This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/95737270643711EFBCD1344AC4F9AE02.roa
File: 95737270643711EFBCD1344AC4F9AE02.roa (raw, json)
Hash identifier: 1Bz9COXjLNAhKPWsXADzGRMHjeGcdVBDGhNMe07ozjE=
Subject key identifier: 51:C9:CE:8E:B3:B6:59:94:11:D8:72:24:6C:55:6B:EC:C6:1E:37:31
Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial: F4
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/95737270643711EFBCD1344AC4F9AE02.roa
Signing time: Wed 03 Dec 2025 04:02:57 +0000
ROA not before: Wed 03 Dec 2025 04:02:57 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139058
IP address blocks: 2001:df4:34c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Validity
Not Before: Dec 3 04:02:57 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=692fb670-8708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:c7:3a:f5:a7:40:93:fe:86:93:72:0e:c1:
c0:97:09:ff:bd:29:f7:da:64:9a:94:2b:70:a5:67:
26:c4:78:ab:15:94:5a:1e:fd:74:bf:79:1e:49:40:
51:22:88:78:54:38:de:44:4f:37:9f:69:ac:2c:9c:
9a:bb:af:71:3d:e6:ff:31:3a:83:e5:c8:9f:2b:84:
c9:5c:d2:f9:24:af:35:26:de:e9:39:53:87:3e:a7:
f1:67:64:4f:bb:b7:88:dc:ce:08:17:3d:2e:01:ac:
14:04:89:a2:91:c8:09:2f:e5:23:6f:4c:d6:96:ec:
ef:28:cd:79:e1:d1:4c:fe:ba:7f:1b:90:78:59:17:
11:4f:44:ae:32:72:67:ee:6c:d6:bc:ad:a4:5e:2f:
55:fa:ce:31:67:a3:eb:07:75:77:7b:1a:c4:96:d2:
01:64:41:ec:48:a3:ff:fd:0e:f5:67:18:95:90:50:
8e:69:03:55:8a:20:45:5c:6e:22:5d:b6:37:8c:ea:
6e:6e:2e:09:6d:e6:f4:ed:56:ec:b6:78:8e:22:dc:
2e:ac:05:20:4b:23:6d:e8:ec:ab:a9:58:9b:01:59:
87:d5:0b:6e:73:71:4d:d3:5a:24:35:f3:40:7f:61:
e4:f8:19:27:32:1d:c7:6f:a8:c7:3b:6e:75:cf:8a:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C9:CE:8E:B3:B6:59:94:11:D8:72:24:6C:55:6B:EC:C6:1E:37:31
X509v3 Authority Key Identifier:
keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/95737270643711EFBCD1344AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:34c0::/48
Signature Algorithm: sha256WithRSAEncryption
95:0a:9f:fd:3b:85:e7:d0:38:b9:94:8d:3e:d3:6e:0a:2c:8f:
6a:d0:30:5f:a7:3a:05:ef:3d:06:46:21:89:c1:db:61:ba:1e:
93:04:f6:2e:81:ce:1e:4e:92:c1:2d:05:92:35:4e:e2:2b:5f:
90:7b:ca:fa:67:06:f9:ee:07:fe:2a:18:8f:18:0a:a2:80:fd:
6e:23:0e:fc:49:36:44:f1:da:ec:8a:9c:b4:a7:b4:80:ca:61:
b0:95:a9:0e:30:a6:89:2f:7a:4c:c0:72:5c:14:b5:e7:f2:9d:
02:f2:a2:67:97:0c:24:ae:5f:85:2c:34:2d:de:f1:29:25:33:
9f:47:7b:57:7a:9e:e8:b7:70:3b:c6:0f:8b:a9:6b:ed:62:36:
24:6f:68:01:16:49:55:73:74:00:86:8f:33:fb:52:10:f5:da:
4e:3b:2c:56:a8:84:cf:48:fe:63:37:6b:20:d4:4d:06:e3:6d:
b5:60:39:46:4b:95:50:2f:78:8a:3d:a2:9c:ef:ba:e6:ec:6a:
c5:af:42:f1:ee:b5:9e:5a:73:3f:13:36:4f:df:ac:05:81:ac:
cd:33:6b:9b:23:94:5a:40:14:47:f7:0f:65:2a:2b:df:b4:54:
4b:28:65:84:44:06:d5:b3:7c:b9:43:74:46:5e:9c:52:3a:36:
a1:ce:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:44:59 2025 by rpki-client