This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/E9CF18DE0F7111F096BBCF24C4F9AE02.roa
File: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (raw, json)
Hash identifier: LJYk/G3tN+KuXhxLY4vLUCBZc2tSEaFJTdOb4sX/qHg=
Subject key identifier: D7:7C:E8:EA:83:F3:1D:FD:64:48:8F:E1:52:3A:96:CE:2E:5C:CA:AA
Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Certificate serial: 35
Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/E9CF18DE0F7111F096BBCF24C4F9AE02.roa
Signing time: Wed 09 Jul 2025 08:44:20 +0000
ROA not before: Wed 09 Jul 2025 08:44:20 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 138975
IP address blocks: 2001:df3:d540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE
Validity
Not Before: Jul 9 08:44:20 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=686e2be3-d083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:57:19:7e:4a:86:c1:c6:71:62:52:1f:d6:
ff:e8:0d:86:a3:91:21:4a:80:69:2e:ff:9d:0c:b5:
f5:db:e7:1c:6e:b4:4c:fb:74:88:a3:c8:0d:b9:01:
ff:ed:18:44:a4:ee:be:05:b7:5a:29:37:90:5c:8a:
f5:1a:f0:7b:73:2a:df:f9:3b:09:22:37:4f:76:a5:
19:f0:71:5b:9e:5d:23:dc:1d:3c:67:8b:0c:33:b2:
7f:df:32:49:c7:02:03:e6:15:ab:af:fd:08:59:e2:
76:05:8d:e6:cd:f1:6a:ae:34:4d:e6:23:8a:bf:29:
1c:74:c1:8c:de:b5:ea:eb:a8:25:92:40:71:92:76:
9d:0f:9c:6f:cf:dc:9b:a0:c1:38:06:5b:fe:f1:22:
6a:77:80:80:1b:b7:fb:87:66:f5:a9:27:b4:e7:a0:
48:f0:8a:8f:f9:3a:b4:86:7d:d6:3a:21:e4:69:8c:
fb:82:65:11:e2:25:64:96:2a:2d:f6:a2:47:8e:32:
2e:f4:8c:25:73:23:a3:72:1e:b3:ea:b6:a7:17:fc:
ab:5e:9a:dc:ee:31:37:ff:40:b7:f2:61:8d:45:c6:
d2:65:c2:a4:56:b6:0a:94:b7:d7:39:ad:09:81:cb:
70:35:2c:4f:d3:d9:ed:20:ca:d6:79:0f:3b:9a:ed:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:E8:EA:83:F3:1D:FD:64:48:8F:E1:52:3A:96:CE:2E:5C:CA:AA
X509v3 Authority Key Identifier:
keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/E9CF18DE0F7111F096BBCF24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:d540::/48
Signature Algorithm: sha256WithRSAEncryption
81:6b:97:09:67:e1:f1:e9:15:9d:c2:db:d0:20:ea:b6:05:6a:
36:62:2f:3a:67:3a:3b:ec:ca:6d:86:5e:22:96:d9:90:1d:b9:
cb:4b:9e:f1:43:26:ae:2f:02:09:5f:7a:d3:b6:be:5a:79:53:
22:74:61:ac:53:f0:5a:a9:3b:a5:bc:ee:a9:d2:0d:47:42:2b:
27:15:a9:d4:97:1d:f5:e6:c9:46:8c:cb:7b:13:0e:2d:a3:02:
ff:22:ac:07:5f:1e:f3:5a:13:46:32:be:c7:e8:ae:6e:0a:ef:
9a:d1:33:b9:82:a1:b8:72:de:65:1e:f8:48:7d:ab:32:68:ea:
71:48:c0:ac:cc:ef:b3:27:1e:a8:81:b7:56:9e:1c:d7:d6:5b:
1e:55:ed:b6:fe:de:76:d8:1b:fb:67:ad:8c:ea:0e:a0:69:cc:
4a:78:24:6a:bf:85:0a:1c:da:d4:48:c2:8f:5c:a1:82:12:de:
d6:58:9d:7e:97:a2:11:de:37:f3:fc:1e:17:9f:74:37:23:87:
71:30:42:07:21:a5:4d:e0:04:f0:97:c1:6a:8c:8a:75:19:e4:
c1:d2:e6:9d:28:78:fd:6b:f2:62:31:c4:45:2b:a8:4a:b6:02:
b5:76:49:92:14:14:b0:4d:17:fa:30:6e:93:4a:ef:71:12:b7:
ca:ec:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:20:29 2025 by rpki-client