This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1E0CBABEC99B11F0BD75C310C4F9AE02.roa
File: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (raw, json)
Hash identifier: YRzMwhAdxUkw8CLq3dtH3fyH0aeyCysd6VRYlsf4Ls8=
Subject key identifier: 0F:EB:9E:43:8E:2C:3B:3E:9E:6B:5A:E4:D5:9C:C2:B3:41:DF:AA:06
Certificate issuer: /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial: D5
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1E0CBABEC99B11F0BD75C310C4F9AE02.roa
Signing time: Tue 25 Nov 2025 01:07:31 +0000
ROA not before: Tue 25 Nov 2025 01:07:31 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 24511
IP address blocks: 2405:e40:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 03:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Validity
Not Before: Nov 25 01:07:31 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=69250153-dfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:75:0a:87:cc:34:a2:c9:df:72:14:66:a5:
88:c3:f6:ae:f1:00:27:21:91:60:37:3f:be:07:31:
62:ed:db:50:78:cc:b0:15:46:b8:af:d8:09:91:ca:
87:71:20:fd:1f:5c:ff:21:b8:5e:e0:28:89:1c:bf:
e2:e7:22:1a:89:a7:01:5c:33:14:73:4f:f1:7e:af:
e8:a6:cf:56:a5:5b:f0:b2:40:bf:14:6a:61:98:89:
e8:9e:3a:14:95:4e:b5:ea:ea:45:03:87:a4:7c:26:
08:84:43:08:16:31:c7:8a:60:0b:9a:50:36:17:16:
05:9d:51:e4:32:f2:37:9c:c2:a0:2e:dd:39:30:52:
d2:91:4a:41:a0:cd:bc:66:fb:41:ff:ee:ce:79:7f:
63:d3:43:15:e9:36:8a:aa:17:4c:ce:98:b7:7b:c1:
5e:7b:00:db:8a:0e:c4:41:4b:a7:35:89:30:9b:b9:
5b:5b:8f:bb:ef:46:c8:b0:78:b1:de:a4:4f:d3:e9:
e2:80:11:54:a8:88:8a:50:2e:25:8f:60:77:ee:5a:
cd:2d:00:f3:39:2d:4e:93:3b:59:78:0f:8e:e0:de:
d9:d7:fa:61:51:8d:6d:c3:7a:6b:18:68:2e:58:15:
4a:41:71:45:93:ea:43:04:6e:c3:0f:0a:c4:57:c7:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EB:9E:43:8E:2C:3B:3E:9E:6B:5A:E4:D5:9C:C2:B3:41:DF:AA:06
X509v3 Authority Key Identifier:
keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/1E0CBABEC99B11F0BD75C310C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:e40:8::/48
Signature Algorithm: sha256WithRSAEncryption
75:e8:3e:2f:e6:07:b2:0c:28:27:f9:09:0d:f9:33:03:ee:bd:
3d:2d:f0:11:06:e3:79:12:66:5a:05:0b:8f:b6:c1:76:00:bd:
24:4c:31:90:06:fd:a7:3f:a8:b4:50:c4:00:e9:64:e2:60:2d:
c3:74:49:57:d8:ba:ba:ee:dc:ef:a5:56:b1:92:91:93:56:79:
70:a8:b5:a6:15:2f:33:2d:e7:67:f7:d0:05:6f:78:56:33:48:
7e:59:49:44:66:d0:eb:52:92:fb:a8:55:35:e1:6d:89:ff:48:
16:ae:ea:80:2e:d0:0a:f4:1f:fe:21:3b:d1:04:1e:73:01:eb:
e2:8e:7e:41:10:d3:14:0d:d5:f1:d5:0e:f1:86:6f:24:36:6b:
06:db:06:48:0a:59:67:a3:e1:28:72:fe:b3:81:b1:6b:a3:1e:
b7:ac:be:4b:a8:0e:40:01:66:8d:ff:fc:5d:53:fb:fd:44:02:
4f:e2:20:9c:58:f5:4f:d0:5f:8b:09:89:04:f1:e3:b5:f3:1f:
99:a7:02:94:8b:a2:e1:71:92:9c:bb:50:ce:1f:db:21:7d:24:
73:b4:81:a7:aa:56:6a:87:6e:1c:5b:92:ee:1a:4d:26:5d:a0:
b4:ad:96:8f:a7:5a:79:ee:d0:29:4b:d6:36:26:36:a5:40:08:
1d:aa:f2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:39:22 2025 by rpki-client