This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/455D199EE38B11EE84566164C4F9AE02.roa
File: 455D199EE38B11EE84566164C4F9AE02.roa (raw, json)
Hash identifier: S8ULCgPAXSM7+qWXp3lvcSf0qm+AFlYQ40YOxpCz5HM=
Subject key identifier: A8:DB:C9:24:16:C4:A5:44:A0:8E:0E:21:C3:51:9E:3A:27:FF:36:C1
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 0276
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/455D199EE38B11EE84566164C4F9AE02.roa
Signing time: Tue 13 Jan 2026 01:21:13 +0000
ROA not before: Tue 13 Jan 2026 01:21:13 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 152639
IP address blocks: 2001:df2:3dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 630 (0x276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Jan 13 01:21:13 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69659e09-cb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:58:12:e3:4e:38:66:cc:92:2d:22:03:39:
71:fe:92:59:99:b3:0c:16:d9:f5:38:13:43:69:99:
5b:fe:7a:50:7c:8c:54:83:d7:cd:dd:5f:44:9d:41:
ad:62:7c:04:26:ab:64:e0:b2:7a:11:ac:0b:9b:4c:
a9:fb:ec:5a:4e:29:42:cb:10:2b:2c:23:bb:30:21:
1c:ee:c5:82:f2:15:d1:ec:8a:7a:64:40:d7:99:42:
7e:f5:bf:55:51:cc:f2:7f:31:2b:db:5f:e3:bf:5a:
6a:5c:0e:68:f0:49:a7:58:a1:6f:c1:53:f9:4f:13:
e5:b4:cc:c6:94:47:93:f9:14:4b:93:f0:34:e8:b5:
69:f9:2c:3f:71:96:0e:1a:7b:88:a8:53:4b:00:8c:
9e:f9:f3:6a:74:3b:0b:05:22:11:2c:4f:dc:79:6f:
fe:40:91:01:97:a5:32:15:49:12:1a:08:8b:72:2b:
8a:20:8e:a4:d0:fc:5c:d3:e7:a1:28:8f:90:9e:5b:
69:3b:b1:4f:9d:03:2d:95:7c:38:a7:fc:93:e7:e7:
f3:a8:2a:b8:02:69:e6:5a:f8:96:33:35:0b:ff:7c:
87:d7:07:d7:87:6f:a8:36:f2:ea:be:26:f3:4f:73:
08:38:ef:1e:f5:a9:62:c8:b8:85:b5:75:0c:53:44:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DB:C9:24:16:C4:A5:44:A0:8E:0E:21:C3:51:9E:3A:27:FF:36:C1
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/455D199EE38B11EE84566164C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:3dc0::/48
Signature Algorithm: sha256WithRSAEncryption
b0:01:dc:84:88:79:c5:0a:de:c5:b9:8c:09:33:40:26:48:bf:
7d:59:53:e0:95:ea:6d:0b:57:dc:9d:e4:cc:d2:35:e0:72:b5:
ce:e7:14:02:20:57:90:98:02:d5:c8:56:d8:1e:a2:26:bb:20:
ec:59:e5:ec:a2:c4:90:23:23:6f:28:59:7c:07:5d:52:96:9f:
02:93:94:8e:ae:ea:e5:91:a3:4e:4f:f1:25:c7:cc:2c:5a:3b:
a6:78:a2:48:d6:6c:aa:0f:17:ef:06:a6:2d:c6:ef:37:c5:56:
b0:ce:cf:8e:f8:c8:25:80:c6:71:ad:5d:1b:f9:c7:00:f1:b1:
f9:32:2f:ad:1e:93:f0:d9:15:41:b6:2c:52:8e:ed:28:33:4a:
b6:08:01:ce:a7:80:59:9a:6d:3e:f2:5b:48:d1:56:3f:bc:ec:
32:26:14:1e:78:d5:d6:eb:0d:84:6b:f9:db:c6:15:f6:e8:31:
fe:47:bd:1b:e5:44:de:17:06:dc:15:ca:ac:92:83:6f:42:7d:
65:79:da:9a:a1:a4:1f:f0:99:60:88:f2:f5:44:32:e2:58:9c:
04:80:94:d2:a2:13:4c:e9:17:3a:e7:b7:01:5f:3c:1f:da:f5:
3f:9c:be:c1:57:a2:35:8e:19:21:96:86:94:5d:38:44:54:2f:
8a:63:09:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:21:09 2026 by rpki-client