This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/B4B581DEDFDB11F0B149F2E3536F56BC.roa
File: B4B581DEDFDB11F0B149F2E3536F56BC.roa (raw, json)
Hash identifier: g8h4AuAjSU2htCTyorJM2XPUCNXDA6cYYOZOcIV/cZY=
Subject key identifier: C4:E2:22:87:07:34:57:53:4E:71:16:50:E7:FB:58:81:5D:0B:7E:18
Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial: 0225
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/B4B581DEDFDB11F0B149F2E3536F56BC.roa
Signing time: Tue 23 Dec 2025 08:45:17 +0000
ROA not before: Tue 23 Dec 2025 08:45:17 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 54994
IP address blocks: 2403:1cc0:1005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 01:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Validity
Not Before: Dec 23 08:45:17 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=694a569d-aa15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e2:71:9f:c4:60:1e:51:f9:a8:43:fc:e2:5d:
68:69:07:19:23:84:3d:76:a6:90:c4:66:d0:56:c8:
d3:f3:ae:39:f7:03:74:3c:e6:ad:e4:67:af:5f:3d:
db:96:35:ac:0e:b0:30:c3:c9:39:d0:75:83:2f:82:
db:34:40:b4:61:d8:7f:b6:53:9f:14:b5:e0:a9:38:
3d:24:e6:f7:68:81:95:51:64:ba:d2:bd:f2:3f:99:
f0:3f:67:2e:69:97:31:c6:36:af:2a:a1:da:86:ca:
7c:27:4d:7a:49:a1:bc:5f:3e:f8:c0:a6:0c:f5:de:
47:5c:31:b2:95:6a:e7:d4:46:3a:b9:9a:37:54:9a:
75:9e:fd:d8:d7:3e:ab:67:67:52:20:bd:e5:79:64:
12:6c:2f:1a:78:4c:6a:37:02:34:87:73:04:8a:20:
e7:b5:cd:89:21:4b:3b:76:1e:30:1a:7b:36:46:3e:
37:5f:c9:71:ab:97:d2:1a:d6:bd:4d:11:23:1a:1f:
bd:6d:bf:5c:9b:43:00:5d:f0:30:0b:87:92:11:08:
59:d4:4f:d5:96:cd:f0:9b:8f:26:bd:6e:7f:e1:e5:
73:9e:e8:b5:db:ea:59:8a:6b:40:e8:1f:c3:cd:b3:
fb:d4:4b:a6:15:3a:10:67:98:70:cd:61:0b:7b:9c:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E2:22:87:07:34:57:53:4E:71:16:50:E7:FB:58:81:5D:0B:7E:18
X509v3 Authority Key Identifier:
keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/B4B581DEDFDB11F0B149F2E3536F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:1cc0:1005::/48
Signature Algorithm: sha256WithRSAEncryption
0d:f7:07:9a:33:4e:ef:27:b6:51:20:34:58:cd:4f:b8:6e:23:
f0:55:06:bf:3a:ce:3d:2c:1c:ed:6a:20:75:cc:88:f5:7a:af:
55:3d:92:82:13:d6:1d:7d:17:aa:d8:5c:e0:58:85:a4:28:4a:
07:89:55:e7:62:5a:cf:09:a4:25:b2:b9:8b:96:87:75:a2:40:
70:19:72:ac:db:ee:ed:1d:7c:45:3d:a2:cd:46:2f:b5:24:fb:
70:8e:72:c0:a8:a5:7b:a3:d7:fb:f3:b4:fa:36:e6:3c:0b:24:
6c:d1:f1:c0:17:73:f4:8a:ae:39:5e:c6:2a:90:b4:a7:d0:cb:
af:db:58:e4:8e:44:71:52:85:9b:3b:d5:74:00:cb:6d:79:00:
61:fa:61:8c:c5:54:44:4d:a3:9d:5b:2f:3c:c3:9c:26:2d:b0:
68:e0:6d:c8:c7:03:45:42:3b:aa:ae:71:3f:ca:b1:dc:7e:24:
6a:4e:da:19:3f:ca:d8:b2:5d:ba:21:2f:3d:21:9a:e4:ec:45:
df:f7:58:7b:2e:6c:b3:b6:d6:c2:9e:13:f3:e0:ac:43:de:d5:
0d:32:c0:53:61:ba:13:79:30:eb:98:be:83:c2:0c:73:fe:be:
74:73:fc:61:83:ab:ee:95:51:a6:66:e4:2b:bc:e8:32:bd:71:
23:2e:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:25:47 2025 by rpki-client