This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/08DE553CE33411F09C32B5836E6F56BC.roa
File: 08DE553CE33411F09C32B5836E6F56BC.roa (raw, json)
Hash identifier: eUx0szc6mDFrTXmR6KQgfAyJ6imSHu6ZcWSwSYyS93w=
Subject key identifier: DF:74:EA:1C:9E:1A:36:63:86:A6:9C:1D:03:50:2C:02:53:74:AC:8D
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 11B2
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/08DE553CE33411F09C32B5836E6F56BC.roa
Signing time: Sat 27 Dec 2025 14:55:07 +0000
ROA not before: Sat 27 Dec 2025 14:55:07 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137443
IP address blocks: 2404:7ac0:606::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 15:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4530 (0x11b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Dec 27 14:55:07 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=694ff34b-6c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:ec:16:a0:d3:46:25:c4:cf:1a:d7:65:09:
05:4b:d6:01:6c:10:09:ba:60:22:1f:56:ca:f8:0d:
24:80:06:27:e4:63:1a:79:31:88:bf:e1:50:c4:1f:
d4:b5:c7:42:8f:78:7b:bf:61:4e:65:78:f9:ed:18:
26:90:bf:ad:fe:c6:ba:af:44:e6:2e:31:36:89:a2:
ca:50:6b:de:49:0e:0b:49:10:8e:08:2a:c9:e3:d2:
f9:93:06:9e:0f:18:5b:07:d3:ef:c4:43:d9:5a:0a:
06:6b:4d:9b:f0:6e:11:db:cc:14:12:7b:38:6e:2a:
09:38:2f:d5:65:9d:76:56:1e:d6:e1:37:6a:ee:e7:
b3:7c:01:56:0e:4e:81:0b:5e:38:fd:80:6e:08:99:
f3:35:2b:5d:99:7f:bb:ab:7a:a7:1f:08:dd:14:b2:
32:b8:bf:dd:ab:aa:62:c4:b0:a6:a6:70:63:26:c9:
09:cd:c8:0e:99:4e:68:c1:03:0f:02:10:1f:88:f6:
af:7e:9f:d9:17:e8:d1:fa:be:a9:af:6a:7c:54:90:
78:38:5c:10:7e:eb:39:be:9a:9f:b6:37:2b:23:2e:
c7:5d:56:34:3d:c0:ec:4b:a1:66:ac:84:be:91:15:
17:32:e4:b9:a2:d4:a3:36:03:10:12:94:90:b7:e6:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:74:EA:1C:9E:1A:36:63:86:A6:9C:1D:03:50:2C:02:53:74:AC:8D
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/08DE553CE33411F09C32B5836E6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:7ac0:606::/48
Signature Algorithm: sha256WithRSAEncryption
38:07:c8:a6:76:4f:55:27:ad:b4:ae:43:28:99:dd:a8:0c:03:
8c:d9:0a:e3:76:95:6a:fa:8a:dc:2d:51:c5:09:f0:1b:67:9b:
50:04:48:5f:2d:96:0e:b6:ec:9a:d7:74:76:1f:e0:9d:88:41:
49:38:63:e2:b9:9a:3e:df:dd:27:1c:5d:e2:04:a7:b2:56:50:
f5:86:71:6f:dc:be:44:c7:34:72:ab:11:c0:ff:a3:43:26:8c:
f3:0d:28:5e:5a:2d:9f:df:4d:83:ff:e5:10:81:47:b2:e7:20:
71:39:6f:f7:93:76:b9:d0:fe:76:7d:6e:14:f3:8f:9c:e0:e3:
9a:68:d7:28:ef:22:60:43:fb:86:78:db:f6:28:f3:cb:c5:01:
c4:81:b0:9b:c5:e4:9c:d8:28:1f:08:92:32:55:98:81:8e:4d:
3a:10:69:86:d3:17:08:6c:65:8e:ef:4a:c5:c3:57:c5:61:5a:
13:fe:7a:44:f1:0c:04:55:0c:75:14:58:92:2e:06:6a:57:53:
91:b1:c5:a6:06:31:c9:f2:8c:da:4d:79:6a:7a:ee:70:32:60:
40:ef:0f:97:3d:8f:04:4c:ba:d9:99:27:8f:64:f4:c9:c4:fe:
eb:d4:9d:4c:5c:1d:9b:a7:3e:45:c4:42:13:a1:b1:78:0d:07:
08:2b:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 20:23:33 2025 by rpki-client