This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/7F4CB00EAAE811EA8412810FC4F9AE02.roa
File: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (raw, json)
Hash identifier: PiQ5Nr30+J6cFI8PcO8QaeRngY6br7QeoIsKBt+5WrY=
Subject key identifier: DC:BA:E1:23:9E:92:C0:02:BF:A9:9B:56:2B:F0:09:58:96:EF:97:D1
Certificate issuer: /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
Certificate serial: 0D27
Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/7F4CB00EAAE811EA8412810FC4F9AE02.roa
Signing time: Tue 02 Dec 2025 17:48:21 +0000
ROA not before: Tue 02 Dec 2025 17:48:21 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 63005
IP address blocks: 27.126.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3367 (0xd27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F91EB, serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
Validity
Not Before: Dec 2 17:48:21 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f2665-57c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:6a:90:35:cc:21:64:12:16:fe:7a:be:ed:
6d:0e:fa:90:a6:1d:82:c3:df:df:98:36:2b:b6:92:
2d:a6:f8:d2:35:e7:c5:98:00:45:d6:d0:f5:7a:a2:
44:b7:1b:d0:95:dd:86:f9:45:d1:ab:e0:d6:b9:4b:
7e:89:57:f2:38:13:6b:93:b9:9c:fd:c9:7e:51:11:
79:c9:95:d0:07:1c:de:43:6a:8e:22:1b:a8:10:f9:
0a:4a:11:a3:ee:39:19:26:7f:48:10:e6:35:f4:a4:
96:18:b8:97:29:50:e7:9f:63:08:26:7c:df:d9:7c:
39:b3:a3:98:90:08:26:38:b3:11:98:8f:be:3b:1e:
7b:2d:8a:0f:2c:8c:e0:ae:d6:e2:06:72:c2:18:97:
44:d3:ef:67:02:75:8a:61:7d:f4:7f:37:53:2e:4b:
20:bb:4f:43:1b:71:3e:0b:03:ea:8f:a7:fc:68:17:
92:c0:3f:8d:25:65:ec:e6:04:2e:22:09:08:c3:22:
f3:9f:5a:6f:7b:9c:51:1e:6c:e2:54:bc:26:0d:d2:
23:bb:af:03:78:d1:d1:24:90:a6:67:e7:10:3f:88:
47:b5:ed:d2:4a:9e:57:a0:d8:75:38:a7:3f:42:d8:
f2:d7:89:01:9a:60:fb:f4:80:bc:29:58:ca:55:af:
3b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:E1:23:9E:92:C0:02:BF:A9:9B:56:2B:F0:09:58:96:EF:97:D1
X509v3 Authority Key Identifier:
keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/7F4CB00EAAE811EA8412810FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.126.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2b:2a:d0:e8:73:54:12:02:04:10:5f:cc:6c:e9:07:93:9f:
cc:66:57:da:60:bd:d3:a2:ed:0d:2e:c1:c0:32:0b:62:6b:79:
bf:a5:01:35:73:b2:a7:bc:7f:e8:4e:a4:d9:13:98:32:b7:9f:
be:a3:43:d5:9e:70:0d:13:50:42:65:fe:27:99:16:00:78:a2:
68:0c:8c:e2:fd:89:a2:86:ea:42:15:96:a6:87:f9:43:c8:8e:
4d:f5:d7:5c:27:64:33:6d:6c:70:34:87:4a:bc:00:d7:b4:8e:
af:40:38:e9:bc:ae:7c:56:5b:97:43:4c:ee:95:7a:71:84:f0:
4e:bb:80:0f:ed:98:b1:e4:10:3c:35:7e:13:e0:41:f7:1f:ef:
6f:4e:71:23:96:d7:57:48:63:ec:47:7d:5c:b2:7e:f8:06:60:
8f:22:b4:30:64:6c:08:0a:dc:18:07:83:03:de:83:43:23:f5:
ec:23:61:9e:9f:5b:7f:2d:b2:d1:76:b3:b8:e0:1b:6e:cc:ab:
7e:63:9f:fd:c6:27:b1:75:58:26:a3:c0:86:e4:0e:ef:7d:d4:
aa:ca:9a:31:f6:a9:d7:0a:e4:57:98:ee:be:be:99:b9:d5:95:
78:be:14:db:69:70:a3:b8:99:ac:c1:de:58:4c:58:d7:ae:75:
7e:4a:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:02 2025 by rpki-client