This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
File: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (raw, json)
Hash identifier: h+3/FTy9YZabaahMuXXEJUibUnlCC2pty0unDAr7ERA=
Subject key identifier: CE:15:C9:47:8E:CB:9D:D2:C7:20:5D:45:C3:1B:B8:7D:80:62:29:FD
Certificate issuer: /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Certificate serial: B1
Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
Signing time: Wed 21 Jan 2026 05:25:16 +0000
ROA not before: Wed 21 Jan 2026 05:25:16 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 7575
IP address blocks: 2001:df4:c7c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Validity
Not Before: Jan 21 05:25:16 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6970633c-c090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8e:a8:cf:48:0f:b5:73:64:27:b1:95:fa:3c:
ad:ca:e5:72:ae:f5:4e:d3:42:29:9c:ba:15:12:ea:
7d:1f:9e:10:20:2b:05:02:15:bd:25:9e:db:78:4f:
ca:c0:f7:19:15:a7:19:2c:b9:fc:89:51:17:df:33:
f0:83:70:ad:67:c8:0e:16:0d:74:c6:66:d1:9b:ff:
17:be:71:84:f3:42:7e:2f:74:45:7a:12:24:28:55:
6d:83:63:c6:bb:ce:4b:36:34:2c:03:68:a1:87:9d:
9f:6c:34:1a:b9:24:1d:00:60:75:82:99:19:d1:d4:
44:fb:05:41:fc:b6:01:93:8c:73:05:df:9d:02:c6:
5c:e3:b2:39:cb:5d:85:2b:1d:8f:78:6f:3f:9d:b3:
1a:b2:0d:82:c7:be:42:d0:ac:ea:98:6d:9d:c5:29:
bf:bc:cf:cd:9b:b8:b7:a8:dc:0b:82:d5:52:18:47:
4a:40:b5:1f:3a:8a:c2:90:24:ee:81:f2:46:d1:f2:
5f:df:26:37:6d:be:24:fd:65:01:a9:57:81:03:c4:
72:02:0d:a3:d0:23:63:6c:85:d9:59:ee:46:22:74:
12:25:8c:b5:f4:64:f4:f3:47:8a:ab:b9:88:55:92:
19:c3:e8:bf:02:1d:20:f6:e1:c0:78:d1:ef:d1:43:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:C9:47:8E:CB:9D:D2:C7:20:5D:45:C3:1B:B8:7D:80:62:29:FD
X509v3 Authority Key Identifier:
keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:c7c0::/48
Signature Algorithm: sha256WithRSAEncryption
d9:09:9c:10:c9:a7:92:5a:ca:38:63:5a:e7:66:ad:ff:5f:2a:
c1:b1:e7:de:d9:e9:87:9f:ac:32:01:a2:8e:28:3d:be:f9:7c:
68:03:a4:b1:23:0e:22:cd:fd:48:06:00:48:30:34:b8:b9:d2:
05:6b:ff:78:12:39:cc:e4:a4:9b:8b:d5:07:84:2f:73:e4:d5:
ac:05:76:d6:69:27:bf:c4:df:fd:47:ff:33:da:26:47:63:f0:
17:23:c1:0c:10:43:01:e9:ca:9d:26:ad:30:72:83:87:62:8a:
62:25:cd:72:da:36:9e:c2:68:d7:fe:ed:cc:d1:66:92:d1:f6:
e1:e4:bb:1d:f5:e1:5e:81:48:05:64:42:c1:da:f3:c2:86:ea:
24:89:1f:b6:ae:ee:b2:d9:23:50:16:72:67:f7:96:72:7f:92:
44:ef:ba:a0:b0:6a:63:8d:68:c8:0d:f2:47:72:a0:c7:68:bc:
79:a3:45:17:73:07:18:26:08:93:0d:58:f8:ad:7f:01:98:c7:
0c:b7:ad:c2:60:f3:b0:67:cf:e8:a5:44:53:a9:35:17:01:e9:
a7:47:67:a9:10:6e:17:ae:11:6a:99:3f:9e:2a:ad:9b:28:25:
15:ec:1a:86:9f:37:04:4a:29:1e:23:03:d4:ee:09:dd:91:1d:
4a:ba:3b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:04 2026 by rpki-client