This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/D5BFBE9E591811EF80AA9F21C4F9AE02.roa
File: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (raw, json)
Hash identifier: JMbPewXmvsjUnAdQz322CY8L97yt7N2HMn/pCZCh18Y=
Subject key identifier: 6D:4C:B2:F2:C9:52:D8:16:AC:8F:C2:5C:C8:D3:41:46:FE:67:94:F2
Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Certificate serial: F9
Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/D5BFBE9E591811EF80AA9F21C4F9AE02.roa
Signing time: Mon 10 Nov 2025 16:04:37 +0000
ROA not before: Mon 10 Nov 2025 16:04:37 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9484
IP address blocks: 192.82.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7
Validity
Not Before: Nov 10 16:04:37 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69120d15-f389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:8b:a8:a0:df:63:73:75:2e:3b:6e:12:a1:
70:fa:c8:31:60:1d:38:36:aa:34:ee:c0:7a:f2:e5:
61:69:da:4d:8d:5e:02:a4:03:3f:b2:e0:f0:09:c7:
f2:2e:2f:01:60:39:41:f7:e3:c2:a2:bb:10:68:f9:
35:91:fd:71:c4:f7:ab:65:80:89:26:cf:fc:96:5f:
4b:33:82:7a:28:22:20:5f:af:b2:e8:b1:0e:21:ad:
db:ad:f2:8d:cf:bb:8b:c5:fd:46:ba:df:82:da:c1:
48:e1:6d:07:cc:e5:1b:7f:43:a1:1e:8d:93:f2:ef:
c7:22:58:6a:3b:ba:b6:0b:d3:56:10:4d:9a:ce:cc:
a9:a1:88:19:ec:e7:c3:6e:d2:fc:f1:6e:30:63:ce:
4b:4f:c8:07:fc:74:17:e2:a0:3b:fe:02:37:76:f5:
1a:6b:c4:c0:dc:67:aa:40:d4:7e:ae:4a:8b:10:f6:
cc:93:c2:ec:13:26:2b:2c:a4:34:a3:57:ef:f2:4b:
ff:bd:c6:24:f3:1f:ab:b4:dc:97:c1:6a:cd:eb:d2:
3a:f3:75:b1:6f:8f:2e:03:49:b3:e4:b5:c8:f1:89:
23:27:08:9e:85:32:fb:49:3c:ff:46:a0:4e:c4:27:
0e:b9:a6:a2:e2:6b:96:99:c6:6c:6f:13:50:b9:fd:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4C:B2:F2:C9:52:D8:16:AC:8F:C2:5C:C8:D3:41:46:FE:67:94:F2
X509v3 Authority Key Identifier:
keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/D5BFBE9E591811EF80AA9F21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.82.88.0/22
Signature Algorithm: sha256WithRSAEncryption
90:7d:6c:43:0b:78:2b:d7:dd:92:09:fb:49:eb:be:dc:3a:84:
93:ae:d0:42:88:a6:8b:f3:57:c5:55:9e:cf:33:23:b3:f8:28:
6f:50:43:14:6f:a7:18:54:20:c7:72:d7:c9:c5:ee:53:46:df:
f4:a4:ec:72:c7:c2:49:6a:d2:72:f0:2f:67:43:4a:f9:38:f7:
02:0a:8d:b3:40:bd:bc:5d:f1:6d:f8:9d:77:e2:0d:ff:ea:ed:
e7:5c:79:70:f9:5d:ae:01:35:69:be:9d:35:6e:3c:a0:74:04:
4f:3e:b5:ca:f2:7a:3a:07:eb:2c:0c:a4:d2:aa:bc:2d:57:05:
19:a8:3a:ba:c1:b1:15:1d:c4:89:d1:48:41:d5:7c:a1:63:11:
de:36:43:eb:2c:61:6d:65:23:8f:6a:2c:5a:db:45:62:2f:70:
93:a0:ad:b0:60:02:7a:7e:de:78:86:86:d3:f0:89:7d:31:09:
e5:49:f2:05:d4:b0:d4:00:ce:f3:ee:0e:83:1e:d6:10:90:03:
d7:1c:e4:55:af:98:81:be:7c:8b:65:1e:49:5d:3b:cd:36:de:
8c:d0:dd:d3:22:c9:5c:29:8f:15:40:66:79:4b:ba:bf:56:31:
83:ab:f6:bf:66:0e:5d:33:b5:c5:15:07:39:71:b2:f2:69:e9:
59:b2:c3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:38 2025 by rpki-client