This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/C0655836B3B511EA8BFADC14C4F9AE02.roa
File: C0655836B3B511EA8BFADC14C4F9AE02.roa (raw, json)
Hash identifier: yc5Wpx2pnLB6guboninc18l3eTqDU3/v4bwKPQPqPjM=
Subject key identifier: AD:80:77:EA:01:DA:AA:14:4E:53:EE:D6:36:DD:85:0C:9F:5F:97:16
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 128A
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/C0655836B3B511EA8BFADC14C4F9AE02.roa
Signing time: Thu 04 Dec 2025 16:46:53 +0000
ROA not before: Thu 04 Dec 2025 16:46:53 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 36351
IP address blocks: 2403:a280:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4746 (0x128a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Dec 4 16:46:53 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6931bafd-c32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:2c:41:66:bb:30:ca:c1:97:b1:a4:50:e7:
2b:92:c3:be:ca:d5:df:db:a4:4a:be:8e:e1:a5:3e:
91:9a:77:1f:05:16:9f:62:82:f5:e4:58:ff:78:21:
a3:3b:3f:2a:e4:1a:5f:a1:d0:e3:f4:1f:f1:d6:5f:
ef:f4:03:95:c6:d9:c5:22:22:af:72:d0:3d:d9:eb:
9f:a6:77:d5:0f:48:e8:2b:a0:ee:91:23:8f:12:b7:
0a:d4:8f:cb:b7:de:3b:f2:a3:39:51:a0:75:b6:f8:
12:ff:39:cd:4b:48:a7:54:6a:c2:2a:8a:e4:cc:27:
e9:18:0e:a1:fd:42:4b:a3:15:d8:9d:bd:c6:31:36:
5b:74:57:3e:ea:93:d0:6e:86:17:f8:6e:67:24:74:
a6:2a:75:ff:db:58:e8:90:81:d0:63:3c:29:76:31:
10:58:a7:d4:ad:3d:44:a4:51:6c:5d:0b:b6:6a:7d:
77:93:86:49:50:02:70:9e:d4:35:7c:16:b3:bb:27:
2d:69:66:8d:89:e9:90:64:f2:01:d0:12:57:d3:32:
99:a2:c7:20:ea:e9:f6:be:bd:80:9f:c0:6b:e9:88:
7e:dd:f7:f7:e4:7b:43:08:24:5b:89:6b:a5:19:78:
ca:e0:92:1a:9b:f3:6c:97:f6:20:3e:b1:7a:23:4e:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:80:77:EA:01:DA:AA:14:4E:53:EE:D6:36:DD:85:0C:9F:5F:97:16
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/C0655836B3B511EA8BFADC14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:a280:8000::/36
Signature Algorithm: sha256WithRSAEncryption
82:4a:a1:c9:a5:c7:09:2d:24:3e:26:2a:33:34:d8:94:98:c1:
2e:81:97:1b:eb:27:68:1e:cd:d5:73:96:10:71:aa:af:81:34:
5b:1f:c2:55:2c:fa:b5:65:ff:66:a8:58:60:ce:da:80:4b:09:
d4:6c:d4:7f:77:0f:ef:a0:6e:50:6f:52:c0:1e:66:b7:c1:f0:
79:b5:7c:e4:87:6e:31:06:b9:6f:9f:a8:cd:65:1a:8e:55:c1:
20:82:7d:cf:03:82:e1:3b:3c:f5:2f:1f:e4:56:d2:02:5a:a5:
91:96:4f:e3:db:e5:16:29:15:4e:be:19:ba:45:28:cb:a7:da:
f3:bf:94:9f:18:33:54:c6:f1:ac:92:20:59:be:11:ad:41:88:
e3:c6:d2:aa:24:bd:b2:de:86:29:4b:be:49:0e:0b:16:76:68:
20:e5:98:ca:80:fc:fa:ef:ed:f7:2b:f0:94:63:d9:ed:44:cb:
64:64:96:93:13:92:a8:e3:ca:bb:51:13:64:1d:fc:ca:37:97:
45:3a:25:21:95:91:a8:fe:7e:00:02:20:8b:8f:7b:4d:22:4d:
86:a5:81:24:3b:d8:79:3c:7b:c1:df:41:9d:ef:06:a3:ef:96:
b7:81:8f:55:ad:e1:28:dd:7b:c9:91:a4:cb:f7:41:4d:f9:d0:
a6:24:b5:f1
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICEoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB
QUJENDAyNzEwHhcNMjUxMjA0MTY0NjUzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxYmFmZC1jMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEUsQWa7MMrBl7GkUOcrksO+ytXf26RKvo7hpT6RmncfBRafYoL15Fj/eCGj
Oz8q5BpfodDj9B/x1l/v9AOVxtnFIiKvctA92eufpnfVD0joK6DukSOPErcK1I/L
t9478qM5UaB1tvgS/znNS0inVGrCKorkzCfpGA6h/UJLoxXYnb3GMTZbdFc+6pPQ
boYX+G5nJHSmKnX/21jokIHQYzwpdjEQWKfUrT1EpFFsXQu2an13k4ZJUAJwntQ1
fBazuyctaWaNiemQZPIB0BJX0zKZoscg6un2vr2An8Br6Yh+3ff35HtDCCRbiWul
GXjK4JIam/Nsl/YgPrF6I06dXwIDAQABo4IClzCCApMwHQYDVR0OBBYEFK2Ad+oB
2qoUTlPu1jbdhQyfX5cWMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB
MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjZFNzMvRjQxRDQwRjJFQTA5MTFFOEFEQTJFRDBDQzRGOUFFMDIvQzA2NTU4MzZC
M0I1MTFFQThCRkFEQzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgQkA6KAgDANBgkqhkiG9w0BAQsFAAOCAQEAgkqhyaXHCS0k
PiYqMzTYlJjBLoGXG+snaB7N1XOWEHGqr4E0Wx/CVSz6tWX/ZqhYYM7agEsJ1GzU
f3cP76BuUG9SwB5mt8HwebV85IduMQa5b5+ozWUajlXBIIJ9zwOC4Ts89S8f5FbS
AlqlkZZP49vlFikVTr4ZukUoy6fa87+UnxgzVMbxrJIgWb4RrUGI48bSqiS9st6G
KUu+SQ4LFnZoIOWYyoD8+u/t9yvwlGPZ7UTLZGSWkxOSqOPKu1ETZB38yjeXRTol
IZWRqP5+AAIgi497TSJNhqWBJDvYeTx7wd9Bne8Go++Wt4GPVa3hKN17yZGky/dB
TfnQpiS18Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:39:04 2025 by rpki-client