This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
File: 9DB343D0DA5A11F08EBD209195D3641D.roa (raw, json)
Hash identifier: sIQOHGddydH5WNvq1a9DZQM4Tgjc39JsPN94viMuMhk=
Subject key identifier: 4C:E4:68:30:0A:2B:CE:6F:EA:D0:3B:54:A8:5B:94:45:58:5C:FA:54
Certificate issuer: /CN=A91519CC/serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
Certificate serial: 04
Authority key identifier: 49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
Signing time: Tue 16 Dec 2025 08:38:38 +0000
ROA not before: Tue 16 Dec 2025 08:38:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154434
IP address blocks: 2001:df6:7340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl
rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91519CC, serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
Validity
Not Before: Dec 16 08:38:38 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69411a8d-e301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:41:2e:f2:8f:1e:fa:44:ba:86:6d:d7:21:
55:4d:62:86:29:8d:2e:92:4b:37:d1:9f:c3:f4:b7:
b5:ff:87:e0:6f:49:95:41:86:e9:12:53:a2:61:8f:
35:c3:38:3d:7b:87:03:3e:cb:e7:35:a6:94:fa:2c:
d4:b1:3d:db:81:8c:fa:7f:bc:ad:41:02:3d:07:5d:
af:32:2b:53:63:c7:1a:b0:0c:28:4c:b1:1e:db:fc:
de:19:d3:f3:76:bf:ed:db:56:b9:22:67:08:69:cc:
27:e5:1c:6d:dc:c0:92:22:1c:ba:c5:92:d1:d1:b7:
83:fb:ec:cc:0d:fd:a6:6c:c7:23:62:fa:8d:a3:de:
69:ce:3f:42:7e:95:63:99:03:19:1a:4f:5f:92:18:
7f:a6:d5:2d:27:7a:d2:85:06:d3:5a:df:e3:e6:03:
b4:0b:f1:1b:5c:67:1f:84:de:0c:46:bc:da:ad:6f:
6d:6b:d2:da:2c:dc:b6:3d:c1:e4:27:55:3f:06:e1:
0e:99:0a:03:5c:24:a2:73:1d:04:ef:59:aa:60:ee:
1f:74:ac:8c:ae:ad:1f:ba:9f:eb:f0:2a:0c:73:b4:
b6:ec:aa:2e:1c:d7:e8:83:82:75:19:64:1f:61:ea:
57:30:56:82:30:44:09:07:24:f8:75:51:f6:fc:ac:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E4:68:30:0A:2B:CE:6F:EA:D0:3B:54:A8:5B:94:45:58:5C:FA:54
X509v3 Authority Key Identifier:
keyid:49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/9DB343D0DA5A11F08EBD209195D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:7340::/48
Signature Algorithm: sha256WithRSAEncryption
08:09:dc:65:76:8b:50:5a:a5:c8:cd:84:f6:3a:2d:b5:fd:78:
c8:86:65:0c:16:a1:dc:aa:d6:4d:df:df:83:d6:79:73:43:0b:
9d:76:fa:7e:1f:29:f9:40:a8:cb:8a:9e:e1:eb:6b:66:61:b7:
e0:c7:07:b1:b4:90:a3:55:08:8e:00:62:67:16:75:5a:39:f8:
cd:e9:e4:93:b7:82:8e:8a:cc:c3:4d:1a:5e:27:ce:38:88:3c:
41:37:83:69:c0:57:48:1d:58:6a:0d:a9:e7:41:e9:ab:ed:94:
12:84:ae:70:41:ad:fc:c4:54:8a:b9:19:bf:ee:67:e0:f2:9f:
f6:de:2a:93:d8:5a:7a:04:bf:48:d6:dc:eb:06:9f:5c:27:2f:
10:c0:53:b9:68:16:cc:12:62:36:04:2c:27:ce:85:e1:0d:15:
06:19:6c:c7:05:4c:c6:ad:be:66:71:60:ad:57:4d:73:87:1f:
4c:1f:8b:42:c8:99:1d:89:8a:98:b7:68:cc:3c:65:ca:5a:71:
fa:a4:a8:4f:f3:e8:04:d6:c4:42:54:c1:a2:cc:64:94:55:cd:
f3:f2:9c:3c:bc:15:a6:62:0c:13:fb:c8:f4:22:7d:73:23:d7:
9e:ff:fe:6c:2b:d7:fd:33:9b:df:ea:9a:90:91:5a:4f:64:62:
cb:81:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:35:49 2025 by rpki-client