This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/78C65D926B0B11EFBFE25881C4F9AE02.roa
File: 78C65D926B0B11EFBFE25881C4F9AE02.roa (raw, json)
Hash identifier: sAIqbSA37kZfhhIbSPeW/xlNAowJO0Dbs/ojqnCmLqE=
Subject key identifier: AD:DE:19:80:8E:9D:7D:68:A7:BE:D9:3B:6C:01:EB:6B:52:68:2C:D2
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 010F
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/78C65D926B0B11EFBFE25881C4F9AE02.roa
Signing time: Sat 13 Dec 2025 05:04:02 +0000
ROA not before: Sat 13 Dec 2025 05:04:02 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 23467
IP address blocks: 64.251.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 04:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: Dec 13 05:04:02 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=693cf3c2-ab2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:b9:cf:28:02:01:16:1f:0d:a3:87:5a:40:
2f:7d:cc:8d:a2:6a:61:a7:05:32:f4:9b:91:83:42:
c8:95:46:46:5f:9a:6a:4e:37:b1:03:5f:0d:21:1f:
8e:a8:ab:bd:a3:5a:f8:7b:93:d4:0e:4f:39:7a:c7:
91:0e:c5:e3:f0:81:3c:98:53:65:4a:93:8b:51:58:
11:1f:3b:22:f3:5c:92:bf:10:6a:a0:b5:d6:1b:6c:
57:9e:c0:17:ab:8f:2e:1b:08:b7:bb:9b:fa:d4:91:
85:70:5f:d2:38:82:00:b3:9e:69:a5:c4:c5:69:ad:
5f:df:54:6c:c1:70:56:93:55:69:ee:67:82:9c:a6:
9e:66:54:6c:9a:51:a3:1a:38:66:63:99:c1:25:3c:
7b:08:cc:2d:13:74:15:28:bd:ff:43:f7:3a:79:c5:
80:5d:00:d5:ca:98:9b:7c:fe:d6:68:5c:5d:28:2f:
34:66:fc:12:8c:8c:06:9f:37:1c:3c:c6:f9:56:9e:
9b:8a:00:c0:83:56:1f:2f:77:25:7f:28:b9:74:9d:
23:75:ad:db:86:69:a6:3b:f5:54:e3:3d:9e:3e:cc:
66:b4:47:1e:ea:f8:00:b5:af:34:b4:df:9d:b6:ae:
ab:4c:b6:2e:76:9a:0e:a2:7f:ff:d8:5b:fa:71:8e:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DE:19:80:8E:9D:7D:68:A7:BE:D9:3B:6C:01:EB:6B:52:68:2C:D2
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/78C65D926B0B11EFBFE25881C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.251.192.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:96:ca:af:8d:d8:7b:ba:b6:90:c1:17:c0:61:a8:8a:a3:3f:
24:8d:5f:26:5f:15:77:58:a3:6e:49:82:b6:b8:aa:57:40:ad:
af:5a:40:83:77:b2:49:33:e7:b0:55:68:19:d4:f8:86:5b:c7:
c9:4e:cb:75:e6:4d:fa:4c:69:9a:79:39:7b:d7:b1:ff:6e:2c:
f0:b1:a9:7b:50:e0:80:ef:10:d5:83:49:15:85:1f:08:8c:65:
55:33:b7:7b:58:f0:5e:2c:67:f4:71:ff:32:df:d9:a6:d4:c4:
b7:d2:4a:f0:7c:79:eb:c3:aa:eb:5f:8d:c8:a1:6f:c9:7d:79:
4e:61:e1:b9:6b:7b:96:e0:e7:1f:3d:96:e2:44:a6:f9:50:0a:
da:49:00:c2:80:84:51:68:0d:5b:55:5d:53:b9:82:d1:ef:33:
6d:df:cb:80:3c:ea:23:0b:40:60:be:57:a0:ae:71:81:d5:44:
9f:d1:fb:d6:ff:fa:e9:c9:3a:6a:a2:af:f3:d3:b3:a2:37:8f:
ba:a8:b6:43:3b:44:64:b8:29:13:1e:61:47:95:9c:6f:43:cf:
47:41:66:10:5b:42:f6:06:8c:b4:77:55:08:f9:bd:62:5c:53:
79:15:25:53:12:54:57:1d:52:81:b4:28:05:d3:2a:0c:60:b1:
6f:97:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 03:34:19 2025 by rpki-client