This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/16C04B8680FB11ED9B35954DC4F9AE02.roa
File: 16C04B8680FB11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier: U41iJcZS8b8CmnXpeo9J3iAIuFouKFGIcbrF8o12XKM=
Subject key identifier: AC:9C:A5:A6:10:48:12:57:F6:FC:09:A9:4B:9E:55:E0:22:1D:79:BD
Certificate issuer: /CN=A919EA40/serialNumber=8A297E0356F0F7BF54DEF56B25A1FB1EAF84843D
Certificate serial: 022B
Authority key identifier: 8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/16C04B8680FB11ED9B35954DC4F9AE02.roa
Signing time: Thu 27 Nov 2025 00:47:30 +0000
ROA not before: Thu 27 Nov 2025 00:47:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 58611
IP address blocks: 2001:df1:6ac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.crl
rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA40, serialNumber=8A297E0356F0F7BF54DEF56B25A1FB1EAF84843D
Validity
Not Before: Nov 27 00:47:30 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69279fa2-f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:90:38:c0:7f:f3:57:62:ac:9c:ca:40:3a:bd:
31:68:8a:5e:7a:1f:c8:52:23:3c:78:ab:e5:e6:36:
97:fc:05:20:96:92:bb:eb:71:c1:60:c4:4a:b4:e0:
3e:df:19:e3:cd:e1:ae:76:ff:e7:86:74:e6:8c:9d:
9f:42:c8:43:22:af:ce:86:29:e0:a3:d2:71:db:cb:
a3:77:bc:63:68:bd:47:50:c3:d7:11:6a:55:99:89:
5f:9f:a7:0a:fa:0f:d5:dc:2a:a3:e9:33:6c:42:32:
e8:d8:d8:fc:fe:63:ab:7b:fc:24:b8:dc:67:a9:6f:
e8:17:29:26:3f:26:1f:46:29:08:28:4f:c9:3f:41:
0c:39:27:0f:07:94:dc:9e:cc:b4:32:f6:f0:8c:77:
25:0e:eb:b3:e9:9e:fa:be:2f:b8:5d:c6:13:b6:d4:
53:d9:fe:38:66:03:ea:ae:80:fb:b7:71:9f:2c:d0:
f1:0b:8c:75:00:ab:e7:4a:74:a2:f6:08:fd:98:f7:
f0:9e:7c:1d:ed:97:66:b1:e9:e2:48:dd:d2:c9:bf:
96:a4:50:0e:bf:f2:cb:6d:45:e6:1e:49:a2:da:b1:
06:3f:b3:eb:fa:9e:c0:4d:9b:01:85:63:d0:e4:02:
37:07:f8:9f:44:d0:25:8c:f6:2f:55:9d:26:28:16:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:A5:A6:10:48:12:57:F6:FC:09:A9:4B:9E:55:E0:22:1D:79:BD
X509v3 Authority Key Identifier:
keyid:8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/16C04B8680FB11ED9B35954DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:6ac0::/48
Signature Algorithm: sha256WithRSAEncryption
b5:82:96:a8:b0:e7:f3:50:78:a7:f8:67:5c:0e:19:35:7d:32:
70:dc:64:5c:a0:a9:4c:7c:e8:b1:c7:2c:1c:36:e4:98:9a:0f:
c7:3d:17:a0:98:ed:2d:e0:2d:90:44:67:90:f9:7c:d2:39:6b:
b2:65:de:f2:47:92:c7:38:c9:3e:e3:f6:a1:2f:90:50:32:94:
e9:f4:b8:1a:61:aa:46:c1:f3:27:05:b9:38:8c:ad:d4:bf:b5:
ac:b8:35:16:4d:2c:f3:eb:88:16:3a:f6:7f:b7:58:bd:c2:40:
b6:51:ef:5c:1b:8f:47:55:54:89:51:53:5a:76:97:83:98:96:
e4:dd:13:cc:9e:0f:3d:20:6b:6f:10:2b:c3:bf:4d:e6:fc:de:
5c:d9:16:c2:70:3d:0c:93:df:c4:03:9f:ab:16:a8:24:cc:6f:
0b:8e:9a:6c:a4:df:6c:78:5c:5e:4d:61:7c:13:3e:27:10:51:
c6:cc:13:9b:f6:c8:8b:38:94:8d:80:55:4a:b8:fd:d3:db:5a:
fc:93:53:b3:03:cf:48:40:fa:26:92:17:91:41:e9:b0:dd:19:
98:2b:94:38:48:67:84:6d:70:79:b3:09:0c:4e:0f:2f:34:99:
c4:59:80:eb:b9:76:fd:84:bb:8f:87:b9:d1:6a:e6:8b:84:0a:
c6:04:a6:ce
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBNDAxMTAvBgNVBAUTKDhBMjk3RTAzNTZGMEY3QkY1NERFRjU2QjI1QTFGQjFF
QUY4NDg0M0QwHhcNMjUxMTI3MDA0NzMwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3OWZhMi1mOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA95A4wH/zV2KsnMpAOr0xaIpeeh/IUiM8eKvl5jaX/AUglpK763HBYMRKtOA+
3xnjzeGudv/nhnTmjJ2fQshDIq/Ohingo9Jx28ujd7xjaL1HUMPXEWpVmYlfn6cK
+g/V3Cqj6TNsQjLo2Nj8/mOre/wkuNxnqW/oFykmPyYfRikIKE/JP0EMOScPB5Tc
nsy0MvbwjHclDuuz6Z76vi+4XcYTttRT2f44ZgPqroD7t3GfLNDxC4x1AKvnSnSi
9gj9mPfwnnwd7ZdmseniSN3Syb+WpFAOv/LLbUXmHkmi2rEGP7Pr+p7ATZsBhWPQ
5AI3B/ifRNAljPYvVZ0mKBZVkQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKycpaYQ
SBJX9vwJqUueVeAiHXm9MB8GA1UdIwQYMBaAFIopfgNW8Pe/VN71ayWh+x6vhIQ9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC81MjkyM0Y0NDgw
RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi9paWwtQTFidzk3OVUzdlZySmFIN0hxLUVo
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lpbC1BMWJ3OTc5VTN2VnJKYUg3SHEtRWhEMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUVBNDAvNTI5MjNGNDQ4MEYwMTFFREFBRTQ4RjdCQzRGOUFFMDIvMTZDMDRCODY4
MEZCMTFFRDlCMzU5NTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3xasAwDQYJKoZIhvcNAQELBQADggEBALWClqiw5/NQ
eKf4Z1wOGTV9MnDcZFygqUx86LHHLBw25JiaD8c9F6CY7S3gLZBEZ5D5fNI5a7Jl
3vJHksc4yT7j9qEvkFAylOn0uBphqkbB8ycFuTiMrdS/tay4NRZNLPPriBY69n+3
WL3CQLZR71wbj0dVVIlRU1p2l4OYluTdE8yeDz0ga28QK8O/Teb83lzZFsJwPQyT
38QDn6sWqCTMbwuOmmyk32x4XF5NYXwTPicQUcbME5v2yIs4lI2AVUq4/dPbWvyT
U7MDz0hA+iaSF5FB6bDdGZgrlDhIZ4RtcHmzCQxODy80mcRZgOu5dv2Eu4+HudFq
5ouECsYEps4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:27 2025 by rpki-client