This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/4F9AF642C51611F0BA6C053AC4F9AE02.roa
File: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (raw, json)
Hash identifier: 1AbjCtqD4u+7KGjGOPMS77dj4rUPYp5rnx5ZMf73E1w=
Subject key identifier: 5B:72:B3:E4:2A:EE:FB:83:35:07:66:14:ED:86:57:28:84:91:90:B0
Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596
Certificate serial: 01C8
Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/4F9AF642C51611F0BA6C053AC4F9AE02.roa
Signing time: Wed 19 Nov 2025 07:06:46 +0000
ROA not before: Wed 19 Nov 2025 07:06:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 151421
IP address blocks: 2001:df2:9cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl
rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596
Validity
Not Before: Nov 19 07:06:46 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=691d6c86-1980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:7b:00:9f:82:45:2f:92:51:ca:d6:01:89:
32:e2:b6:c3:33:85:0f:cd:bc:22:a7:5e:00:7d:c2:
99:a1:bf:97:c5:4e:2b:21:8a:97:88:bb:0e:95:ff:
e8:12:ee:a0:d3:d5:f8:79:05:e6:f1:f4:0b:b0:9b:
bc:e6:dd:6d:1f:32:b0:8f:75:bf:59:48:3d:d1:cb:
5c:f8:c6:1d:c0:2f:5e:9b:34:ed:71:42:43:ab:fd:
78:21:d1:0d:55:e7:4f:aa:98:2a:ef:da:d8:a0:b8:
b0:34:44:05:4f:45:e0:fa:f2:dc:00:69:f9:20:96:
cd:a4:76:3b:fa:10:1c:9f:7b:14:8d:34:b8:87:eb:
22:bc:ae:2b:dc:fb:16:cc:fc:20:0d:b2:d8:be:52:
32:a7:e3:0f:7d:b7:ba:ec:0a:27:d1:53:67:3e:d6:
24:46:57:56:e6:9e:aa:28:10:2b:35:8f:88:dd:0f:
ce:d0:de:22:bb:6a:e1:b7:f1:33:5b:fd:39:cf:12:
7e:30:95:42:31:69:83:de:6f:ef:4f:e6:41:99:ef:
96:e6:e4:5d:e4:c4:d1:d5:a8:f1:94:05:7a:62:c9:
59:f2:ae:87:28:c8:da:54:68:3c:ee:c5:52:4d:45:
a6:80:0a:8a:9a:13:05:f6:52:f7:e0:fe:ab:3e:ab:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:72:B3:E4:2A:EE:FB:83:35:07:66:14:ED:86:57:28:84:91:90:B0
X509v3 Authority Key Identifier:
keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/4F9AF642C51611F0BA6C053AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:9cc0::/48
Signature Algorithm: sha256WithRSAEncryption
cd:cd:64:a5:9b:51:d2:b7:92:1a:1f:93:45:56:19:7e:19:30:
c0:28:6f:4a:27:c8:7f:11:9c:9e:17:74:b6:48:ef:d7:12:80:
00:6c:6b:c6:ba:bd:68:fe:5f:7e:00:ca:c5:ae:3b:89:3c:05:
bc:5d:55:3f:e6:b5:6a:63:11:2d:63:ae:06:95:7f:8f:dd:a4:
06:86:47:68:61:67:bf:72:0f:f5:93:58:b0:a9:80:f5:05:60:
1f:c4:c8:e7:63:2f:3b:86:ec:de:db:62:ce:77:34:e7:f5:1f:
d2:7c:54:b6:9b:45:6d:bd:52:1a:3c:4c:8a:fe:42:6d:1d:56:
d2:af:35:44:57:44:a4:84:d9:c4:fd:a8:f5:a1:37:4d:55:9b:
e6:9d:9a:ea:46:af:9f:a4:64:02:e5:6b:50:39:7c:c5:d9:f1:
44:65:b1:6e:45:5e:ea:db:3b:da:0a:a7:19:bf:4a:54:e2:fc:
a0:f9:bf:92:3f:12:ca:10:54:84:8c:02:50:54:60:32:fc:4b:
28:08:2c:f5:04:d7:f7:a6:5a:90:85:ee:62:df:86:ec:a3:8f:
0c:c1:23:05:bc:d3:da:76:d3:7e:31:a2:95:e8:64:82:ee:e9:
20:2a:27:d8:27:1f:52:74:08:ef:12:c2:7f:52:d1:64:6f:20:
47:6f:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:47:37 2025 by rpki-client