This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/7CDBC888C5DF11F088DFDD12C4F9AE02.roa
File: 7CDBC888C5DF11F088DFDD12C4F9AE02.roa (raw, json)
Hash identifier: m6ycqtm/zb90XkrBA4drQ1313VLYeis8S9HT8B4NZ8o=
Subject key identifier: 1C:71:F7:A0:57:FE:5E:84:F5:4E:F8:A0:96:1C:E2:A4:91:67:8E:9B
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 0206
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/7CDBC888C5DF11F088DFDD12C4F9AE02.roa
Signing time: Thu 20 Nov 2025 07:06:51 +0000
ROA not before: Thu 20 Nov 2025 07:06:51 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136263
IP address blocks: 96.30.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Nov 20 07:06:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=691ebe0b-c71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:5d:c0:b6:67:5c:01:e8:65:0f:ec:c4:2b:
ee:ed:e6:16:cd:58:f7:33:37:ff:ad:30:5e:41:69:
69:84:da:26:cd:a7:1b:82:8a:1d:74:2b:78:94:84:
dc:a9:4f:da:ae:74:30:cf:84:51:0a:c6:02:01:42:
2b:cb:63:ab:30:b1:75:c5:b5:4c:58:e1:bd:3a:07:
93:9d:1d:69:be:3d:f1:f6:8b:d1:86:cd:3e:e6:f3:
44:12:d2:e0:3c:65:84:d0:4b:8a:d6:be:2d:7a:68:
ae:19:9f:8d:c9:1e:7f:71:1e:d7:61:d0:fe:0b:8a:
4a:52:d3:4a:e6:39:26:ec:f1:43:fb:d8:e4:11:bf:
97:ce:e1:c7:b9:1e:87:0d:7b:f7:c4:ca:12:e1:e8:
bb:25:56:df:b2:79:5a:e5:33:c6:88:3b:0f:22:79:
85:c5:5a:9a:0a:44:2d:06:c7:84:e3:e9:99:3f:51:
4c:0f:e4:fe:a1:6c:21:eb:74:b7:f0:89:79:24:73:
f9:4e:85:ed:61:97:76:57:51:c6:45:51:6e:ca:97:
71:8c:74:fb:cd:a4:61:ad:44:0f:0c:64:a0:1e:d0:
34:92:47:74:aa:f2:3b:09:4d:50:b6:9a:f2:f0:0b:
05:a8:19:26:fa:a8:92:1b:a5:79:8c:f1:70:71:0d:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:71:F7:A0:57:FE:5E:84:F5:4E:F8:A0:96:1C:E2:A4:91:67:8E:9B
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/7CDBC888C5DF11F088DFDD12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.30.68.0/22
Signature Algorithm: sha256WithRSAEncryption
31:78:bd:c3:58:1f:7c:4a:47:55:3b:cb:63:ab:19:d7:b5:85:
0c:a3:fc:2e:bb:47:1b:83:d5:05:a3:ce:ce:ac:bb:da:c6:57:
da:33:d3:7d:62:2c:85:fc:c9:52:62:84:ff:e4:76:cc:9f:e0:
39:5b:a6:10:52:38:09:56:b2:83:84:6c:90:95:33:50:f1:22:
a3:0f:38:49:6f:bb:f3:d7:3f:e3:f2:1d:40:b0:a1:f1:b1:57:
57:7e:53:4e:92:c5:df:25:bc:53:b1:1d:ea:fe:08:b5:95:36:
ab:b1:11:f7:a2:5a:25:e1:bc:5f:6f:aa:3f:9f:d0:19:14:9f:
d6:7b:8d:19:de:1c:28:2f:bc:9d:3f:0a:10:a0:c8:2e:97:94:
80:d3:e0:79:56:97:27:aa:95:4e:5f:72:50:a0:97:82:5e:01:
6e:81:f8:9f:95:20:78:47:5e:0f:66:e0:3c:6c:b3:46:26:01:
f7:31:b6:48:91:59:09:93:04:f9:67:b8:16:80:9c:71:cc:2f:
1f:37:f1:99:6f:55:f6:0d:5d:8b:7b:6c:ad:7f:86:c3:95:ad:
04:37:19:be:6d:b8:d3:e1:d7:b7:9a:f5:86:06:12:07:d1:6b:
6a:92:60:b6:91:72:ce:d6:ed:60:39:6b:91:fd:7f:a8:6f:8d:
de:20:57:3d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3
NThGNkFFMUQwHhcNMjUxMTIwMDcwNjUxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFlYmUwYi1jNzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2JRdwLZnXAHoZQ/sxCvu7eYWzVj3Mzf/rTBeQWlphNomzacbgooddCt4lITc
qU/arnQwz4RRCsYCAUIry2OrMLF1xbVMWOG9OgeTnR1pvj3x9ovRhs0+5vNEEtLg
PGWE0EuK1r4temiuGZ+NyR5/cR7XYdD+C4pKUtNK5jkm7PFD+9jkEb+XzuHHuR6H
DXv3xMoS4ei7JVbfsnla5TPGiDsPInmFxVqaCkQtBseE4+mZP1FMD+T+oWwh63S3
8Il5JHP5ToXtYZd2V1HGRVFuypdxjHT7zaRhrUQPDGSgHtA0kkd0qvI7CU1Qtpry
8AsFqBkm+qiSG6V5jPFwcQ3wCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBxx96BX
/l6E9U74oJYc4qSRZ46bMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvN0NEQkM4ODhD
NURGMTFGMDg4REZERDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJgHkQwDQYJKoZIhvcNAQELBQADggEBADF4vcNYH3xKR1U7
y2OrGde1hQyj/C67RxuD1QWjzs6su9rGV9oz031iLIX8yVJihP/kdsyf4DlbphBS
OAlWsoOEbJCVM1DxIqMPOElvu/PXP+PyHUCwofGxV1d+U06Sxd8lvFOxHer+CLWV
NquxEfeiWiXhvF9vqj+f0BkUn9Z7jRneHCgvvJ0/ChCgyC6XlIDT4HlWlyeqlU5f
clCgl4JeAW6B+J+VIHhHXg9m4Dxss0YmAfcxtkiRWQmTBPlnuBaAnHHMLx838Zlv
VfYNXYt7bK1/hsOVrQQ3Gb5tuNPh17ea9YYGEgfRa2qSYLaRcs7W7WA5a5H9f6hv
jd4gVz0=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:37:11 2025 by rpki-client