:07:45:71:0d:6c:b6:3c:ec:bb:
1a:4e:89:1f:5f:ec:3a:d8:70:c2:4c:5e:80:50:24:aa:e2:6d:
92:01:52:19:5e:0e:59:18:55:55:5e:31:5c:9f:3d:df:e8:5c:
8b:3c:c5:2d:0a:5a:a0:cc:40:e0:8e:9d:f7:f3:dd:8b:b4:87:
c0:3c:98:d6:3b:ba:3d:16:94:95:dd:07:e8:9c:ff:d9:f9:79:
25:c4:92:6a:2f:f7:19:0c:46:65:f6:0a:63:e4:2a:a4:d3:50:
e3:7a:4c:75:fc:1c:84:d4:f2:d7:55:00:f3:b2:41:49:da:88:
76:c8:44:da:44:2b:e4:e8:d1:21:e1:1e:d6:ef:6d:0e:4e:a7:
4a:6c:f1:6f:2a:8f:b4:d8:d2:45:59:16:0e:5f:4d:6c:a1:fb:
02:cf:c5:1c:dd:ba:ba:01:e6:b1:c1:bb:36:15:55:5f:50:4f:
43:9a:3d:4c:19:5f:ec:0f:f5:5b:85:f7:35:f6:4d:da:36:9e:
6c:49:cc:aa:6f:1f:ea:6f:1e:15:0a:08:c5:68:d3:74:19:c9:
8f:f5:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:45:29 2025 by rpki-client