This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/B6FD84CE54F611E79DF7E643C4F9AE02.roa
File: B6FD84CE54F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier: ZjgD8PMkf3vUCSjewa6ZRQ93PcHYL3xnQiPgdUCYUGo=
Subject key identifier: 5B:A2:A5:52:C6:1F:38:E0:98:00:46:60:05:AE:91:ED:D6:83:81:77
Certificate issuer: /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D
Certificate serial: 1BE1
Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/B6FD84CE54F611E79DF7E643C4F9AE02.roa
Signing time: Mon 24 Nov 2025 16:04:32 +0000
ROA not before: Mon 24 Nov 2025 16:04:32 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 18021
IP address blocks: 202.12.0.0/24 maxlen: 24
202.86.96.0/20 maxlen: 24
2400:5900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl
rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7137 (0x1be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D
Validity
Not Before: Nov 24 16:04:32 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69248210-9c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:7f:22:06:89:cc:64:91:78:d5:fb:37:be:
80:ea:79:93:d4:46:c3:51:26:b9:a3:14:4d:80:71:
36:6b:37:8b:6a:78:5e:99:5a:17:6a:f1:fc:f1:5f:
0f:96:f0:a8:c6:98:6c:3c:5e:7f:85:37:6f:e2:98:
f2:66:30:35:e1:76:e1:fd:0b:2d:fa:ed:ef:5a:cf:
9b:28:81:44:07:3a:f8:89:11:21:5e:c3:94:46:25:
19:c0:2e:45:04:2b:75:35:97:96:bd:7a:51:34:8b:
a2:cb:b3:e1:14:1e:fd:f9:0e:41:5d:1f:47:9d:94:
39:18:b1:d1:d8:9e:42:b1:ab:49:4f:f6:f7:fd:46:
59:d0:dc:45:a1:c8:06:a4:fe:1f:4c:6e:2d:f7:26:
2a:75:25:fc:3f:e4:20:7c:f2:fb:5a:6f:59:b5:47:
71:82:b0:80:ea:6d:a7:01:5b:e3:e9:17:3f:26:8f:
69:60:09:c8:4d:05:b1:1f:d5:b6:0d:20:87:a7:4b:
c2:16:7d:00:bd:4c:e7:43:ce:26:5a:fd:69:e4:54:
26:74:4c:df:98:ea:6f:2c:47:2c:0d:0a:2e:ce:d3:
5b:45:1a:84:3b:ef:2c:48:34:03:79:86:e2:fb:f9:
ba:51:24:6d:8f:ad:b5:e8:3d:ca:7c:7d:10:4d:fe:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:A5:52:C6:1F:38:E0:98:00:46:60:05:AE:91:ED:D6:83:81:77
X509v3 Authority Key Identifier:
keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/B6FD84CE54F611E79DF7E643C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.0.0/24
202.86.96.0/20
IPv6:
2400:5900::/32
Signature Algorithm: sha256WithRSAEncryption
13:71:80:e6:6e:fa:87:70:92:8a:00:05:51:50:d3:aa:7d:df:
e2:64:e2:a6:e8:2a:56:32:84:f7:b4:31:da:7b:b7:c3:e2:ec:
5b:13:8d:be:44:7c:0d:4a:37:6b:e4:ed:49:bb:a4:8b:5d:cf:
05:9b:bc:78:a2:4c:fb:29:12:56:a1:95:3a:54:2c:3a:03:cc:
1b:ae:62:80:7c:08:38:6f:9a:31:90:b6:17:44:20:46:9e:f0:
cb:69:1a:1d:1d:45:b0:8d:07:5b:19:0e:f0:51:83:d2:75:f4:
71:52:08:da:c0:c1:9f:d8:3c:37:bc:c7:18:86:a8:3e:b2:6e:
19:f1:1e:44:ed:23:ea:71:92:40:68:af:3c:35:10:16:29:b1:
c4:c7:e0:21:d8:03:c2:be:09:a0:51:7f:41:c7:8d:18:4f:f3:
99:e4:bf:ef:96:76:d3:0b:b1:e7:e8:4d:61:10:1b:3c:50:22:
f7:c9:03:29:7b:71:68:f2:c6:a4:10:6d:2b:84:47:fc:e0:bb:
6d:f9:58:2a:f4:16:f7:33:c2:9b:f1:8b:68:b5:d6:21:d2:4e:
54:f7:dc:1f:0f:e1:a6:68:c5:f4:37:68:c7:c5:e9:4e:05:ae:
84:79:37:f9:1e:82:22:62:fd:4d:5b:05:99:b3:f3:95:a7:76:
7b:4a:fa:f5
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICG+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIwNjMxMTAvBgNVBAUTKEU3NTg0Rjk1OUEwODFBNEREOTQ4MDkzNTMwNTFEMjM1
OTM5QzM5MUQwHhcNMjUxMTI0MTYwNDMyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI0ODIxMC05Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnV/IgaJzGSReNX7N76A6nmT1EbDUSa5oxRNgHE2azeLanhemVoXavH88V8P
lvCoxphsPF5/hTdv4pjyZjA14Xbh/Qst+u3vWs+bKIFEBzr4iREhXsOURiUZwC5F
BCt1NZeWvXpRNIuiy7PhFB79+Q5BXR9HnZQ5GLHR2J5CsatJT/b3/UZZ0NxFocgG
pP4fTG4t9yYqdSX8P+QgfPL7Wm9ZtUdxgrCA6m2nAVvj6Rc/Jo9pYAnITQWxH9W2
DSCHp0vCFn0AvUznQ84mWv1p5FQmdEzfmOpvLEcsDQouztNbRRqEO+8sSDQDeYbi
+/m6USRtj6216D3KfH0QTf4GtwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFuipVLG
HzjgmABGYAWuke3Wg4F3MB8GA1UdIwQYMBaAFOdYT5WaCBpN2UgJNTBR0jWTnDkd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA2My8xMTg2QjZCQzA5
M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdrM1pTQWsxTUZIU05aT2NP
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUxaFBsWm9JR2szWlNBazFNRkhTTlpPY09SMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUIwNjMvMTE4NkI2QkMwOTNBMTFFNzk1NDA5NTBCQzRGOUFFMDIvQjZGRDg0Q0U1
NEY2MTFFNzlERjdFNjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBADKDAADBATKVmAwDQQCAAIwBwMFACQAWQAwDQYJKoZIhvcN
AQELBQADggEBABNxgOZu+odwkooABVFQ06p93+Jk4qboKlYyhPe0Mdp7t8Pi7FsT
jb5EfA1KN2vk7Um7pItdzwWbvHiiTPspElahlTpULDoDzBuuYoB8CDhvmjGQthdE
IEae8MtpGh0dRbCNB1sZDvBRg9J19HFSCNrAwZ/YPDe8xxiGqD6ybhnxHkTtI+px
kkBorzw1EBYpscTH4CHYA8K+CaBRf0HHjRhP85nkv++WdtMLsefoTWEQGzxQIvfJ
Ayl7cWjyxqQQbSuER/zgu235WCr0Fvczwpvxi2i11iHSTlT33B8P4aZoxfQ3aMfF
6U4FroR5N/kegiJi/U1bBZmz85WndntK+vU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:16:12 2025 by rpki-client