This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/4DACC668D0CD11F0B1E50143C4F9AE02.roa
File: 4DACC668D0CD11F0B1E50143C4F9AE02.roa (raw, json)
Hash identifier: MB+r+Os7hTbN09scD5tkwu7u8VbFNM4s1268hWhFhdM=
Subject key identifier: E5:8E:BD:6F:79:C8:D1:98:A5:EE:A8:EF:2E:14:22:FE:91:B8:C0:41
Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Certificate serial: 0764
Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/4DACC668D0CD11F0B1E50143C4F9AE02.roa
Signing time: Thu 04 Dec 2025 04:54:24 +0000
ROA not before: Thu 04 Dec 2025 04:54:24 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 9381
IP address blocks: 2404:2100::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl
rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892 (0x764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Validity
Not Before: Dec 4 04:54:24 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69311400-6357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:39:d3:f0:08:75:c6:26:cd:51:48:75:88:
03:7d:56:b0:c4:e1:f9:88:a4:8d:d5:b0:43:b9:b9:
74:9a:aa:af:f0:1a:64:28:80:86:87:e0:77:5b:29:
f3:61:aa:2b:3e:d1:24:32:87:21:45:9f:bf:5c:bb:
5f:c3:7f:03:8f:e4:92:1e:e7:b3:c3:b5:80:8e:fb:
60:f2:07:57:eb:b9:8b:8a:7d:77:36:41:87:8d:f7:
a8:57:d9:e5:c1:b6:d1:df:d4:b1:e5:a6:c5:18:50:
e6:79:ff:cb:86:52:8a:19:65:a0:36:81:1f:45:c6:
8d:61:4e:09:69:a5:ef:4b:99:5c:91:70:2b:be:08:
3e:1d:9b:94:63:b2:85:4f:3a:1e:e6:b1:2e:d1:4d:
2a:6e:5b:d6:d2:36:45:3f:a2:06:de:fb:ec:cf:1b:
a7:98:a4:2c:30:c9:97:61:a3:29:3e:c8:53:b7:df:
f0:e4:fb:8a:f3:55:37:f2:c1:2b:9b:dc:42:c7:2b:
05:9e:67:0d:15:1d:1a:a4:f2:56:4d:3a:0b:c8:fa:
5f:6d:0e:c3:4f:15:52:56:18:e6:a6:d7:7f:7d:01:
ef:7e:ce:6b:af:40:d1:82:ab:43:13:4b:ab:97:30:
49:88:eb:aa:e7:a0:a6:f8:39:7c:1d:f4:44:a3:13:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8E:BD:6F:79:C8:D1:98:A5:EE:A8:EF:2E:14:22:FE:91:B8:C0:41
X509v3 Authority Key Identifier:
keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/4DACC668D0CD11F0B1E50143C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:2100::/32
Signature Algorithm: sha256WithRSAEncryption
20:0f:f1:42:e6:5c:fe:3b:d1:70:3a:8e:bd:67:56:c8:ca:83:
c4:74:5c:f4:f2:d6:0d:82:0e:91:0f:dd:12:ad:1b:6b:8a:e4:
b7:85:37:bc:97:6a:14:39:87:e6:29:c3:74:d5:a8:c5:2a:f9:
f9:30:fd:7b:4b:6f:2a:04:c1:77:06:09:d5:74:25:a7:aa:48:
60:62:62:8b:c2:8e:1f:66:2c:78:c7:c6:78:69:23:d8:21:fc:
77:ba:64:23:30:30:55:b1:44:e9:c2:e5:6b:1d:26:25:23:5c:
ce:b3:ed:15:84:03:14:51:5f:9b:be:99:ff:5e:4f:30:2e:86:
32:6a:88:63:79:d2:d0:b1:29:2d:ce:ed:ce:14:04:bc:0f:81:
9c:15:64:87:8b:85:b5:5c:d8:58:6e:03:f4:a3:dd:52:8e:f0:
2d:de:da:41:1a:a5:df:59:b2:7b:7b:69:63:60:01:49:fd:40:
c2:c2:60:46:70:e5:f3:03:af:a3:59:b8:00:c6:28:5d:34:82:
e3:e0:ce:8c:10:ab:04:c2:a9:d8:8a:e7:6f:db:00:4a:c0:a7:
f2:d4:06:eb:33:88:94:21:a2:e1:ee:83:68:06:0e:5e:7b:99:
d9:dc:8e:b0:c5:ee:06:7b:65:cc:97:3a:91:8b:e0:38:79:7a:
40:39:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:51 2025 by rpki-client