This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
File: 2C60C8AAE01111EEA6583A7DC4F9AE02.roa (raw, json)
Hash identifier: t7bK+jh8+yWsxGFX/RcDQ51tlPRXwm4j+4G97ZqO5UY=
Subject key identifier: 59:03:18:74:04:D3:47:14:68:8A:41:C9:8A:8A:6F:42:54:38:31:BC
Certificate issuer: /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
Certificate serial: 082C
Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
Signing time: Wed 28 Jan 2026 21:17:36 +0000
ROA not before: Wed 28 Jan 2026 21:17:35 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 23926
IP address blocks: 2406:8600:f040::/48 maxlen: 48
2406:8600:f840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl
rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Feb 2026 20:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918127C, serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
Validity
Not Before: Jan 28 21:17:35 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697a7cef-5778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:06:09:cb:72:6f:88:8c:a2:61:97:6b:c2:
3e:60:35:b4:d7:d6:64:31:32:c5:fb:4f:29:cb:d0:
f1:97:33:83:7c:6e:02:a2:3d:a4:2c:4a:9b:a8:e7:
5d:c0:4c:bc:17:ea:55:4d:8b:d6:b9:30:30:12:22:
a5:ae:7d:2f:d6:a5:44:9d:49:a5:d3:2d:8a:c9:04:
a2:b6:85:96:39:4e:89:59:a6:5c:1d:07:6a:65:b9:
b9:4e:90:b0:11:26:a6:10:5a:3a:92:bc:49:f1:0e:
41:2e:f4:04:44:0c:65:06:c4:c4:36:4c:e4:f5:b0:
f1:49:ad:02:80:6f:b3:0c:dd:0b:30:0f:0b:a7:37:
1e:13:cc:6d:91:7f:36:5a:5c:e8:91:65:5f:bd:78:
ce:40:02:8e:bc:7e:ed:91:1c:bc:50:59:d4:d2:5b:
3a:9a:92:b3:5e:7c:48:e6:17:ca:66:80:e0:e0:05:
88:f6:44:7b:47:7e:b5:d8:57:81:e7:f3:0b:bf:66:
44:89:ab:4a:08:73:8f:b8:f2:e3:0f:5d:2e:b3:b6:
03:77:f4:cc:60:9f:f8:52:44:b4:4e:1b:84:a2:f8:
19:43:fa:db:65:0c:27:c1:f6:5a:10:1c:18:ba:a2:
59:04:08:7a:0e:59:fe:31:dd:30:b6:59:d2:9b:34:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:03:18:74:04:D3:47:14:68:8A:41:C9:8A:8A:6F:42:54:38:31:BC
X509v3 Authority Key Identifier:
keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:8600:f040::/48
2406:8600:f840::/48
Signature Algorithm: sha256WithRSAEncryption
6d:62:07:56:3c:4a:36:01:bf:c8:57:c1:93:31:74:e2:d0:11:
5f:4a:cf:fc:eb:83:41:21:16:7a:7f:dc:df:ab:8f:c6:3e:ca:
54:cb:4b:b1:f0:b6:7e:15:5a:84:f5:6d:df:61:39:69:a1:1e:
b6:2b:a4:75:f3:74:88:89:6d:7c:0a:1b:03:07:35:b2:56:26:
46:90:d0:2a:ef:a7:46:cb:cf:34:c9:4e:d9:d2:4b:de:83:79:
88:50:e2:b3:ad:2c:fe:fd:ac:ca:2a:a4:d6:e9:1a:a3:1b:9d:
b0:12:6a:9a:7e:be:6a:48:9f:02:07:d8:a7:50:a6:5a:14:d1:
41:f5:be:8e:fe:74:db:4b:14:76:65:3c:b3:05:b6:f7:a5:6c:
c2:59:57:7b:da:16:82:c5:44:47:60:5c:7c:4c:58:a4:dc:19:
28:11:87:9a:5e:d5:2a:df:67:3d:a9:d8:aa:f0:d5:f4:55:14:
c2:06:6c:32:0c:5b:e7:ab:e8:c2:3e:c2:4d:1a:a0:58:74:06:
c9:b8:16:aa:0d:33:cf:a5:ad:67:40:a7:e2:a9:f9:77:96:29:
e7:f8:f8:f3:4a:6a:22:34:45:19:fe:44:19:07:c8:8d:a4:54:
b4:54:b5:9a:47:26:25:92:b2:5a:10:ed:7f:b2:a9:33:46:6d:
9d:c3:e6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 11:33:30 2026 by rpki-client