This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/0D041790A28611EFBD5A8C11C4F9AE02.roa
File: 0D041790A28611EFBD5A8C11C4F9AE02.roa (raw, json)
Hash identifier: LGzZuPNiRPnWl27SkEdE4WpUy5pSZMAYp9U5fkhC8CI=
Subject key identifier: 8B:41:C3:C4:99:D5:DE:B7:35:F8:CB:91:6A:30:8F:34:50:26:7F:44
Certificate issuer: /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial: DB
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/0D041790A28611EFBD5A8C11C4F9AE02.roa
Signing time: Sun 11 Jan 2026 05:23:57 +0000
ROA not before: Sun 11 Jan 2026 05:23:57 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 153455
IP address blocks: 2401:d760::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Validity
Not Before: Jan 11 05:23:57 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=696333ed-487a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:18:52:f5:e3:96:44:89:69:da:db:da:40:
53:2d:5f:ee:ce:cc:d4:a6:c5:a8:8f:df:54:a8:9d:
54:60:f4:1a:00:8e:cf:a5:92:51:99:89:2e:12:63:
df:fd:bc:ee:40:f5:e2:7c:da:93:85:7b:da:dd:30:
c7:a8:69:67:b9:4b:7a:53:5c:9d:97:b9:81:6f:be:
10:e2:c2:3e:a2:19:de:19:9a:90:53:2f:3e:32:8b:
2a:a3:d1:4d:a5:75:da:7b:73:7d:9c:15:77:45:51:
44:08:7a:db:fe:31:14:d1:81:af:37:4f:0b:f9:6b:
40:de:e7:bc:33:1e:e3:df:0b:bf:5b:9c:df:5f:a6:
57:bb:98:7a:e3:86:82:0f:e0:d7:2a:fe:30:8e:cb:
3c:99:15:97:bf:76:67:43:a8:29:c9:2f:db:1d:4e:
eb:e5:f2:fc:01:e1:c4:b4:4d:0c:f2:a6:ae:77:9f:
8e:8b:aa:6d:b4:52:b2:e8:54:2b:dc:82:cc:89:d3:
4e:97:3f:ee:66:c1:2a:32:a9:16:32:e7:38:7b:b1:
90:63:f4:d1:1a:75:fa:b7:03:f9:32:5f:12:2e:42:
32:7c:6d:36:a6:e9:f0:0d:73:16:c6:39:cf:e6:77:
5e:5b:cf:8e:dd:a1:e0:28:ae:f0:f1:b0:6a:0c:e0:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:C3:C4:99:D5:DE:B7:35:F8:CB:91:6A:30:8F:34:50:26:7F:44
X509v3 Authority Key Identifier:
keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/0D041790A28611EFBD5A8C11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:d760::/32
Signature Algorithm: sha256WithRSAEncryption
62:05:9b:67:56:7a:84:4f:f9:16:31:ee:9d:25:99:f0:37:b1:
6f:f6:b6:69:0b:04:1c:c1:e5:f4:d4:6b:74:c4:d7:a3:25:24:
69:48:de:b0:e3:d9:be:86:d2:5d:66:ed:4f:63:59:3f:c3:80:
8f:60:38:84:ab:fe:1d:90:1e:30:91:67:b3:07:c3:f2:83:c1:
d3:05:81:f4:4f:c4:97:b3:bd:06:30:d6:54:51:e5:51:86:93:
28:ae:fc:38:6a:80:75:c2:fa:b6:7c:b3:30:30:63:8e:73:aa:
34:48:ce:94:0b:9a:43:eb:03:a1:39:4a:29:97:5f:e0:29:10:
4b:bf:13:c7:c7:9a:c3:7b:e2:92:1e:55:d3:74:13:33:67:02:
fd:82:52:98:4b:59:f3:35:03:08:2f:62:ca:30:34:63:b6:ec:
2c:b1:be:ff:06:7e:39:ca:c1:19:14:2d:d9:56:3e:20:71:ea:
ea:2c:dc:14:e4:a0:15:bc:ee:d5:0c:2d:11:5e:ce:83:26:7a:
c9:ba:fd:4f:5e:ab:60:7a:63:f1:98:72:c0:f4:d4:cb:af:42:
07:dc:5c:a4:78:3d:7e:90:6c:82:ba:20:c3:9f:3d:e8:50:4b:
cf:b0:47:4c:4c:64:20:a8:aa:8d:6c:76:08:e7:61:fc:23:2f:
c3:27:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:51:50 2026 by rpki-client