This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/08B9DE4CD40B11F0B7778216C4F9AE02.roa
File: 08B9DE4CD40B11F0B7778216C4F9AE02.roa (raw, json)
Hash identifier: GNkRLJn8XSANTINmPiJ00h7rw6CLmDGth09g+Ndrvu8=
Subject key identifier: 99:48:A2:E3:A2:3C:39:A2:81:08:CC:DC:16:AF:21:F5:FA:42:1F:41
Certificate issuer: /CN=A913FA2D/serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
Certificate serial: 07
Authority key identifier: 7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/08B9DE4CD40B11F0B7778216C4F9AE02.roa
Signing time: Mon 08 Dec 2025 07:53:51 +0000
ROA not before: Mon 08 Dec 2025 07:53:51 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152685
IP address blocks: 2001:df6:6840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl
rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FA2D, serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
Validity
Not Before: Dec 8 07:53:51 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6936840e-0ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:e0:90:4e:cc:d0:11:1a:d4:f0:29:bc:b1:
57:a2:58:ca:18:ac:a4:cb:32:39:9e:52:c0:bc:25:
79:6c:52:b4:67:f7:09:ff:9c:6e:9e:73:29:b7:f6:
4f:19:65:54:73:1a:e7:30:fb:0a:10:c1:fd:6b:74:
1b:4e:79:73:ef:6c:aa:3f:87:69:8c:5e:97:a6:32:
46:cc:5f:b5:fa:1e:f7:9b:57:bf:a8:4f:f3:fd:12:
bc:47:c1:9b:4a:2a:92:86:e9:8b:47:d4:9c:33:d2:
9a:41:e0:37:8e:02:c3:24:4f:14:c8:4f:76:2c:ee:
cd:d7:b8:67:e1:14:a4:72:94:9d:70:9a:5f:02:24:
9f:08:d1:cb:b3:c9:d8:f6:94:02:8f:86:6d:df:e9:
8a:53:ee:dd:77:38:97:04:30:84:87:30:fd:ff:3d:
f9:1e:d8:8b:c7:e0:4b:d9:31:ba:52:97:94:f6:cf:
ab:d3:da:94:96:a4:d9:1a:c5:dd:29:23:2f:05:30:
3d:f2:f3:5f:66:d9:03:41:4d:df:6d:53:07:9f:ee:
12:4c:e5:4d:ee:ff:1b:da:8e:c3:ec:d7:3c:b3:44:
60:66:50:59:fd:32:ab:6d:3f:d8:4f:98:cf:f3:8b:
65:56:1d:d4:6b:13:22:03:2d:2b:3b:a9:aa:d2:06:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:48:A2:E3:A2:3C:39:A2:81:08:CC:DC:16:AF:21:F5:FA:42:1F:41
X509v3 Authority Key Identifier:
keyid:7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/08B9DE4CD40B11F0B7778216C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:6840::/48
Signature Algorithm: sha256WithRSAEncryption
54:1a:4d:d6:3d:c0:89:54:eb:26:9d:5a:90:de:27:d3:b9:39:
11:a0:b2:27:27:fd:18:fe:4c:6e:55:3e:72:5d:6d:d1:b9:6f:
b7:c5:32:1d:9d:44:6e:71:bb:ce:96:60:65:83:6e:97:3e:35:
46:a2:89:b1:8e:68:e4:78:a1:30:1c:b5:bb:02:e9:94:70:dc:
ba:f5:4a:7f:76:6b:24:99:72:04:45:8d:f4:08:6e:6e:e9:bc:
81:71:97:b6:a2:e9:d0:21:d5:76:42:35:64:f7:52:dc:ee:d3:
78:c8:dc:60:00:97:69:5d:86:b4:0a:7c:f9:d5:39:ca:f1:d0:
d9:be:78:4b:1d:23:9a:8b:93:8d:29:69:3d:17:78:f2:a3:20:
83:75:dc:db:71:c4:7f:f0:52:68:8c:4d:3d:89:ae:c0:48:00:
1f:d1:34:3e:b4:ee:cb:45:97:ad:ec:08:11:35:89:cd:01:cd:
f9:47:8b:bd:c2:f8:eb:b5:2c:c7:93:78:d3:c9:c9:d0:34:c4:
6b:23:e7:9a:04:b3:45:5a:c4:7d:d0:ef:73:39:e5:5c:18:86:
d1:f9:3e:60:59:a6:a6:ac:30:e5:f9:91:2a:b8:e8:cf:72:0a:
39:3c:ca:fe:11:48:5c:35:29:ea:e2:3d:c6:c8:aa:d4:46:9f:
b1:a5:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:35:49 2025 by rpki-client