This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/F084D9AADF1B11F0BDFBE1B1616F56BC.roa
File: F084D9AADF1B11F0BDFBE1B1616F56BC.roa (raw, json)
Hash identifier: yfzcOl58QHWsxj/XdVdFOBJQ6VIhvnY3q000dZ/BJ44=
Subject key identifier: 72:6A:94:04:68:90:11:98:DE:83:96:BF:7C:30:C8:50:9B:7F:45:C5
Certificate issuer: /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Certificate serial: 16
Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/F084D9AADF1B11F0BDFBE1B1616F56BC.roa
Signing time: Mon 22 Dec 2025 09:52:34 +0000
ROA not before: Mon 22 Dec 2025 09:52:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152698
IP address blocks: 2001:df6:5941::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Validity
Not Before: Dec 22 09:52:34 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=694914e2-6cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:32:96:a2:33:36:dd:f7:76:4a:ba:6e:89:
d9:fa:c6:ec:15:93:fa:c7:44:01:fe:e4:15:ae:1e:
81:19:7f:90:63:47:9e:16:62:0b:9b:d7:0b:26:d4:
3c:d1:e3:5d:5f:79:78:28:94:c4:9c:81:fa:83:1c:
e1:d5:ea:e4:db:66:6a:0d:1a:df:cc:99:52:45:b2:
c4:88:99:2a:90:c9:33:08:70:80:11:ae:c6:d9:3d:
1a:1d:1f:c5:d2:5e:da:81:e8:cd:70:d5:13:9a:0b:
92:55:35:ed:f3:2e:a4:53:9b:eb:21:ef:15:67:5b:
32:3f:a9:96:59:5f:0b:88:68:94:00:34:d6:1d:21:
ad:fc:cb:ba:5e:cf:ca:e1:ca:16:c0:8b:83:47:00:
ed:3a:99:3d:fc:27:b2:98:27:28:23:38:21:57:08:
65:ec:e9:4f:05:cf:95:bf:ab:43:1f:33:1f:d8:33:
2d:7c:94:2b:7b:8b:d2:6d:18:04:96:3f:dc:28:ff:
2c:ae:57:ba:ed:c6:b0:59:f4:ef:08:96:46:66:37:
7f:d0:c1:2f:6c:03:ca:cb:6f:be:30:f9:46:2f:4e:
e2:d8:d6:24:5c:94:b2:4f:d7:aa:07:4d:39:48:69:
77:ad:e4:4f:79:05:a3:fa:ef:b5:ad:d2:8b:d9:79:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6A:94:04:68:90:11:98:DE:83:96:BF:7C:30:C8:50:9B:7F:45:C5
X509v3 Authority Key Identifier:
keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/F084D9AADF1B11F0BDFBE1B1616F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:5941::/48
Signature Algorithm: sha256WithRSAEncryption
8b:1f:99:6c:0f:dc:07:08:fd:48:cf:58:77:4d:77:4c:8c:f4:
3d:64:90:55:af:8a:a1:f6:d9:ea:b7:01:1b:34:bf:e3:b2:9e:
09:b6:84:cf:f0:ee:1b:36:c2:0f:5c:5c:91:5e:17:4a:f1:a9:
16:fe:27:cd:ea:a0:26:25:95:8a:c9:6f:7c:e5:9f:35:24:a5:
3d:3f:d3:a1:25:5e:f8:cb:8e:da:52:63:d3:8e:58:34:55:6d:
e4:04:6f:25:48:01:87:99:51:87:32:78:87:b3:84:dd:7f:dd:
54:4c:de:f0:82:b8:a7:e3:18:4f:81:73:f3:5c:98:d8:34:39:
8e:8a:75:95:88:e0:42:05:23:0f:84:65:59:75:73:89:31:80:
bb:8b:06:ad:00:53:8e:36:b2:5a:ee:28:5b:82:4f:ba:f7:77:
8b:aa:ac:4a:cf:55:58:52:97:2d:91:75:84:70:d2:2e:7b:b4:
93:be:ae:98:ca:50:c2:31:ad:c6:49:46:98:da:3a:e5:bf:19:
df:6f:42:ff:93:01:7f:fe:30:d2:30:e9:a2:28:ff:de:57:eb:
96:d4:1c:68:dc:f9:5c:a4:d4:56:35:d1:98:eb:2b:db:97:8d:
05:02:6c:f1:54:58:bf:47:9f:a1:33:1d:be:47:3d:64:ae:82:
94:1d:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:22:35 2025 by rpki-client