This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/78DCA304E0B211F0865FCE9C4B6F56BC.roa
File: 78DCA304E0B211F0865FCE9C4B6F56BC.roa (raw, json)
Hash identifier: 6AUHnTelCF3W/iVa24MNrbClZ9xiHdNzUBf2Ksi2FnY=
Subject key identifier: A4:E9:6D:6F:BC:E5:84:7E:C3:5E:17:5C:A2:4D:53:A5:4B:52:15:49
Certificate issuer: /CN=A918120B/serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3
Certificate serial: 03
Authority key identifier: D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/78DCA304E0B211F0865FCE9C4B6F56BC.roa
Signing time: Wed 24 Dec 2025 10:22:38 +0000
ROA not before: Wed 24 Dec 2025 10:22:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154457
IP address blocks: 2402:42a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl
rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 07:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918120B, serialNumber=D4809EAAA2510646DD85359DF86E652519470FC3
Validity
Not Before: Dec 24 10:22:38 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=694bbeee-6259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:a1:93:c8:4e:55:48:79:f6:b3:ba:6e:a6:
d0:26:38:6d:ba:45:2b:93:e6:0c:ab:ba:4c:c5:92:
85:e9:ef:f8:90:78:98:31:c5:39:79:be:3d:04:b4:
49:2b:9b:d9:ba:27:2d:89:7e:66:db:b9:c9:cd:c3:
39:93:0d:24:c0:c8:f5:26:3a:18:14:44:fe:8e:37:
9c:ee:f3:cb:52:25:b9:63:0e:37:1d:44:18:f5:5f:
4b:02:d6:85:d9:a2:4f:ed:c3:31:44:5e:8c:70:ac:
de:95:a3:8f:43:40:cc:de:64:19:d7:aa:11:9c:14:
27:b8:7a:3f:d9:ac:c9:f5:69:d3:99:09:aa:99:98:
c5:fd:4e:d6:63:63:52:12:f1:fb:26:d8:94:3d:2b:
8f:2c:09:f4:27:ea:12:43:fc:33:70:16:fb:e1:9f:
f2:e0:94:b6:b9:7e:84:58:b5:c1:56:18:40:85:aa:
52:95:61:e3:e5:c0:48:9a:04:7d:f3:cd:e9:a5:09:
11:c1:7e:43:fc:30:bb:41:bf:7d:9b:46:6b:fd:a4:
e0:ab:1d:b4:29:15:44:7c:f7:79:54:17:ea:9a:0a:
3d:f1:40:9b:64:52:25:3f:0b:28:d7:a1:0c:8f:9c:
c9:46:02:0b:aa:ca:40:51:4b:2c:af:c1:c5:69:0a:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E9:6D:6F:BC:E5:84:7E:C3:5E:17:5C:A2:4D:53:A5:4B:52:15:49
X509v3 Authority Key Identifier:
keyid:D4:80:9E:AA:A2:51:06:46:DD:85:35:9D:F8:6E:65:25:19:47:0F:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/1ICeqqJRBkbdhTWd-G5lJRlHD8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ICeqqJRBkbdhTWd-G5lJRlHD8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918120B/CC996904E0AE11F096D7E288496F56BC/78DCA304E0B211F0865FCE9C4B6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:42a0::/32
Signature Algorithm: sha256WithRSAEncryption
15:4f:62:aa:86:33:83:35:00:7b:82:31:8e:47:44:29:4e:bb:
0e:32:2e:ff:e6:78:e6:80:a1:1c:d4:ae:0a:fc:15:d2:72:06:
91:69:60:f3:f4:e3:c3:c5:d3:ef:04:69:93:17:fc:d7:dd:2c:
c2:d6:de:7e:0a:b9:f8:b3:c2:56:3d:8d:16:c1:c6:28:69:4e:
70:2b:58:0b:89:aa:dc:42:81:aa:99:f5:a8:cf:92:61:6f:29:
89:f9:e6:c0:72:40:0d:3c:4c:fe:f0:0d:6d:71:21:48:89:71:
a2:4d:4f:b3:4b:d0:20:16:3b:46:7f:e1:b4:a9:fb:b0:58:df:
e0:a0:76:e5:a5:75:d3:e9:4f:11:38:fd:3c:20:14:4a:a7:45:
35:f8:ee:5c:a7:4a:c1:53:bf:5f:8d:5b:49:d1:4f:b3:ff:9d:
7b:88:4b:7c:c9:de:66:8c:d0:b5:d2:ec:fa:49:82:e1:ad:f2:
e6:66:fd:bb:4b:60:ad:73:75:83:24:e7:72:91:dd:90:ff:8c:
17:1b:37:f3:34:0e:78:fe:09:16:57:c5:00:00:a1:6d:9c:68:
1e:ac:dd:b1:db:6e:47:06:94:99:11:4e:3b:a2:e9:3b:dc:d0:
62:ab:d3:dc:3f:fd:ae:16:83:fd:ee:69:59:37:88:f1:b5:87:
71:5f:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:30:15 2026 by rpki-client