This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/4CC8B77AD0CD11F08E0F0143C4F9AE02.roa
File: 4CC8B77AD0CD11F08E0F0143C4F9AE02.roa (raw, json)
Hash identifier: iX4sQrcdcnjDqwQaonepmNxC0cUNYw/x7ZNfv1HPYto=
Subject key identifier: 33:74:EC:9B:FB:77:49:E3:D6:60:E9:8C:AE:68:56:5D:6A:E4:27:08
Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Certificate serial: 0763
Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/4CC8B77AD0CD11F08E0F0143C4F9AE02.roa
Signing time: Thu 04 Dec 2025 04:54:22 +0000
ROA not before: Thu 04 Dec 2025 04:54:22 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 58441
IP address blocks: 2404:2100::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl
rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Validity
Not Before: Dec 4 04:54:22 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=693113fe-919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:53:d1:ca:04:82:8e:c5:41:9c:ca:ae:e9:
4a:fe:f5:03:37:17:1f:6a:6a:fc:b7:55:02:84:c7:
d0:6b:47:10:bf:cb:05:86:0c:9a:62:ff:af:12:21:
3f:fc:db:e3:b1:aa:d0:36:2b:dc:86:81:3e:e1:9d:
7b:e9:e5:05:11:9a:4f:61:81:03:6c:f2:77:e2:9d:
04:24:a9:e0:b0:fb:a5:fe:12:92:54:1c:3c:3e:77:
52:cc:14:ef:1e:e8:0c:b8:48:7f:18:ea:5e:a6:32:
82:4d:fa:b6:f1:99:ef:19:15:8c:1b:b4:67:fe:69:
04:f1:50:84:eb:f5:92:a4:5e:63:a9:d2:b6:c0:78:
43:02:b2:05:59:41:03:5c:0a:cc:2a:cc:f2:e8:c5:
42:11:31:0b:9d:35:07:e5:7a:0b:61:1e:64:9c:f8:
19:51:f5:fd:cc:ba:16:3a:b2:d3:54:b3:dd:a1:6b:
20:0b:58:47:6c:9e:31:f0:20:54:9f:8d:d1:68:9d:
4c:8d:f1:ec:c1:27:1f:21:a4:ee:66:39:d7:c5:8a:
74:0a:44:d8:8a:31:62:b8:97:1f:e2:86:b1:b3:ed:
99:86:48:bd:bb:b4:1d:bf:b8:a5:fd:4f:3e:cd:11:
83:15:a5:ec:26:e4:00:ab:64:e9:d6:ee:03:cc:de:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:74:EC:9B:FB:77:49:E3:D6:60:E9:8C:AE:68:56:5D:6A:E4:27:08
X509v3 Authority Key Identifier:
keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/4CC8B77AD0CD11F08E0F0143C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:2100::/32
Signature Algorithm: sha256WithRSAEncryption
a6:4f:ea:ed:8b:2d:5d:d2:04:b7:b8:51:ce:e0:95:71:8e:2d:
6c:4d:77:a5:26:c4:d3:5a:48:c3:79:90:ea:80:3d:68:26:08:
f6:c7:bd:8c:7f:47:9b:65:bb:2d:2f:2c:36:ff:d4:99:d9:61:
b2:3e:f2:25:e8:69:ec:46:87:86:b9:09:e1:f1:69:06:9d:08:
19:d5:02:90:30:5a:07:87:94:1e:4e:6d:95:6e:22:ce:aa:4f:
4d:65:5d:9d:71:65:c2:d0:87:03:d4:93:a1:83:8d:e6:2a:f3:
62:d9:4c:ae:43:17:36:66:a6:31:fa:a5:bb:66:24:58:3f:a2:
fb:9a:c1:92:d5:fc:22:02:ba:95:17:38:84:a4:9d:61:bc:be:
28:36:cc:90:6e:6b:ef:a9:c3:18:a2:40:c2:f8:01:be:8d:9f:
cb:fc:79:88:c2:9b:3f:f7:f2:29:08:10:b0:57:51:46:95:06:
23:db:58:b9:ec:cf:a1:f2:d1:08:fc:dc:ba:d1:3a:58:d1:06:
c9:a2:32:85:84:28:19:e1:ac:83:45:57:1e:f8:e8:a0:84:c3:
c4:7e:6f:f6:39:5d:35:17:11:d1:0a:c2:d9:48:2e:1a:b9:88:
fd:5d:bd:9e:62:ed:59:7e:9f:c9:ff:46:ff:bb:0b:25:c8:69:
fc:9e:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:39 2025 by rpki-client