This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/7BC585BEC9DD11EF98B1E263C4F9AE02.roa
File: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (raw, json)
Hash identifier: 4O9H8tsX5WZHjYASy40Ypthbv71WFYxBjR18CKAoahg=
Subject key identifier: 29:5B:13:77:04:D9:A0:D0:A6:62:A6:2E:52:0B:B9:11:E1:5B:F9:2C
Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial: C8
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/7BC585BEC9DD11EF98B1E263C4F9AE02.roa
Signing time: Sat 17 Jan 2026 05:24:28 +0000
ROA not before: Sat 17 Jan 2026 05:24:28 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 140641
IP address blocks: 2001:df4:bf40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Validity
Not Before: Jan 17 05:24:28 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=696b1d0c-8263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:1f:8f:c5:41:76:0f:bc:b5:6a:5b:2e:70:91:
1e:84:10:3b:0c:88:bd:4b:a6:22:4f:7a:a2:13:21:
9a:70:fa:cf:58:75:bd:8c:c0:18:d7:30:3c:92:17:
8c:4c:54:b1:93:da:73:c9:58:fb:5e:0b:77:b6:80:
27:88:79:f3:a3:8e:b1:92:d1:67:7b:d8:69:0f:8f:
21:69:7b:f2:ae:40:67:70:08:2c:d8:d7:62:f5:4e:
84:ba:bf:17:43:90:aa:7f:59:f0:09:aa:c4:f0:62:
3c:08:23:d0:94:6f:7a:5d:0d:92:56:7f:d4:07:e3:
3f:1e:9c:b7:d6:c6:56:94:ca:7d:79:6c:27:59:6d:
d6:a9:55:ee:d3:fb:62:7b:ac:a4:88:c7:b2:01:f8:
2d:ae:07:d2:1f:a7:bf:d0:29:53:6d:8e:f1:07:06:
30:9b:95:f2:2b:bd:3a:bf:d1:81:3c:67:b8:05:83:
a5:6d:68:fc:91:ed:88:6c:e1:57:da:7f:e8:b1:fb:
67:0c:3e:b1:fe:dc:9a:17:a4:bf:82:40:9e:0b:61:
a2:ad:a7:f3:f5:91:3d:d2:ad:1a:2d:45:f0:37:c0:
8f:ed:57:0b:52:8e:d2:df:90:08:67:08:b8:de:14:
30:94:fe:5a:cc:da:f1:53:a1:4d:2e:b9:08:4a:62:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5B:13:77:04:D9:A0:D0:A6:62:A6:2E:52:0B:B9:11:E1:5B:F9:2C
X509v3 Authority Key Identifier:
keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/7BC585BEC9DD11EF98B1E263C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:bf40::/48
Signature Algorithm: sha256WithRSAEncryption
a6:66:d0:35:2c:0c:91:a5:81:32:98:69:06:68:3f:bb:ba:bd:
da:b7:eb:fd:7b:f2:6b:ea:57:44:b3:7f:b8:fe:11:33:e0:72:
16:dc:24:06:97:b1:d3:16:4c:9e:3f:d9:9e:4d:22:32:46:ef:
4b:ec:1d:bd:81:07:ec:74:67:79:17:4c:ff:0f:74:de:2c:3b:
8b:07:ab:71:ca:1c:de:76:45:94:75:13:49:0a:74:de:0e:1f:
80:79:9e:af:f9:0e:99:05:73:17:cd:d7:ad:03:b0:c8:55:00:
1b:02:22:21:d1:43:2b:9e:10:7d:3a:ce:a1:51:51:6f:fd:a9:
b9:04:61:17:e9:61:f0:3f:0c:04:3a:98:d3:86:2b:ea:81:56:
40:6d:ce:77:6f:aa:90:e1:fa:a9:37:a9:cd:78:9b:23:20:de:
d2:0e:1a:95:73:2e:45:c6:02:72:ce:e7:9a:3c:e7:51:54:09:
dd:53:2f:3a:5e:f7:7c:3e:a4:dc:a2:c7:7c:aa:53:b2:09:ea:
69:c2:f3:21:37:f9:7e:08:fb:84:72:a8:6c:32:fd:2d:fc:cd:
80:cb:1b:a0:6d:a2:c0:66:39:4b:25:d6:2f:f9:48:a9:3a:11:
fc:df:99:5d:43:57:7d:f0:8c:72:77:83:80:b4:ae:7e:ac:bb:
cb:eb:36:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:10:53 2026 by rpki-client