This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa
File: FBE1E73689E311EF9021CE0CC4F9AE02.roa (raw, json)
Hash identifier: zUxzk8PVVaES9EMN0VkIqcIxDvXdbV+4WJwr6H3F2mM=
Subject key identifier: E8:0B:DD:37:27:B5:E7:4C:E8:20:9E:36:20:C3:E5:F0:1B:32:2D:93
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 02E0
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa
Signing time: Sun 27 Jul 2025 02:06:50 +0000
ROA not before: Sun 27 Jul 2025 02:06:50 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 135602
IP address blocks: 2001:df3:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Jul 27 02:06:50 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=688589ba-e38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:13:81:61:00:61:49:4e:db:91:a8:a5:66:
4d:48:ae:6e:93:4d:d5:bb:53:43:74:e1:71:9c:6b:
b6:43:9b:62:8c:e4:5c:f3:6b:62:1f:c1:56:0e:e6:
ea:28:c5:5b:e7:36:2b:c3:9c:92:ad:04:38:19:cb:
b3:6e:c1:c8:30:d2:59:29:3e:93:14:b9:bc:34:d5:
7c:11:c7:c7:e5:39:98:9e:65:21:92:da:75:a2:0d:
dd:dd:40:ef:f3:87:de:5a:4b:83:69:ff:e9:32:d3:
cf:89:d9:85:b7:8a:32:1a:de:60:f9:6b:e8:14:6b:
7c:11:eb:58:ee:ce:64:e3:7d:c7:bd:6d:52:8c:ac:
fb:33:c1:62:b7:ee:a4:21:ff:08:7d:31:60:cf:6c:
7b:ad:04:dc:46:28:25:e2:04:16:b5:3d:03:cf:22:
c2:90:bc:c4:41:0d:ae:c5:48:32:73:33:1c:bd:d3:
da:51:c4:0c:ff:7e:20:d5:19:de:6f:06:ec:da:2a:
da:2d:77:fe:d9:e4:36:7b:53:51:a3:c7:1c:58:09:
79:02:de:08:7b:0a:6a:41:72:4d:67:fc:9c:7a:4d:
9f:99:4c:fa:36:5a:9e:1a:ac:81:ad:50:8d:3b:55:
2f:40:e2:cf:94:c5:c5:c7:95:f4:89:4b:33:f0:c1:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0B:DD:37:27:B5:E7:4C:E8:20:9E:36:20:C3:E5:F0:1B:32:2D:93
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:200::/48
Signature Algorithm: sha256WithRSAEncryption
79:28:b5:f1:ae:dd:b7:ad:13:52:05:fa:ba:cc:f7:c9:fc:a7:
e7:02:bb:a6:29:77:0d:4d:0e:8f:c7:dc:a3:9d:34:87:00:57:
70:6f:d6:ac:a6:d3:5f:30:dd:a1:0b:20:fe:03:62:c2:cd:65:
17:b4:26:26:e4:84:a8:cf:1d:4c:21:12:08:37:da:15:21:60:
f6:b7:bf:11:e5:ad:53:be:15:a8:66:7a:45:06:0e:22:5e:03:
bc:08:f4:41:00:16:df:4f:a0:7c:b3:ac:fa:7f:9f:04:4f:62:
d3:1a:77:63:46:23:49:77:01:b1:ff:ae:51:1e:9c:cd:61:bd:
22:6e:0e:0e:cd:ac:87:bc:00:bf:92:ae:a0:0c:08:09:01:71:
6a:35:10:86:05:eb:a3:96:a1:7f:51:f7:2e:d4:c2:74:0c:3a:
fa:69:78:1c:c8:08:17:dd:94:b2:18:3f:3e:09:5d:3a:b2:de:
25:75:73:3b:1a:be:74:e6:38:f1:47:86:33:43:5d:77:a8:6f:
89:eb:8d:dd:41:79:42:bf:eb:d3:96:eb:9e:bb:d0:03:f3:7c:
57:d2:49:de:51:94:e2:2d:3c:47:dd:aa:0b:76:0f:7d:ff:aa:
1c:15:7e:6f:c4:5a:3d:4f:72:9c:41:49:90:f9:5f:90:00:b3:
7a:aa:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:45:57 2025 by rpki-client