This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966B7A9AEBDD11F091B91E146D6F56BC.roa
File: 966B7A9AEBDD11F091B91E146D6F56BC.roa (raw, json)
Hash identifier: PRPhDz5cTTcWXRpoVmox2R5EAPe8SQiGNVVuIWxVmZo=
Subject key identifier: 87:56:8F:40:56:02:89:27:56:86:C0:44:DA:0F:0F:9E:F6:FD:E8:D3
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0FFB
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966B7A9AEBDD11F091B91E146D6F56BC.roa
Signing time: Wed 07 Jan 2026 15:28:59 +0000
ROA not before: Wed 07 Jan 2026 15:28:59 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 2406:840:e350::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 18:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4091 (0xffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: Jan 7 15:28:59 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=695e7bbb-6399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:30:bb:3b:e6:08:19:a2:04:e9:00:e1:cc:
f7:88:0f:46:ac:1c:4b:ea:47:5c:77:36:38:13:c1:
83:00:d5:7a:b7:05:a1:e6:d9:2b:7a:ed:a8:92:f3:
74:86:27:fa:6e:8c:f7:59:7e:05:1c:81:4b:f2:7e:
5d:73:da:c8:49:b7:c0:ba:1b:a7:1a:9d:02:60:4f:
73:8c:52:f4:0f:b7:d9:78:ef:64:6f:94:90:d0:02:
d2:d2:94:31:e6:6e:ff:9a:aa:5e:fd:6c:b2:e0:a7:
68:dc:73:be:1d:65:68:eb:1c:ac:58:cf:17:cf:69:
ba:af:47:29:e3:be:a7:21:0a:c4:95:fe:d0:c2:57:
29:f5:c1:c3:5b:ee:31:97:a9:2e:a9:d1:61:c2:60:
be:6c:96:0f:96:28:b4:a2:67:77:3c:c7:4c:08:64:
23:b2:35:26:7d:75:eb:08:01:6e:d5:77:47:e4:46:
47:a9:89:68:74:38:2c:ba:a0:49:be:1c:1b:0c:2d:
03:ae:34:dc:e5:5b:61:fa:79:b0:fb:75:f8:3e:3e:
3d:cc:ba:b4:c3:7d:7d:ea:71:f3:7c:cc:c0:80:1d:
8b:ba:9e:69:1e:04:aa:e6:52:a7:04:df:8f:b0:ff:
61:d0:1b:8b:7e:1c:ca:10:19:7a:75:4b:a9:b3:19:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:8F:40:56:02:89:27:56:86:C0:44:DA:0F:0F:9E:F6:FD:E8:D3
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/966B7A9AEBDD11F091B91E146D6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:e350::/44
Signature Algorithm: sha256WithRSAEncryption
2f:69:e9:cb:2c:8d:48:ac:53:d3:16:9d:62:7e:50:2c:39:2f:
c5:ca:db:56:47:5c:25:bb:af:04:86:d8:c9:4e:68:d8:5a:84:
84:31:10:05:62:30:f2:26:bf:6e:0a:86:82:c6:c3:73:23:0d:
82:cb:78:8f:7c:a4:ca:ca:45:b5:bf:dc:04:ca:75:76:e8:c0:
24:31:66:d5:40:e1:df:8c:36:36:ae:4f:11:88:fa:2c:b8:eb:
97:65:12:0c:5e:a7:68:41:62:ca:55:6b:05:f0:01:b5:b8:89:
89:60:32:17:01:fa:d6:18:05:54:90:5a:38:ef:d9:f8:4c:81:
da:81:08:a3:f6:b8:01:7f:40:47:78:03:0c:ac:cf:e9:cc:07:
e2:9f:e1:7a:be:20:b0:54:33:a3:80:8b:5f:a8:42:ec:63:af:
1b:a9:c1:8d:64:d0:30:e3:b4:70:1b:5d:39:1d:ea:1f:5e:f5:
a4:71:0f:53:8d:3b:54:94:13:d3:67:ea:9e:7d:f4:fe:49:8a:
00:cf:85:85:96:6d:c1:ea:9a:8b:34:40:46:74:ee:db:7e:15:
c2:81:15:c4:3d:48:8d:c9:c3:15:92:67:f6:60:d4:b3:ba:a7:
55:d7:ba:d9:b1:4d:ae:b0:eb:9a:ef:6a:8a:da:74:6e:1e:48:
42:91:ab:aa
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICD/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwMTA3MTUyODU5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTVlN2JiYi02Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2rwwuzvmCBmiBOkA4cz3iA9GrBxL6kdcdzY4E8GDANV6twWh5tkreu2okvN0
hif6boz3WX4FHIFL8n5dc9rISbfAuhunGp0CYE9zjFL0D7fZeO9kb5SQ0ALS0pQx
5m7/mqpe/Wyy4Kdo3HO+HWVo6xysWM8Xz2m6r0cp476nIQrElf7Qwlcp9cHDW+4x
l6kuqdFhwmC+bJYPlii0omd3PMdMCGQjsjUmfXXrCAFu1XdH5EZHqYlodDgsuqBJ
vhwbDC0DrjTc5Vth+nmw+3X4Pj49zLq0w3196nHzfMzAgB2Lup5pHgSq5lKnBN+P
sP9h0BuLfhzKEBl6dUupsxmRCQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFIdWj0BW
AoknVobARNoPD572/ejTMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTY2QjdBOUFF
QkREMTFGMDkxQjkxRTE0NkQ2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBghA41AwDQYJKoZIhvcNAQELBQADggEBAC9p6cssjUis
U9MWnWJ+UCw5L8XK21ZHXCW7rwSG2MlOaNhahIQxEAViMPImv24KhoLGw3MjDYLL
eI98pMrKRbW/3ATKdXbowCQxZtVA4d+MNjauTxGI+iy465dlEgxep2hBYspVawXw
AbW4iYlgMhcB+tYYBVSQWjjv2fhMgdqBCKP2uAF/QEd4Awysz+nMB+Kf4Xq+ILBU
M6OAi1+oQuxjrxupwY1k0DDjtHAbXTkd6h9e9aRxD1ONO1SUE9Nn6p599P5JigDP
hYWWbcHqmos0QEZ07tt+FcKBFcQ9SI3JwxWSZ/Zg1LO6p1XXutmxTa6w65rvaora
dG4eSEKRq6o=
-----END CERTIFICATE-----
Generated at Tue Jan 20 21:48:34 2026 by rpki-client