This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
File: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (raw, json)
Hash identifier: aoLs85T25Nbu5rfe8HQr6/uLXCb4GRzjjbTFp9DkWQU=
Subject key identifier: 75:27:10:76:A2:BA:DC:4D:0D:30:0C:CB:EB:7B:83:8E:BA:A6:E7:DD
Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial: 1D21
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
Signing time: Tue 18 Nov 2025 16:04:33 +0000
ROA not before: Tue 18 Nov 2025 16:04:33 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 58431
IP address blocks: 2404:6980:31::/48 maxlen: 48
2404:6980:32::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7457 (0x1d21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Validity
Not Before: Nov 18 16:04:33 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=691c9910-9b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:02:38:72:06:bd:b7:aa:c8:97:7d:78:fe:
d2:4e:26:ca:30:21:6a:ea:ac:bd:96:be:16:b2:c7:
6f:f2:98:96:83:7e:fe:6c:0e:e0:8f:49:fa:5a:0e:
6d:eb:c4:fe:d1:8c:a2:c9:09:b0:2a:88:51:03:f4:
32:a0:54:bb:c5:4d:b1:b0:bf:9b:ed:d1:3c:66:98:
7b:c4:f4:b1:9e:a1:8d:99:72:66:6c:85:aa:63:5b:
dc:c8:d8:b7:c2:eb:4f:dd:67:f6:a6:ca:66:47:9b:
bb:1d:94:a2:bb:76:f1:dd:aa:7c:80:dd:01:48:9a:
ee:fc:12:e5:a2:8a:5a:34:90:0f:21:72:41:47:fe:
98:d1:fc:d4:b4:ce:5e:09:1c:0c:ae:ba:5e:35:4c:
c2:1b:d1:61:15:4f:f3:32:3e:7f:3f:1d:0a:23:56:
d1:e7:46:92:99:8e:f1:5b:9e:a5:b4:e1:db:5c:9b:
0d:f0:95:dd:ab:ea:16:84:6e:0b:0f:cd:ff:b4:8b:
93:14:bc:22:bc:ac:3e:bb:89:ed:b0:2f:87:39:18:
ea:c8:c3:cb:77:78:7a:12:86:2f:27:68:56:67:8d:
7f:a3:c8:d8:ce:6a:84:39:d3:99:f5:45:b1:2e:a9:
af:23:ab:0a:38:71:53:22:98:0d:71:38:49:35:b7:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:27:10:76:A2:BA:DC:4D:0D:30:0C:CB:EB:7B:83:8E:BA:A6:E7:DD
X509v3 Authority Key Identifier:
keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:6980:31::-2404:6980:32:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:26:d6:75:ef:a1:32:1c:b6:2b:99:ba:95:9f:23:44:b3:f4:
b8:13:19:91:54:47:ba:d8:59:4d:98:13:9d:3a:84:82:c5:6d:
0b:be:61:e0:27:cc:e5:dc:28:e6:81:1d:ad:6a:8c:6b:2f:c3:
18:cc:63:07:19:31:18:f9:14:c8:75:c5:96:96:73:95:c8:0c:
5d:e9:e8:58:2c:45:ed:94:aa:df:fc:35:bd:de:be:a4:d2:98:
6f:59:ef:f6:35:a9:07:43:a1:9a:ff:f4:2f:cd:bc:5d:9c:0b:
3e:5a:ca:32:61:aa:25:2e:ef:06:55:f8:0a:9d:78:21:87:40:
4f:92:de:03:58:3c:f3:b0:e4:2e:46:1e:41:dc:1e:18:c7:1a:
b3:83:2b:b1:6f:8e:3f:39:45:22:b4:62:27:f9:5e:bb:1a:f7:
03:df:4e:1c:66:98:11:2f:7d:78:d7:aa:4f:c4:6c:2d:2f:f8:
d0:f8:e1:89:36:1d:c9:23:d7:b5:be:ea:76:45:e5:d9:7b:e7:
2d:ab:4e:45:5f:b3:97:13:5a:6b:ed:f4:2a:e8:77:03:b5:47:
70:a2:4d:1b:57:5c:a2:5f:e7:b8:9a:e3:44:f7:6f:43:a0:0c:
fb:86:ac:fa:49:d1:6a:23:5b:2b:d2:08:a0:a2:27:52:0a:46:
0d:b6:fa:a3
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICHSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5
QkVEQjgxQjUwHhcNMjUxMTE4MTYwNDMzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFjOTkxMC05YjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBgCOHIGvbeqyJd9eP7STibKMCFq6qy9lr4Wssdv8piWg37+bA7gj0n6Wg5t
68T+0YyiyQmwKohRA/QyoFS7xU2xsL+b7dE8Zph7xPSxnqGNmXJmbIWqY1vcyNi3
wutP3Wf2pspmR5u7HZSiu3bx3ap8gN0BSJru/BLloopaNJAPIXJBR/6Y0fzUtM5e
CRwMrrpeNUzCG9FhFU/zMj5/Px0KI1bR50aSmY7xW56ltOHbXJsN8JXdq+oWhG4L
D83/tIuTFLwivKw+u4ntsC+HORjqyMPLd3h6EoYvJ2hWZ41/o8jYzmqEOdOZ9UWx
LqmvI6sKOHFTIpgNcThJNbcYiwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFHUnEHai
utxNDTAMy+t7g466pufdMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF
NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTBDNTUvMkVBN0E0NkNDRTcxMTFFNjlFMkI5NDQ0QzRGOUFFMDIvRkU2RTZCNDg3
NDlFMTFFOEIwN0NBRTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgACMBQwEgMHACQEaYAAMQMHACQEaYAAMjANBgkqhkiG9w0BAQsFAAOC
AQEAXSbWde+hMhy2K5m6lZ8jRLP0uBMZkVRHuthZTZgTnTqEgsVtC75h4CfM5dwo
5oEdrWqMay/DGMxjBxkxGPkUyHXFlpZzlcgMXenoWCxF7ZSq3/w1vd6+pNKYb1nv
9jWpB0Ohmv/0L828XZwLPlrKMmGqJS7vBlX4Cp14IYdAT5LeA1g887DkLkYeQdwe
GMcas4MrsW+OPzlFIrRiJ/leuxr3A99OHGaYES99eNeqT8RsLS/40PjhiTYdySPX
tb7qdkXl2XvnLatORV+zlxNaa+30Kuh3A7VHcKJNG1dcol/nuJrjRPdvQ6AM+4as
+knRaiNbK9IIoKInUgpGDbb6ow==
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:12 2025 by rpki-client