This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/6E15925AE30511F0AC7EDB7A636F56BC.roa
File: 6E15925AE30511F0AC7EDB7A636F56BC.roa (raw, json)
Hash identifier: yeQmbE4aNYfyme92KuXhbjoHbeMVK4QRC8HcRaL5unA=
Subject key identifier: 59:C3:F9:11:08:43:04:46:7D:B9:3E:40:BF:43:FF:7F:38:3D:F5:3B
Certificate issuer: /CN=A91A2946/serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Certificate serial: 09
Authority key identifier: 8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/6E15925AE30511F0AC7EDB7A636F56BC.roa
Signing time: Sat 27 Dec 2025 09:21:31 +0000
ROA not before: Sat 27 Dec 2025 09:21:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154435
IP address blocks: 2402:4120::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=8B06DDFCE6F19C41BE399D3BC7BE2AE3E3BFD45F
Validity
Not Before: Dec 27 09:21:31 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=694fa51b-a86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:de:2d:f2:5b:60:80:c4:bd:c9:18:05:4d:
16:40:31:a7:bd:84:9b:c2:a0:83:26:44:fb:a3:12:
da:e4:69:53:11:fb:20:78:1f:a3:f3:8e:f3:e6:7c:
c3:1a:dc:07:0a:fa:44:fa:91:e0:8b:c7:6b:9b:52:
d0:94:9e:30:3c:10:4f:53:b5:c3:f5:c7:10:e6:70:
89:73:65:3d:7a:99:dd:39:91:cf:0a:9d:27:f3:e2:
4f:8c:d5:cb:a2:a8:f6:5a:c8:6f:b2:14:9d:01:db:
b1:91:e8:78:96:50:3e:e2:d9:21:4e:d9:28:d9:95:
b3:2c:64:7d:76:d0:8a:2c:a2:8b:45:d0:97:ac:21:
d9:71:03:f0:f9:2f:10:72:92:d5:39:6e:d7:b0:0f:
08:41:2f:c9:e7:e4:2f:26:5e:2f:9e:a2:4f:a9:ba:
f4:09:2a:db:ac:47:b7:50:34:8c:cb:ac:58:9b:f1:
c5:63:b5:4a:c2:38:46:48:91:92:ba:03:29:3c:79:
78:a7:f4:aa:fa:87:41:30:ea:7e:4a:f0:b3:6e:c7:
03:e6:78:2e:8d:e4:02:92:c2:85:d7:15:b6:b4:f9:
c5:2a:9b:cb:90:c4:72:6e:28:6a:1b:d6:54:75:3b:
87:d0:7f:59:a6:59:8a:4f:10:f1:be:40:7e:0b:78:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C3:F9:11:08:43:04:46:7D:B9:3E:40:BF:43:FF:7F:38:3D:F5:3B
X509v3 Authority Key Identifier:
keyid:8B:06:DD:FC:E6:F1:9C:41:BE:39:9D:3B:C7:BE:2A:E3:E3:BF:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/iwbd_ObxnEG-OZ07x74q4-O_1F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iwbd_ObxnEG-OZ07x74q4-O_1F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/B6710130DB3311F0A2CE53688CD3641D/6E15925AE30511F0AC7EDB7A636F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4120::/32
Signature Algorithm: sha256WithRSAEncryption
72:4b:3f:a5:6a:fa:9e:d1:d9:b2:ec:6a:da:e6:ff:f8:a2:fc:
26:6a:20:af:a9:c2:04:f3:7e:50:2d:92:bf:3e:50:4f:eb:1e:
f9:dc:56:26:14:07:a2:5a:84:45:09:03:53:15:bb:82:ff:91:
4c:49:02:1f:28:9e:3d:60:1e:c0:72:80:b6:57:9e:2d:89:2b:
56:53:a1:37:c8:1a:c9:2b:1d:16:31:db:33:3a:2c:4c:36:ec:
be:f0:49:53:2b:bb:b7:43:9b:52:69:f9:44:b4:61:00:45:9e:
8c:05:9a:58:c7:e2:d6:f0:3d:ea:ac:b7:4e:7e:96:9c:18:f4:
1f:d9:38:73:d6:cd:6f:85:0d:60:75:0a:e4:94:59:08:cc:c6:
bf:79:ee:bc:e0:e8:ef:e3:a7:46:d2:1c:44:d4:3b:ca:1a:ed:
10:27:5e:d4:aa:7c:bf:27:7c:ef:92:95:ad:e2:80:27:1c:50:
3e:be:7f:bf:5b:e5:45:15:9d:d0:1e:84:14:ed:91:66:a7:d8:
23:b3:7a:cf:e0:b0:d9:11:37:61:ff:24:3a:7c:bf:14:01:89:
1a:d0:1d:ce:d3:7b:65:f7:ee:b2:cd:8a:a7:a1:23:da:0a:9b:
d3:9e:2f:23:30:18:29:14:2b:e0:6a:be:6b:9c:1f:53:99:28:
c4:e8:69:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:01:10 2026 by rpki-client