This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/C3C5C43A0A2011EC8B517885C4F9AE02.roa
File: C3C5C43A0A2011EC8B517885C4F9AE02.roa (raw, json)
Hash identifier: NVBa+rlRQ5H1NEvktI31o0guFs4FS06Nk3OMy3vLg74=
Subject key identifier: 41:0B:2C:4B:01:25:43:56:0C:54:2E:1B:DF:3F:63:1D:F5:3B:0B:59
Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
Certificate serial: 3514
Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/C3C5C43A0A2011EC8B517885C4F9AE02.roa
Signing time: Sat 06 Dec 2025 14:50:46 +0000
ROA not before: Sat 06 Dec 2025 14:50:46 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9676
IP address blocks: 210.208.72.0/21 maxlen: 21
2407:680::/33 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl
rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13588 (0x3514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3
Validity
Not Before: Dec 6 14:50:46 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=693442c5-74bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a2:1b:1f:57:ee:d7:96:1a:0c:19:91:20:c7:
58:75:e0:f3:97:94:50:fb:a1:09:6e:5c:17:52:68:
c3:5a:7a:8b:ef:f5:4f:58:08:ce:9e:c7:c3:91:dd:
84:f6:16:3a:33:16:c6:c8:20:39:78:30:a0:ea:3e:
44:16:9b:73:bd:8f:31:12:66:bd:62:42:c7:da:dd:
aa:f8:fd:0d:d5:1a:cd:2f:e1:6a:38:b6:ab:be:21:
33:7b:e9:6f:04:95:ac:8f:a7:d0:c1:0a:1a:53:f5:
63:de:6e:d2:b4:bd:c4:cd:8f:46:b5:05:20:8a:e0:
ff:cc:32:0c:08:28:25:da:57:73:c2:1b:01:f9:40:
72:1a:f8:16:d2:67:4b:16:68:0e:8b:40:0d:6f:9d:
b1:10:7b:d8:e5:3f:01:0d:fb:90:e6:1c:2d:b6:f3:
ee:31:8a:d6:e2:22:21:85:02:a7:77:8c:e6:79:18:
cf:11:34:c1:ef:7a:13:e6:c8:5f:5e:c3:73:10:8f:
9b:a6:a4:c5:a9:a1:1b:af:f9:9c:18:b2:70:fc:80:
95:63:0f:0e:bf:73:91:81:84:69:37:60:e3:74:40:
f5:d1:5c:7a:f3:b7:2e:38:34:5d:aa:65:6f:bf:4c:
d4:30:42:fe:99:26:a9:4d:9b:20:6e:c4:7d:1b:97:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:2C:4B:01:25:43:56:0C:54:2E:1B:DF:3F:63:1D:F5:3B:0B:59
X509v3 Authority Key Identifier:
keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/C3C5C43A0A2011EC8B517885C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.208.72.0/21
IPv6:
2407:680::/33
Signature Algorithm: sha256WithRSAEncryption
a1:ce:79:d5:92:63:d0:0d:72:43:2b:29:3f:be:12:09:34:90:
1f:63:33:ee:dc:6f:be:3c:ba:cf:b2:31:81:41:6e:a2:fa:4b:
ea:15:f0:b1:1b:9b:e5:dd:4a:37:6a:d1:2f:cb:bf:f6:6a:d8:
25:3c:50:0d:3d:66:8f:ed:55:93:d5:20:c1:71:f3:b2:bf:0e:
6a:58:3e:fa:e2:04:a0:de:78:46:65:2e:2c:ca:f5:b0:66:98:
93:f0:5c:7f:d3:47:1b:54:e8:b5:e3:98:cc:94:1f:7e:2a:3f:
f3:32:eb:70:60:30:9f:8a:eb:3d:48:77:b3:7a:91:3d:17:0a:
2a:39:9d:a1:a9:b9:25:7b:e6:4e:a7:9b:3b:42:85:d8:27:b8:
ae:5d:0e:aa:49:06:e4:c4:52:d9:f0:32:2d:51:89:04:08:a7:
3b:40:f8:f7:5e:e3:79:ab:45:88:43:31:c3:6e:f3:70:52:bb:
6c:c1:02:ef:c3:7d:bd:b2:8c:9d:56:42:06:2b:51:bb:8c:a9:
7a:1a:f9:63:d4:50:59:af:a5:ba:6e:07:1a:4e:ab:eb:12:25:
3d:5e:63:55:c7:99:43:84:34:f3:be:f0:3f:2e:e7:f0:e2:82:
b4:16:e7:f7:2a:1b:ad:72:2f:47:ea:0f:75:cb:a9:56:ba:ff:
4e:5c:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:44:41 2025 by rpki-client