This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/11CCFCD8DB0B11F0BC36350982D3641D.roa
File: 11CCFCD8DB0B11F0BC36350982D3641D.roa (raw, json)
Hash identifier: T2ExcPQJ3OoWyvjTOYvqCFbaI/pKi+e21q1HsH+44YQ=
Subject key identifier: DF:95:5B:53:C5:36:C3:88:28:28:BF:77:32:85:91:C5:46:46:8A:3A
Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial: 3E
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/11CCFCD8DB0B11F0BC36350982D3641D.roa
Signing time: Wed 31 Dec 2025 07:24:42 +0000
ROA not before: Wed 31 Dec 2025 07:24:42 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 2764
IP address blocks: 2001:df5:f042::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Validity
Not Before: Dec 31 07:24:42 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6954cfb9-4638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:36:68:f2:03:45:95:ac:c0:44:e6:6f:c8:
6a:ee:46:fc:38:28:35:b6:13:e7:38:94:d6:b9:c6:
52:87:d1:4c:dd:57:72:17:2a:e9:b5:7f:47:77:ab:
4f:c9:08:d2:40:60:ef:05:00:75:e6:9c:96:93:d8:
b0:9d:27:6a:7c:54:09:74:08:b2:0a:f7:21:c2:7f:
cf:57:0a:3d:49:b0:3c:55:c2:e7:22:c6:35:ec:63:
7d:f8:a1:bc:5a:ac:b8:d6:08:1d:44:61:e1:96:ea:
54:05:fc:04:17:25:0a:76:fe:86:52:2e:1e:6c:27:
3e:9f:a8:c2:14:b2:0b:88:b0:a8:8d:74:40:32:e8:
b2:5e:23:c2:75:21:cd:db:3d:0d:ae:c5:02:74:1e:
b7:9d:44:2b:fe:37:3e:af:2f:9a:c1:4b:db:8c:27:
8b:03:2f:d3:22:bd:45:1d:8f:65:70:35:00:00:56:
6c:cd:a7:19:79:6d:ce:7a:62:6a:61:8a:82:79:e3:
41:41:92:e7:7a:16:0a:af:51:b0:52:1a:15:bb:62:
b5:84:f6:28:97:54:88:60:44:14:d4:da:24:b5:ae:
57:fd:b5:3f:3f:37:ff:85:9f:33:17:39:58:fd:d2:
3a:53:1b:4a:ca:c2:80:e5:8f:0a:3e:19:02:2e:25:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:95:5B:53:C5:36:C3:88:28:28:BF:77:32:85:91:C5:46:46:8A:3A
X509v3 Authority Key Identifier:
keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/11CCFCD8DB0B11F0BC36350982D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:f042::/47
Signature Algorithm: sha256WithRSAEncryption
ae:b5:c5:ee:49:ec:d7:df:c7:f5:a2:5c:97:02:9e:5d:35:08:
fe:88:cb:0d:4f:6d:86:e1:0f:c3:b1:ef:8c:b4:db:ae:75:df:
e4:7d:86:29:cf:e5:b7:72:a7:7f:80:86:8e:82:38:60:6d:1b:
a1:38:3b:4a:4f:6f:1f:83:c5:45:2e:7c:c2:16:71:4e:11:1f:
91:01:5f:9b:f1:1f:33:44:c3:b3:09:8d:1b:44:68:7d:3d:b4:
13:e8:56:ed:ae:70:cc:7c:71:44:2b:b5:9d:70:2f:24:1e:87:
20:ab:b7:23:d6:25:b9:48:0b:d8:96:71:c6:f0:8b:a9:88:ea:
d8:05:1c:99:31:0d:68:e2:e8:52:58:f6:04:b6:e5:17:e9:15:
b0:48:96:d1:31:8d:ea:b4:54:10:ff:06:4b:e1:fd:bf:d5:5b:
ba:fd:d3:da:68:9c:50:bc:dc:e5:88:6e:dd:c1:09:ac:41:61:
c0:7e:8b:ad:07:8b:65:20:28:87:d8:41:ff:1f:8d:98:9b:9a:
68:ea:fa:26:03:8d:52:e0:c7:34:7a:8d:f0:35:3e:a5:2e:ec:
1a:ce:bb:ae:fc:de:ca:92:15:32:e2:a0:24:4c:c6:5c:20:0e:
7f:f9:12:44:da:72:73:56:58:30:d8:df:9a:09:63:ea:ce:21:
7b:f8:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:06:13 2026 by rpki-client