This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/24992E62E0FC11F0B50D6A7D5F6F56BC.roa
File: 24992E62E0FC11F0B50D6A7D5F6F56BC.roa (raw, json)
Hash identifier: xFgB7EH2QxxLlf3n0UJ+DMqo3db1de33t4nREaUSocw=
Subject key identifier: D1:FD:A8:0F:CE:20:E1:82:1B:B2:23:E3:6F:73:E4:A4:4F:88:A7:BC
Certificate issuer: /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
Certificate serial: 05
Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/24992E62E0FC11F0B50D6A7D5F6F56BC.roa
Signing time: Wed 24 Dec 2025 19:10:00 +0000
ROA not before: Wed 24 Dec 2025 19:10:00 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154450
IP address blocks: 2402:4220::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl
rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
Validity
Not Before: Dec 24 19:10:00 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=694c3a88-42ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:07:9d:ea:1a:c6:b9:fa:36:91:ba:d6:ec:
6a:ed:0b:26:83:f1:bb:35:6e:b2:95:bd:34:2d:2d:
89:a4:1b:f7:ca:36:a7:c3:d4:53:c8:78:61:91:c6:
e3:dd:8a:f8:a6:ea:a1:7f:fe:db:ac:a0:f5:7d:9e:
23:c1:5a:45:f3:83:06:ad:8e:ac:ef:68:eb:42:4e:
de:38:f6:3f:f2:4d:94:85:d0:7d:21:f3:dc:b0:66:
2f:6b:f5:45:dc:3e:93:8e:1a:6d:e9:4f:12:62:d2:
65:9d:d1:86:05:26:f0:d6:7c:f2:e2:3a:e4:7e:c9:
57:32:16:d6:1b:9a:31:a8:f2:9e:cf:15:03:18:ac:
0f:f5:6f:84:5a:f6:7f:c1:da:c8:da:c3:ab:e4:80:
32:70:4f:dc:cc:a5:1a:b1:ec:a6:cb:81:fe:ee:ca:
1b:31:5c:bd:95:9e:2b:46:02:69:8c:90:9c:15:a4:
39:39:5b:18:d7:c5:92:ca:5a:c2:d2:c7:16:6e:60:
55:90:39:ed:30:b5:f9:58:1b:33:dc:19:ce:26:26:
c3:01:b0:b3:f8:66:72:9c:ad:84:7d:ee:d6:ec:e3:
73:fc:53:92:38:c0:1c:dc:d3:8c:98:bb:46:f1:37:
ab:ab:04:67:dd:4f:e4:37:4d:9e:89:7a:0d:36:19:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FD:A8:0F:CE:20:E1:82:1B:B2:23:E3:6F:73:E4:A4:4F:88:A7:BC
X509v3 Authority Key Identifier:
keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/24992E62E0FC11F0B50D6A7D5F6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4220::/40
Signature Algorithm: sha256WithRSAEncryption
87:ab:39:b5:f6:59:b4:a2:44:21:7b:69:7c:97:a1:5d:97:5c:
da:dd:aa:b2:80:a5:90:dc:58:30:a5:c3:e3:01:5e:8d:f0:59:
18:75:7c:af:4c:48:9e:47:bd:33:9d:93:8b:48:a1:54:b9:07:
d0:f0:90:eb:8f:6f:4f:76:86:1a:75:db:a6:3b:5d:1b:95:b8:
15:2c:17:cc:83:3e:63:73:01:db:33:02:43:f2:df:e7:1a:63:
de:6f:a5:fa:64:30:96:f7:20:75:fa:88:29:8b:a6:e6:30:46:
da:41:c5:5c:04:f0:8c:6b:aa:3a:70:5d:19:89:f8:2b:c2:60:
87:75:e6:70:41:29:70:9a:2b:a7:b6:97:5e:60:93:0a:1a:87:
2f:48:75:3e:5b:44:22:11:52:9a:28:c1:6a:8a:cb:aa:a8:be:
25:f1:67:4e:46:58:de:ea:97:c9:67:79:39:22:fd:2e:99:40:
ef:a3:9c:1c:55:0a:73:7f:70:1d:fd:4a:d7:cf:96:05:f1:73:
d0:5c:05:93:dd:0d:be:5c:c9:5f:1a:9b:d0:21:08:fb:d6:0e:
c6:45:a7:b1:17:ae:6d:71:57:11:c7:1a:b7:c4:51:8d:ed:8a:
dd:2b:79:98:18:86:f3:6b:b4:35:eb:58:70:ff:a1:26:6c:79:
1a:b5:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:37 2026 by rpki-client