This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/10854F3E516B11EC86C3243EC4F9AE02.roa
File: 10854F3E516B11EC86C3243EC4F9AE02.roa (raw, json)
Hash identifier: 12oAkntg4F+l6YMEG7ngtgz7nnlCeNA1Ol9a6allxiU=
Subject key identifier: 9F:E4:70:B7:95:28:8E:03:05:1C:21:9E:EA:74:1A:8E:45:00:65:EB
Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Certificate serial: 04E2
Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/10854F3E516B11EC86C3243EC4F9AE02.roa
Signing time: Thu 01 Jan 2026 00:19:40 +0000
ROA not before: Thu 01 Jan 2026 00:19:39 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 58434
IP address blocks: 203.96.252.0/22 maxlen: 22
203.147.92.0/22 maxlen: 22
2402:2f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Jan 2026 23:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25
Validity
Not Before: Jan 1 00:19:39 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6955bd9b-6df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:82:a9:9f:ee:1b:e5:89:d8:1a:31:71:07:
10:c0:5c:7d:3c:1c:2e:12:31:cd:dd:dd:30:d5:ef:
17:63:4e:05:0c:f7:d2:c0:2e:1d:d4:a0:8d:a7:4a:
91:2a:5e:1a:79:63:20:96:d4:75:1d:03:dd:1e:30:
97:6f:74:d5:1a:cb:c3:d3:d5:61:7b:21:bd:ac:11:
bc:31:08:c9:fe:3a:c1:6c:9c:5a:49:6c:4d:b7:e3:
97:35:c2:3f:4e:c6:cf:2a:9b:83:a6:46:48:59:a5:
98:44:bf:50:e7:8a:b6:51:21:bc:0d:ec:58:45:01:
3a:0d:ee:74:dd:80:9e:0b:ce:bd:c9:f5:39:63:8c:
18:e2:27:9f:9e:6e:61:ed:3d:90:57:93:51:f6:54:
42:c7:55:96:53:d6:2f:d0:75:5d:cf:ed:7e:38:9d:
d4:ca:ba:11:9b:93:eb:9c:39:fb:0f:5d:4d:b4:87:
00:c9:9d:af:d9:cf:bc:9a:58:d4:15:6f:cf:24:02:
7b:06:68:20:3d:b3:c1:bd:07:5b:61:35:a5:91:84:
8c:67:32:0e:4b:a8:f5:53:90:93:ca:84:09:11:33:
a5:60:5e:46:9a:c3:b0:f1:74:61:e8:19:13:f8:00:
11:b2:72:43:b0:e2:ef:d0:7d:f1:2b:04:ad:e0:73:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E4:70:B7:95:28:8E:03:05:1C:21:9E:EA:74:1A:8E:45:00:65:EB
X509v3 Authority Key Identifier:
keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/10854F3E516B11EC86C3243EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.96.252.0/22
203.147.92.0/22
IPv6:
2402:2f00::/32
Signature Algorithm: sha256WithRSAEncryption
25:98:06:59:f4:bb:ef:ef:73:56:9e:a5:b0:6f:48:85:58:22:
d1:3e:f1:a8:07:1a:cb:dd:1f:e2:bb:a7:c6:a5:d3:31:59:9a:
20:b0:f0:f9:81:c8:d5:13:4a:17:20:63:a6:b7:0d:e1:f8:88:
b6:ce:2f:b6:8b:90:9a:0f:5d:a9:93:96:aa:a8:65:49:74:1e:
5d:f4:c2:a4:82:6a:49:bc:9d:b1:04:05:12:b6:d5:61:9b:fa:
2e:0a:7f:40:d6:d9:73:1c:25:45:2b:70:ee:54:b6:5a:e8:6a:
61:92:87:65:0b:db:84:a3:36:a4:d2:33:37:27:5c:6e:3a:9d:
59:6b:49:d0:38:9f:4c:97:be:a1:4f:4b:25:d6:33:27:8f:fa:
99:52:cc:60:f3:d4:64:db:bd:10:4a:15:be:bc:d0:0a:26:b7:
12:2e:16:7d:2f:70:17:db:7c:72:53:7d:8c:3e:5c:e7:31:18:
aa:30:83:a5:5a:5d:04:06:27:c9:ab:9d:4f:3d:03:96:a0:fa:
4b:35:40:fa:74:b3:10:19:a6:37:3a:99:ad:41:ac:14:ff:2a:
14:78:8f:f1:19:e6:22:65:d9:66:14:f7:61:e0:b5:ac:13:2f:
b5:a3:89:97:d5:bc:70:bf:fd:77:e5:e0:d5:c4:36:ef:38:a2:
df:cd:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 16:29:27 2026 by rpki-client