This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ED90A2B8721311EFA9D7CA3AC4F9AE02.roa
File: ED90A2B8721311EFA9D7CA3AC4F9AE02.roa (raw, json)
Hash identifier: KPyntgNS/a5IAwXMGXTK8ah/4RLNgvhceVCeA9Ut9u0=
Subject key identifier: 80:FB:39:AD:FB:0C:95:7C:39:43:0F:6C:44:CC:60:B9:53:A5:8F:DB
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 01B2
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ED90A2B8721311EFA9D7CA3AC4F9AE02.roa
Signing time: Wed 31 Dec 2025 04:24:16 +0000
ROA not before: Wed 31 Dec 2025 04:24:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136624
IP address blocks: 202.29.24.0/24 maxlen: 24
2001:3c8:cb01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:16 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6954a570-11b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ac:0f:a6:d6:17:91:9f:53:6c:b8:70:ad:68:
94:43:d1:39:78:67:53:04:d3:b8:63:89:75:bf:65:
4f:a1:b3:fd:14:5c:c0:1d:30:54:78:46:85:0d:0a:
17:6b:9c:69:90:a4:92:1c:55:40:12:07:6e:14:c1:
cb:b2:0b:1e:8d:a0:ab:8e:50:76:37:fe:27:a2:98:
b4:a3:7e:36:aa:cb:cc:61:6d:c2:71:57:24:ca:65:
63:a4:b6:ef:38:64:1d:64:2a:c0:50:a8:b6:2e:71:
08:eb:cf:6c:50:9f:14:5d:45:2b:ab:84:05:92:6f:
46:36:83:94:52:66:00:30:bc:24:c2:2c:c5:ae:20:
39:24:3e:cc:69:7d:93:70:cf:20:92:b2:54:c8:4a:
23:1d:c1:1a:88:d8:95:df:ed:85:59:64:81:78:fb:
bc:e1:22:be:da:8c:c9:12:43:96:66:d5:a2:6f:6b:
fd:06:29:86:58:30:dc:79:50:a1:a6:ab:fe:a9:33:
e9:06:52:c6:ea:de:1b:33:a1:f9:8f:0b:1c:0f:32:
bd:13:95:26:5a:49:8a:2d:dc:56:32:90:d3:2b:57:
1c:53:31:99:20:04:ed:11:be:f9:17:18:00:c6:51:
df:07:79:38:7b:5d:ba:e8:2c:8c:03:75:a9:7c:bc:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FB:39:AD:FB:0C:95:7C:39:43:0F:6C:44:CC:60:B9:53:A5:8F:DB
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/ED90A2B8721311EFA9D7CA3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.29.24.0/24
IPv6:
2001:3c8:cb01::/48
Signature Algorithm: sha256WithRSAEncryption
85:1c:4e:ec:a4:d9:5e:f7:0b:c5:e0:b5:07:15:2e:8b:26:81:
92:56:75:da:e9:86:5d:b2:c6:57:2d:61:99:02:d3:f2:92:a2:
ac:4c:1f:0d:84:89:da:30:82:db:22:86:69:ce:b1:b0:4b:39:
11:c8:8d:f1:c4:a6:c7:c8:9d:39:05:f9:f9:09:ae:a1:20:b6:
a8:57:da:4a:81:2b:6e:f1:91:4e:6b:36:c5:6c:94:6d:2a:05:
36:40:b1:b1:e1:f5:57:16:19:f1:e7:0d:83:cc:a8:31:09:c4:
5a:b9:94:16:68:c8:6f:22:99:d8:7a:45:f8:d8:d6:36:4d:bd:
27:ea:45:a5:a6:ed:5d:e3:50:23:13:e6:fd:3a:f8:88:05:db:
9b:3c:ef:d4:40:9a:4f:89:7b:dd:46:fc:53:a4:f8:bc:ea:d3:
34:4b:e3:97:2c:27:6e:27:4c:3f:93:44:97:a2:fd:aa:d1:2a:
de:89:05:ee:c5:dc:28:9f:d6:ef:7f:85:23:5e:0d:cc:0c:96:
dd:cb:b7:e1:89:97:9d:6e:9b:10:88:58:c2:7d:8b:0b:0a:06:
46:c3:29:cf:a0:a0:f6:c6:47:7d:cd:8b:2f:e3:65:f1:8a:9e:
cc:f6:80:84:4f:50:1a:c5:82:5e:0c:24:27:35:48:74:b9:3c:
81:6d:f9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:14:32 2026 by rpki-client