This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/7B3B0868DBDD11F089B5B5C658641951.roa
File: 7B3B0868DBDD11F089B5B5C658641951.roa (raw, json)
Hash identifier: kgOcs9CLVX7ZJC+2axbnc6VaT+hi4XvLWDxoRt9QMvE=
Subject key identifier: 4B:19:87:70:A2:EB:35:FA:78:53:A1:B3:92:72:F8:80:23:00:03:24
Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial: 0893
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/7B3B0868DBDD11F089B5B5C658641951.roa
Signing time: Thu 18 Dec 2025 06:47:55 +0000
ROA not before: Thu 18 Dec 2025 06:47:55 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 132335
IP address blocks: 2001:df3:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Validity
Not Before: Dec 18 06:47:55 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6943a39b-1d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:d0:69:2f:59:5a:f4:82:15:8b:b1:8a:90:
c3:8c:6b:08:be:98:bb:97:74:07:1d:7c:f9:b5:a5:
e3:d7:44:b1:65:c6:41:e2:f5:a4:78:68:31:e1:21:
c5:b3:db:32:ad:8b:b7:b9:86:2f:3f:c6:ee:5e:d6:
78:4d:8a:a7:0d:3c:ea:4d:ea:c3:dc:44:91:52:cc:
30:a0:61:5c:19:c3:ae:40:39:cf:f9:e0:d6:aa:9a:
30:b0:4f:ac:f3:88:0f:2a:55:2e:ba:c2:4a:af:87:
f5:04:d2:75:6b:d3:13:12:c4:98:cc:2e:e6:4e:ad:
62:d1:38:8c:16:a3:00:b2:e7:d8:8e:b6:c1:39:53:
65:92:71:39:8f:87:3b:e1:50:fa:5f:e4:a4:f4:ac:
1f:50:bc:17:87:fb:f0:ba:c7:bf:a3:91:a2:dc:db:
80:16:62:ff:d4:73:0e:17:3b:49:1d:81:ec:ac:b8:
9b:fa:d1:28:1a:3b:d5:19:5d:5c:9e:62:bf:9e:b3:
6d:49:da:31:f5:b3:6a:31:6c:99:4a:82:2a:a9:cf:
24:ba:06:48:34:80:54:dc:02:24:53:c3:7f:95:ba:
14:e6:eb:dd:15:15:08:11:90:56:d1:f2:ca:8b:b8:
30:fb:c2:27:4f:6e:19:b4:4e:96:d5:9d:ec:da:af:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:87:70:A2:EB:35:FA:78:53:A1:B3:92:72:F8:80:23:00:03:24
X509v3 Authority Key Identifier:
keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/7B3B0868DBDD11F089B5B5C658641951.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:8880::/48
Signature Algorithm: sha256WithRSAEncryption
31:10:2e:8f:fe:64:b3:97:58:d4:df:00:ae:1f:76:cb:ed:89:
f5:42:26:0c:d5:a7:ad:d7:54:34:0e:1d:d2:2d:c1:7f:81:22:
25:d4:11:65:87:df:9e:c3:db:68:f8:7a:59:0d:bb:4e:1f:b3:
bb:e7:7b:a2:32:fb:cc:f0:8a:d3:48:d5:cc:56:85:cc:cb:0a:
c3:6a:4e:0b:b6:c8:3d:41:ed:86:45:12:fe:86:3b:3e:49:6d:
13:53:0c:00:95:02:1e:76:b6:1e:c1:b1:86:ee:1c:0c:5b:90:
a1:93:63:0a:cd:1f:ba:9f:bd:10:bc:a1:df:56:e6:7e:60:f7:
55:73:98:19:5f:74:21:47:48:76:99:0c:03:20:70:c7:30:b2:
da:51:e2:2d:2d:78:55:ee:c9:3f:38:5e:cd:94:b3:34:8f:83:
1b:f5:9c:0f:25:d7:df:51:c6:7c:5c:0e:02:2f:7c:85:3c:1d:
f4:26:06:48:3a:21:ea:c3:f8:7b:aa:46:65:44:09:d1:d4:74:
80:e0:df:f1:ba:6b:c3:40:fd:90:4f:e3:75:1a:d9:55:a6:cc:
e8:87:c0:22:33:4e:3a:e7:1f:de:bf:28:9a:00:d3:35:3c:f0:
ad:ad:ec:4d:ab:f5:cf:0c:d9:9c:22:60:b5:94:8f:78:5a:ed:
5d:d5:5d:b7
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE
MDQ4RDA4MUQwHhcNMjUxMjE4MDY0NzU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQzYTM5Yi0xZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqnjQaS9ZWvSCFYuxipDDjGsIvpi7l3QHHXz5taXj10SxZcZB4vWkeGgx4SHF
s9syrYu3uYYvP8buXtZ4TYqnDTzqTerD3ESRUswwoGFcGcOuQDnP+eDWqpowsE+s
84gPKlUuusJKr4f1BNJ1a9MTEsSYzC7mTq1i0TiMFqMAsufYjrbBOVNlknE5j4c7
4VD6X+Sk9KwfULwXh/vwuse/o5Gi3NuAFmL/1HMOFztJHYHsrLib+tEoGjvVGV1c
nmK/nrNtSdox9bNqMWyZSoIqqc8kugZINIBU3AIkU8N/lboU5uvdFRUIEZBW0fLK
i7gw+8InT24ZtE6W1Z3s2q9MNwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEsZh3Ci
6zX6eFOhs5Jy+IAjAAMkMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx
Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D
QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU0QTgvRTI5NTIwQjhEMUNEMTFFQUJBNEEzNDQwQzRGOUFFMDIvN0IzQjA4NjhE
QkREMTFGMDg5QjVCNUM2NTg2NDE5NTEucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3ziIAwDQYJKoZIhvcNAQELBQADggEBADEQLo/+ZLOX
WNTfAK4fdsvtifVCJgzVp63XVDQOHdItwX+BIiXUEWWH357D22j4elkNu04fs7vn
e6Iy+8zwitNI1cxWhczLCsNqTgu2yD1B7YZFEv6GOz5JbRNTDACVAh52th7BsYbu
HAxbkKGTYwrNH7qfvRC8od9W5n5g91VzmBlfdCFHSHaZDAMgcMcwstpR4i0teFXu
yT84Xs2UszSPgxv1nA8l199RxnxcDgIvfIU8HfQmBkg6IerD+HuqRmVECdHUdIDg
3/G6a8NA/ZBP43Ua2VWmzOiHwCIzTjrnH96/KJoA0zU88K2t7E2r9c8M2ZwiYLWU
j3ha7V3VXbc=
-----END CERTIFICATE-----
Generated at Fri Dec 19 22:20:11 2025 by rpki-client