This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa
File: 866314EE5FCC11EF8416052EC4F9AE02.roa (raw, json)
Hash identifier: BBYwE+qfYV1IPwfa5h2Nvmn0GSmntjmlKO+5A3ybr0o=
Subject key identifier: CA:24:49:BF:3C:38:66:E9:8E:4C:7B:DD:D8:EC:CF:67:A2:E8:50:DC
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 010E
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa
Signing time: Sat 13 Dec 2025 05:04:01 +0000
ROA not before: Sat 13 Dec 2025 05:04:01 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 16509
IP address blocks: 64.251.192.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 04:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: Dec 13 05:04:01 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=693cf3c0-d8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:1d:1c:8a:5e:35:bb:1c:7c:63:fa:89:09:
6c:19:09:21:24:05:73:c3:24:25:6c:4d:c4:f4:59:
89:d6:ab:1b:0d:80:c1:b4:8f:4b:31:89:1c:a9:42:
1b:d7:16:3a:92:ea:f7:a9:7f:f7:a7:e4:ae:42:c6:
0c:da:7d:d8:ca:af:e7:1c:0b:28:48:4c:36:11:c4:
65:f7:06:bc:a4:34:22:32:c0:2b:a4:59:9a:5a:49:
9a:a2:37:59:96:ab:82:dc:5d:78:bb:f4:af:35:b5:
fe:02:39:1d:dc:58:0b:78:83:4b:3c:a6:08:9d:05:
ec:71:08:7e:63:90:79:ff:aa:62:3d:d0:1b:08:84:
59:88:34:fa:9b:34:fb:61:28:0a:74:bd:db:f0:02:
1b:7d:b5:53:05:b4:bf:09:66:c4:7c:12:9b:b2:d1:
72:3a:f8:09:c1:51:ea:40:11:69:26:ad:63:04:36:
5b:db:0d:45:b1:2b:fb:51:40:c7:d5:d6:f2:9a:42:
e6:0c:fc:4f:ab:06:a1:1e:bf:19:ef:40:32:59:a1:
a0:af:30:36:19:9d:01:07:5c:60:b7:7e:10:8a:67:
e3:50:76:73:d9:28:c3:37:4a:2e:6d:8f:d0:1d:b5:
63:b8:8c:cc:6d:71:43:f6:35:9a:e6:b3:c1:8f:7e:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:49:BF:3C:38:66:E9:8E:4C:7B:DD:D8:EC:CF:67:A2:E8:50:DC
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.251.192.0/21
Signature Algorithm: sha256WithRSAEncryption
74:cf:da:bb:11:72:a4:6c:c1:20:64:68:4d:50:6e:d7:25:b3:
34:81:f4:89:36:a3:62:67:0b:12:17:1e:8b:4e:13:7d:59:76:
cc:f4:57:40:24:cc:5d:31:34:ba:ed:fd:f3:68:b8:17:ec:a5:
68:36:41:74:a7:61:5d:cc:c0:13:4c:a4:5e:07:51:7d:b0:53:
b0:a1:73:fa:b9:50:4a:5b:d4:1b:22:91:96:69:3b:a2:e4:ac:
04:2b:23:09:c4:27:06:e9:11:68:18:4b:d7:40:67:b8:20:1d:
42:da:06:47:a0:d8:4e:8f:28:a1:9e:95:45:56:a2:ab:49:39:
be:65:57:3f:aa:2f:ab:f1:50:66:0a:be:de:f7:73:e4:51:52:
2a:8f:12:2e:ee:01:3a:ab:0a:b5:45:a2:73:53:a5:f5:af:14:
04:b2:49:02:fa:1a:a9:93:23:d8:cf:e9:4f:4e:7c:31:4a:6f:
1a:c4:43:dd:cb:0f:04:f7:23:d4:95:bc:be:88:d5:11:cb:f9:
64:9f:ee:49:f6:2c:e1:58:b5:ec:9b:e3:41:20:67:01:5d:6a:
c9:17:24:2a:27:40:4e:87:dd:66:93:f8:e7:b0:31:c6:d3:9b:
89:a5:7f:c4:cd:ea:7f:86:11:62:25:c0:82:c5:6d:43:6f:10:
07:6d:26:89
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgzRDMxMTAvBgNVBAUTKEVCM0M4RjI0QkJBREM5NDEzNDg3MUQ2RTVGRDBCN0M1
OEI0OUQzQzkwHhcNMjUxMjEzMDUwNDAxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTNjZjNjMC1kOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUIdHIpeNbscfGP6iQlsGQkhJAVzwyQlbE3E9FmJ1qsbDYDBtI9LMYkcqUIb
1xY6kur3qX/3p+SuQsYM2n3Yyq/nHAsoSEw2EcRl9wa8pDQiMsArpFmaWkmaojdZ
lquC3F14u/SvNbX+Ajkd3FgLeINLPKYInQXscQh+Y5B5/6piPdAbCIRZiDT6mzT7
YSgKdL3b8AIbfbVTBbS/CWbEfBKbstFyOvgJwVHqQBFpJq1jBDZb2w1FsSv7UUDH
1dbymkLmDPxPqwahHr8Z70AyWaGgrzA2GZ0BB1xgt34QimfjUHZz2SjDN0oubY/Q
HbVjuIzMbXFD9jWa5rPBj34KGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMokSb88
OGbpjkx73djsz2ei6FDcMB8GA1UdIwQYMBaAFOs8jyS7rclBNIcdbl/Qt8WLSdPJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy84RDAzRUYzNjVF
MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi82enlQSkx1dHlVRTBoeDF1WDlDM3hZdEow
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZ6eVBKTHV0eVVFMGh4MXVYOUMzeFl0SjA4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODgzRDMvOEQwM0VGMzY1RTM2MTFFRkFDOTJEMzE0QzRGOUFFMDIvODY2MzE0RUU1
RkNDMTFFRjg0MTYwNTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBANA+8AwDQYJKoZIhvcNAQELBQADggEBAHTP2rsRcqRswSBk
aE1QbtclszSB9Ik2o2JnCxIXHotOE31Zdsz0V0AkzF0xNLrt/fNouBfspWg2QXSn
YV3MwBNMpF4HUX2wU7Chc/q5UEpb1BsikZZpO6LkrAQrIwnEJwbpEWgYS9dAZ7gg
HULaBkeg2E6PKKGelUVWoqtJOb5lVz+qL6vxUGYKvt73c+RRUiqPEi7uATqrCrVF
onNTpfWvFASySQL6GqmTI9jP6U9OfDFKbxrEQ93LDwT3I9SVvL6I1RHL+WSf7kn2
LOFYteyb40EgZwFdaskXJConQE6H3WaT+OewMcbTm4mlf8TN6n+GEWIlwILFbUNv
EAdtJok=
-----END CERTIFICATE-----
Generated at Tue Dec 16 19:51:10 2025 by rpki-client