This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/9FCD0EE6A34411EB94DFE619C4F9AE02.roa
File: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (raw, json)
Hash identifier: xXHY7bwGXSIeSyRjTBvDjww0CmRh6iG7/BTMHshpS7E=
Subject key identifier: 79:57:C7:87:4F:A1:E0:8B:59:2B:D8:EA:D4:FB:35:E1:2C:83:1D:61
Certificate issuer: /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
Certificate serial: 0629
Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/9FCD0EE6A34411EB94DFE619C4F9AE02.roa
Signing time: Wed 02 Jul 2025 23:34:50 +0000
ROA not before: Wed 02 Jul 2025 23:34:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 45136
IP address blocks: 119.235.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl
rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEBAD, serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
Validity
Not Before: Jul 2 23:34:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6865c21a-06a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:4d:ba:ed:a2:3c:0a:21:1b:3c:bc:f2:dc:
9a:d9:e0:d8:aa:1f:67:55:08:5a:87:c6:6a:7a:b0:
55:fb:51:e0:46:3d:7f:d8:d3:34:48:b2:2f:19:8d:
ef:8c:28:74:48:32:d3:26:8b:f9:58:7e:dd:5d:9a:
4c:12:e7:ed:62:80:f0:60:75:44:42:66:36:07:ce:
1a:36:94:66:c6:2d:7a:95:1b:53:f5:15:1c:5f:69:
18:5d:5b:64:5c:11:0b:09:89:47:c9:21:0b:71:ba:
a4:d8:06:ff:3f:25:23:d5:71:c6:97:66:5f:83:eb:
45:28:08:28:a3:98:56:42:84:4b:84:cc:54:f1:c4:
1d:04:5c:c6:b0:b4:92:70:4b:e9:32:da:07:30:ed:
24:5f:01:44:e3:b9:62:7a:a4:91:da:2f:9f:81:32:
d4:4e:b0:38:92:26:f3:40:e4:fe:0c:9f:24:2c:06:
6b:58:57:5c:a7:bc:46:ac:4a:70:bc:be:d9:f8:c5:
e4:11:62:89:10:c3:e6:cd:ee:39:1e:a8:0c:fd:59:
e3:aa:87:0b:06:5b:2a:99:81:3e:df:c1:ae:f9:72:
8b:3a:0b:fb:da:3e:6a:2a:8c:8a:d6:0e:7a:83:1e:
f2:ea:09:ed:7f:8a:13:22:1c:6f:5e:10:b2:22:3b:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:C7:87:4F:A1:E0:8B:59:2B:D8:EA:D4:FB:35:E1:2C:83:1D:61
X509v3 Authority Key Identifier:
keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/9FCD0EE6A34411EB94DFE619C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.235.40.0/21
Signature Algorithm: sha256WithRSAEncryption
27:8c:1b:29:97:ca:43:ae:d7:f5:08:8f:dd:20:9a:40:e9:0b:
d4:ea:ad:99:cd:de:1f:12:d5:bd:f0:20:ca:4d:e8:4e:25:5c:
2e:15:a8:14:20:d1:1a:fd:08:76:65:55:e1:b5:d2:29:b9:55:
aa:3f:48:13:db:40:d0:de:4b:b1:74:d0:26:28:06:5a:49:28:
ff:8c:18:8f:a6:23:77:f3:82:fe:a2:47:91:e0:92:ae:7b:0f:
62:74:ac:15:56:d8:ed:11:0b:16:0b:9c:f4:29:8e:9e:17:92:
ea:d1:72:7d:b1:13:f1:64:13:11:0d:2d:1f:fd:ac:5d:9a:bf:
57:13:6b:0c:b2:2f:0e:b7:9d:78:94:55:0d:fe:7d:83:92:4c:
00:60:d8:c3:41:f0:ae:ec:fa:d3:a1:4c:94:39:e9:71:1e:09:
7e:fc:a2:1a:d3:15:c6:ad:e0:40:25:4e:7c:d3:0e:af:1f:89:
6a:a5:dd:5c:df:31:82:94:b7:55:6a:83:69:37:c9:0f:9b:58:
35:02:b6:b8:a1:19:e9:cc:80:aa:af:4c:63:d2:4d:f5:73:f2:
b4:d9:7a:a9:dd:05:af:1f:38:9c:b7:d1:41:08:88:fb:6f:15:
9b:f5:62:96:e4:ca:88:41:87:e9:7b:d1:ef:eb:ad:8a:b0:c8:
c2:eb:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:14 2025 by rpki-client