This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/527245ACD42311F0A8A37057C4F9AE02.roa
File: 527245ACD42311F0A8A37057C4F9AE02.roa (raw, json)
Hash identifier: JAe8IRDZjRhBc/cJ3AbxdISllVbM5/bUgdQx1DGqHrM=
Subject key identifier: 13:11:A8:CC:55:CA:FE:FC:F3:F3:BD:E8:AC:2A:B6:73:64:F3:47:41
Certificate issuer: /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB
Certificate serial: 06
Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/527245ACD42311F0A8A37057C4F9AE02.roa
Signing time: Mon 08 Dec 2025 10:47:42 +0000
ROA not before: Mon 08 Dec 2025 10:47:42 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 396982
IP address blocks: 144.79.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl
rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB
Validity
Not Before: Dec 8 10:47:42 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6936acce-07ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:90:59:32:6f:74:48:d4:f2:be:8e:2c:6e:78:
2f:37:01:44:ef:0b:7c:19:63:19:35:5f:7d:c0:d9:
66:46:73:60:fa:4c:9a:e6:0d:9d:44:a5:41:ee:7f:
47:62:01:69:42:ee:5a:9b:5d:ac:f8:4d:3c:60:80:
ba:42:15:b1:67:c7:71:b0:0a:88:42:f3:43:5c:9e:
83:0e:75:d2:3d:04:4d:8e:46:6c:d5:3b:5f:76:30:
3a:f8:9c:2f:f5:a8:bf:5e:27:c5:a9:8b:54:a4:5a:
06:51:e0:b1:3e:db:7f:ed:2a:65:26:b8:48:9d:11:
71:d9:bf:32:a6:49:96:b8:40:45:86:ce:52:06:bd:
6d:63:42:e6:c4:4e:21:af:9b:41:af:b1:a0:bf:5f:
fc:74:fa:ca:e4:9e:80:c4:c8:e3:5e:37:7a:6b:bd:
c9:53:56:07:08:dd:de:83:a8:25:09:11:c7:98:02:
5c:f2:e3:7e:f6:ad:09:e4:59:42:da:31:c6:17:2b:
ee:85:2d:03:41:fd:09:2d:a9:98:9e:49:d9:3e:9d:
62:66:6b:ed:c0:5a:b2:f2:46:3c:28:ee:dc:39:0a:
84:af:3f:b6:65:26:06:3a:b1:14:b5:bf:f8:57:2e:
8d:55:c2:9b:ea:69:53:68:8f:80:2f:8e:82:8d:b8:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:A8:CC:55:CA:FE:FC:F3:F3:BD:E8:AC:2A:B6:73:64:F3:47:41
X509v3 Authority Key Identifier:
keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/527245ACD42311F0A8A37057C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.45.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8a:b4:e5:f3:aa:ad:4f:85:2a:cb:a3:0d:7a:30:80:cd:1e:
ac:68:30:89:8b:99:f4:e0:d8:dc:ff:5b:39:9c:cb:8c:65:a8:
ff:49:48:cd:90:aa:36:fb:cc:0d:55:1b:e1:95:34:89:ed:c1:
07:6d:2e:d5:c1:66:f5:f0:ba:fe:27:18:1b:2e:78:27:d6:48:
2b:41:c3:66:c5:a5:53:b7:77:66:0c:3b:3e:64:54:da:cb:00:
14:ab:03:eb:39:a2:1b:90:c1:63:46:ce:86:e6:c3:20:6e:ba:
06:fe:b7:ec:d7:3e:5c:93:d6:fa:a0:4e:6e:57:7f:1c:08:4e:
90:ab:56:ff:3b:d5:10:5d:62:1e:23:d8:9c:1b:68:75:78:84:
7e:9d:93:cd:fa:71:73:ba:01:9b:53:73:ab:a4:02:32:2b:2a:
33:b1:ae:4f:30:f8:dd:fc:95:10:1a:c6:43:2b:61:a4:a5:44:
39:33:31:b2:b0:7a:43:c6:e0:ed:0f:7b:ef:99:12:b9:b4:f8:
0d:15:c6:df:25:b6:2f:ce:fa:55:91:98:54:ed:ba:e6:30:96:
2d:ca:21:fd:73:63:05:e9:35:5f:7c:a0:fa:46:fc:cd:c0:72:
f3:8e:eb:b7:39:54:4b:85:d9:31:57:1d:83:b9:d4:db:b8:fb:
d6:67:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:30:45 2025 by rpki-client