This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/ECC41AD2748A11ED80EF3436C4F9AE02.roa
File: ECC41AD2748A11ED80EF3436C4F9AE02.roa (raw, json)
Hash identifier: C/4N4YGAPMXTvMQ0VDNg++F7ZNkUv6rU6rWqLzDBgzw=
Subject key identifier: 7A:08:1C:6B:45:D1:00:33:D6:FA:13:FE:94:15:0E:2E:EE:28:B7:9C
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0643
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/ECC41AD2748A11ED80EF3436C4F9AE02.roa
Signing time: Mon 10 Nov 2025 22:45:23 +0000
ROA not before: Mon 10 Nov 2025 22:45:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 0
IP address blocks: 2400:5200:402::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1603 (0x643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 10 22:45:23 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69126b03-070f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:64:73:1b:f0:96:4a:4b:05:2f:8b:6c:48:
9d:af:e1:d4:2d:da:e2:e4:d9:37:70:ba:e9:6a:cf:
11:fe:82:43:a7:0d:bd:52:51:5e:2a:2c:4d:b8:be:
f0:92:40:a3:8c:bf:64:af:dc:bb:77:94:7a:68:ee:
56:25:ea:af:fb:7f:a2:36:f1:49:47:d8:30:de:2a:
b2:a7:7a:99:d7:78:d4:e3:28:7d:e8:41:8d:b9:2d:
6f:f5:31:59:73:d8:28:1d:fd:03:45:49:f5:0d:11:
20:2a:bd:ef:9a:3b:96:56:5c:46:c4:1c:4b:5c:cc:
04:2c:bc:cc:7f:97:b3:f0:83:58:8c:b6:a6:f3:72:
d3:88:74:7f:fe:75:ce:fe:20:e7:d6:dd:1d:6b:19:
79:84:84:24:51:02:a3:b2:96:8b:7b:35:0e:7b:4d:
e8:52:f1:10:22:d1:57:30:fe:12:4a:2f:85:8c:49:
20:71:73:44:83:6a:52:33:ea:de:a6:64:c6:77:8d:
64:89:3b:81:36:a9:de:e4:f8:da:49:70:9d:0d:35:
a9:09:14:33:33:77:59:2a:c2:8c:54:1a:ce:e7:7d:
bc:bd:40:58:7d:26:37:98:27:a6:63:46:b9:c9:73:
22:2c:68:2b:11:16:52:73:a1:b5:cf:cf:ff:bd:4f:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:08:1C:6B:45:D1:00:33:D6:FA:13:FE:94:15:0E:2E:EE:28:B7:9C
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/ECC41AD2748A11ED80EF3436C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5200:402::/48
Signature Algorithm: sha256WithRSAEncryption
51:a1:f8:08:88:03:cc:a2:0a:3c:b2:87:8f:53:4c:2f:1f:5e:
0c:a2:8b:b7:49:a8:d0:5d:90:33:09:c3:36:b4:2a:0c:a3:a7:
0f:e9:e4:5a:cc:f2:1a:d3:9b:62:df:cc:57:42:cd:02:77:0f:
63:2c:be:e5:80:0c:04:53:0a:a4:ae:86:b9:18:f5:28:49:fe:
ad:69:61:39:dd:54:50:4a:31:c3:8a:ba:8f:d6:be:9b:5e:ca:
ed:cb:39:1e:37:ec:6f:94:c1:a2:93:3e:46:5c:d4:a2:de:70:
e2:0d:8a:a4:7c:90:29:a3:12:1c:47:ce:c2:4c:b1:5c:d2:59:
34:2c:70:a7:bb:c5:1c:fe:19:3b:b9:a8:ce:08:be:f2:e7:ba:
b2:22:41:a4:f5:a1:00:a5:55:62:e6:67:2f:3b:13:21:18:7c:
31:4f:15:f1:fb:2d:e0:ae:51:ec:90:8a:1c:c0:d7:6c:18:68:
92:8e:9d:91:b1:18:1e:c0:b3:58:60:ee:5e:c8:54:75:f6:e6:
3d:fd:e8:c2:12:57:a3:85:ca:fe:10:50:88:68:db:39:f6:17:
c3:74:b1:18:4b:8f:21:c1:03:16:c4:f7:d7:4a:3b:c8:12:1d:
85:e4:4a:3a:fa:94:55:29:7a:26:b3:54:c2:17:de:ce:94:3d:
9b:17:5a:9f
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjUxMTEwMjI0NTIzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTEyNmIwMy0wNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtDpkcxvwlkpLBS+LbEidr+HULdri5Nk3cLrpas8R/oJDpw29UlFeKixNuL7w
kkCjjL9kr9y7d5R6aO5WJeqv+3+iNvFJR9gw3iqyp3qZ13jU4yh96EGNuS1v9TFZ
c9goHf0DRUn1DREgKr3vmjuWVlxGxBxLXMwELLzMf5ez8INYjLam83LTiHR//nXO
/iDn1t0daxl5hIQkUQKjspaLezUOe03oUvEQItFXMP4SSi+FjEkgcXNEg2pSM+re
pmTGd41kiTuBNqne5PjaSXCdDTWpCRQzM3dZKsKMVBrO5328vUBYfSY3mCemY0a5
yXMiLGgrERZSc6G1z8//vU9dsQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHoIHGtF
0QAz1voT/pQVDi7uKLecMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvRUNDNDFBRDI3
NDhBMTFFRDgwRUYzNDM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkAFIABAIwDQYJKoZIhvcNAQELBQADggEBAFGh+AiIA8yi
Cjyyh49TTC8fXgyii7dJqNBdkDMJwza0Kgyjpw/p5FrM8hrTm2LfzFdCzQJ3D2Ms
vuWADARTCqSuhrkY9ShJ/q1pYTndVFBKMcOKuo/Wvpteyu3LOR437G+UwaKTPkZc
1KLecOINiqR8kCmjEhxHzsJMsVzSWTQscKe7xRz+GTu5qM4IvvLnurIiQaT1oQCl
VWLmZy87EyEYfDFPFfH7LeCuUeyQihzA12wYaJKOnZGxGB7As1hg7l7IVHX25j39
6MISV6OFyv4QUIho2zn2F8N0sRhLjyHBAxbE99dKO8gSHYXkSjr6lFUpeiazVMIX
3s6UPZsXWp8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:17 2025 by rpki-client