This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
File: 926A40AC205E11F0A7552513C4F9AE02.roa (raw, json)
Hash identifier: FIWiDkBaYvaikmyCG+HfrIe8Wsn7dENJVYQ/p9hb52Y=
Subject key identifier: F1:FF:A3:E4:B7:47:AE:52:B8:5D:07:D5:D1:AA:D4:B4:7E:8F:40:CC
Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial: 01FE
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
Signing time: Tue 16 Dec 2025 16:40:56 +0000
ROA not before: Tue 16 Dec 2025 16:40:56 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 202736
IP address blocks: 185.254.242.0/24 maxlen: 24
213.139.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Validity
Not Before: Dec 16 16:40:56 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69418b98-2b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:df:e1:e4:60:de:35:aa:ed:7d:e0:b0:27:e1:
cd:74:96:4c:d0:eb:30:d7:e4:5e:45:52:0d:4b:a6:
60:24:86:e9:cf:2e:d6:58:5e:0d:98:99:c4:90:b4:
60:5b:77:09:59:c6:fd:b2:3d:10:44:b9:35:b7:5b:
ac:bf:98:84:d3:ea:ac:46:f9:d8:42:27:a0:2d:c2:
82:72:a5:dd:66:90:57:dc:1f:55:15:8f:59:97:d1:
f1:41:93:29:2a:04:0f:d5:ef:2d:71:5a:0b:13:57:
6f:e2:80:d5:93:31:e4:e6:c9:3e:86:87:b2:22:97:
8c:70:c2:b1:53:41:23:a2:59:a1:19:1b:d5:bb:4b:
83:94:33:dc:3f:d8:39:0c:b1:59:60:b6:6b:ad:a4:
67:b3:5d:9d:15:1f:52:2d:4d:17:8b:ca:1f:0a:3e:
35:11:e1:bf:65:7c:a7:73:08:97:f1:0e:17:6a:3b:
71:02:16:be:ec:1f:5d:0c:5d:69:4a:67:26:29:80:
96:3c:e5:1c:f4:2b:1e:57:a9:df:d1:0a:ce:f0:fb:
c1:34:2e:c3:f1:09:5d:c4:bc:fa:82:32:e1:b8:18:
45:7d:e6:a7:1a:72:15:16:a2:62:45:55:d5:82:c2:
c8:a4:49:6e:a2:8b:ac:5d:b6:c0:33:15:95:07:78:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FF:A3:E4:B7:47:AE:52:B8:5D:07:D5:D1:AA:D4:B4:7E:8F:40:CC
X509v3 Authority Key Identifier:
keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/926A40AC205E11F0A7552513C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.254.242.0/24
213.139.232.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2e:9d:2c:00:98:e0:2f:29:ad:a9:fa:ea:d8:b3:f4:a7:7c:
9a:c9:04:2c:f7:b0:22:26:cb:b1:43:91:37:33:48:ec:56:e1:
07:ec:55:6f:3f:03:4d:bc:54:ea:ab:1a:30:31:19:73:9c:76:
d0:ba:a0:f9:59:ad:70:b7:04:90:89:82:b7:89:bc:45:44:25:
78:6c:ff:20:4a:74:35:d0:76:22:6f:2f:fe:01:ef:8d:f6:82:
97:25:a7:f5:78:0b:8f:c9:15:0a:8e:e1:2f:f5:6c:6e:40:7c:
8c:29:7c:3d:26:2d:dd:9b:4d:bd:4a:62:9a:a0:a3:2f:47:79:
a5:ca:f8:52:e1:28:36:40:0a:95:87:32:7f:3d:e7:a9:b0:93:
31:a9:d1:ed:74:ef:47:e9:cd:dd:d1:79:ae:c7:10:87:19:76:
1a:9c:4b:c6:08:2a:99:75:33:e4:61:fc:95:a5:40:78:b9:6a:
6c:14:48:20:79:3b:55:49:d8:58:2b:0a:f4:cc:dc:9a:0d:a9:
92:95:fb:44:0d:91:59:d4:4d:1c:c3:5d:d6:50:c5:54:5b:b2:
52:09:40:2c:b6:0d:e9:4b:30:1e:f7:5c:65:84:05:22:8d:dd:
9a:81:06:4e:0e:06:51:c9:62:be:f1:2a:98:8d:43:f4:bb:68:
80:43:d2:09
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2
MEVCMEZCMTcwHhcNMjUxMjE2MTY0MDU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQxOGI5OC0yYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkd/h5GDeNartfeCwJ+HNdJZM0Osw1+ReRVINS6ZgJIbpzy7WWF4NmJnEkLRg
W3cJWcb9sj0QRLk1t1usv5iE0+qsRvnYQiegLcKCcqXdZpBX3B9VFY9Zl9HxQZMp
KgQP1e8tcVoLE1dv4oDVkzHk5sk+hoeyIpeMcMKxU0EjolmhGRvVu0uDlDPcP9g5
DLFZYLZrraRns12dFR9SLU0Xi8ofCj41EeG/ZXyncwiX8Q4XajtxAha+7B9dDF1p
SmcmKYCWPOUc9CseV6nf0QrO8PvBNC7D8QldxLz6gjLhuBhFfeanGnIVFqJiRVXV
gsLIpEluoousXbbAMxWVB3gQ3QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPH/o+S3
R65SuF0H1dGq1LR+j0DMMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC
MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTkxRDMvNjI5RThCMjAzQjIzMTFFRUE0M0IwMjE5QzRGOUFFMDIvOTI2QTQwQUMy
MDVFMTFGMEE3NTUyNTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAC5/vIDBADVi+gwDQYJKoZIhvcNAQELBQADggEBAJ8unSwA
mOAvKa2p+urYs/SnfJrJBCz3sCImy7FDkTczSOxW4QfsVW8/A028VOqrGjAxGXOc
dtC6oPlZrXC3BJCJgreJvEVEJXhs/yBKdDXQdiJvL/4B7432gpclp/V4C4/JFQqO
4S/1bG5AfIwpfD0mLd2bTb1KYpqgoy9HeaXK+FLhKDZACpWHMn8956mwkzGp0e10
70fpzd3Rea7HEIcZdhqcS8YIKpl1M+Rh/JWlQHi5amwUSCB5O1VJ2FgrCvTM3JoN
qZKV+0QNkVnUTRzDXdZQxVRbslIJQCy2DelLMB73XGWEBSKN3ZqBBk4OBlHJYr7x
KpiNQ/S7aIBD0gk=
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:52:29 2025 by rpki-client