This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/F78ED0BAEBC911F0BD3A2F28686F56BC.roa
File: F78ED0BAEBC911F0BD3A2F28686F56BC.roa (raw, json)
Hash identifier: T16pI9nQ5IEGjfViZejEMMbrzXbg1Lkkwe6XJbJEgSQ=
Subject key identifier: 6B:49:A6:55:A4:94:D4:BD:FB:F0:79:EF:18:A7:C1:1D:0A:C9:85:05
Certificate issuer: /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial: 02
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/F78ED0BAEBC911F0BD3A2F28686F56BC.roa
Signing time: Wed 07 Jan 2026 13:08:32 +0000
ROA not before: Wed 07 Jan 2026 13:08:32 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142175
IP address blocks: 2402:4620::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 07:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Validity
Not Before: Jan 7 13:08:32 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=695e5ad0-6dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4c:e6:9f:ee:e4:bd:1d:70:50:97:90:7c:20:
15:8b:d1:96:c4:e8:d9:87:fe:27:7d:24:ec:87:b6:
48:9f:3d:09:5d:c6:1b:34:fe:4c:27:92:8d:f5:55:
48:83:ff:91:24:5b:de:d1:4f:fb:d2:fe:c0:04:d0:
e5:67:93:9e:9d:49:bb:9b:75:17:5d:0f:fb:93:4e:
d9:85:1b:56:23:df:c8:f7:8f:4d:18:2f:dc:13:b4:
3d:06:3a:7f:ed:a6:1b:02:3c:88:f9:6d:c2:d4:f2:
c7:11:03:d1:54:18:69:b3:7b:d8:82:67:78:33:81:
82:85:ea:60:20:07:39:50:c2:08:b5:9b:fe:37:1b:
ad:3a:4d:67:88:da:ec:91:05:d3:29:9a:37:02:86:
d2:56:7b:b0:a7:57:13:6f:25:45:e6:f9:66:5e:d5:
42:55:23:2f:53:63:04:ad:d6:46:fe:00:0b:ed:7d:
13:87:8d:bb:9e:23:d3:81:c0:12:42:be:1a:85:82:
5d:33:d6:5e:e1:a9:7a:18:84:d9:06:e4:ab:aa:fb:
d4:df:a8:93:b4:6f:5a:71:50:76:44:40:4c:a0:bc:
7f:f6:42:98:9c:30:a1:0b:f7:e1:11:8b:b1:88:b2:
c5:cc:06:d0:1a:3c:ae:f8:b8:63:7f:bc:9d:b6:02:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:49:A6:55:A4:94:D4:BD:FB:F0:79:EF:18:A7:C1:1D:0A:C9:85:05
X509v3 Authority Key Identifier:
keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/F78ED0BAEBC911F0BD3A2F28686F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:4620::/32
Signature Algorithm: sha256WithRSAEncryption
3f:23:e8:c6:79:65:8e:5d:73:5a:40:e1:94:8a:0c:99:b2:29:
0f:aa:01:44:20:59:c9:17:d3:c0:4e:db:7d:cc:1f:da:76:a2:
0e:1e:db:26:d1:56:74:a3:47:3e:02:05:f0:73:e4:54:5a:2c:
2d:4e:6a:b7:e3:db:72:70:a8:9b:77:8f:ce:17:8a:84:79:ad:
16:71:29:c4:2c:0d:3d:c4:33:e0:2f:b5:81:1e:61:21:d9:59:
63:04:db:09:66:fe:e7:c0:a6:12:3c:bd:ab:db:81:e2:94:6a:
00:f5:cb:6d:6a:c1:24:35:96:82:e0:cb:ae:dc:e5:1b:a0:57:
51:de:e9:09:c3:af:2e:69:8e:be:6d:11:cf:32:4f:10:32:a6:
69:68:ee:e6:17:b9:c6:33:9f:4d:db:e6:e9:d1:63:cf:c6:03:
03:de:4a:38:a8:94:aa:14:d8:b8:55:1d:fd:f4:4b:41:65:38:
fc:26:46:b7:dc:e4:c1:ee:e8:62:d9:dd:5b:f0:45:ce:b3:58:
3a:91:e1:03:1d:89:63:60:93:d1:6e:7c:0d:b8:d6:bc:c7:94:
26:d7:ab:72:45:31:e1:a3:61:41:64:4a:24:24:bb:da:66:7b:
50:5d:b6:03:de:32:5a:9b:b7:d1:50:82:a4:3f:d4:3c:6e:3f:
0e:87:f0:c8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4
QjkwOTExMC8GA1UEBRMoNkU5NkVBRkM4RkNFQTFBN0ZGMzFFQ0RFMEE1MDY2RDdC
MUMzQzQ3QTAeFw0yNjAxMDcxMzA4MzJaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NWU1YWQwLTZkZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDqTOaf7uS9HXBQl5B8IBWL0ZbE6NmH/id9JOyHtkifPQldxhs0/kwnko31VUiD
/5EkW97RT/vS/sAE0OVnk56dSbubdRddD/uTTtmFG1Yj38j3j00YL9wTtD0GOn/t
phsCPIj5bcLU8scRA9FUGGmze9iCZ3gzgYKF6mAgBzlQwgi1m/43G606TWeI2uyR
BdMpmjcChtJWe7CnVxNvJUXm+WZe1UJVIy9TYwSt1kb+AAvtfROHjbueI9OBwBJC
vhqFgl0z1l7hqXoYhNkG5Kuq+9TfqJO0b1pxUHZEQEygvH/2QpicMKEL9+ERi7GI
ssXMBtAaPK74uGN/vJ22AnSHAgMBAAGjggKWMIICkjAdBgNVHQ4EFgQUa0mmVaSU
1L378HnvGKfBHQrJhQUwHwYDVR0jBBgwFoAUbpbq/I/Ooaf/MezeClBm17HDxHow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCOTA5LzY0Q0E3QjA4RUJD
OTExRjA5MzZFREI4MzY3NkY1NkJDL2JwYnFfSV9Pb2FmX01lemVDbEJtMTdIRHhI
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYnBicV9JX09vYWZfTWV6ZUNsQm0xN0hEeEhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjkwOS82NENBN0IwOEVCQzkxMUYwOTM2RURCODM2NzZGNTZCQy9GNzhFRDBCQUVC
QzkxMUYwQkQzQTJGMjg2ODZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACQCRiAwDQYJKoZIhvcNAQELBQADggEBAD8j6MZ5ZY5dc1pA
4ZSKDJmyKQ+qAUQgWckX08BO233MH9p2og4e2ybRVnSjRz4CBfBz5FRaLC1Oarfj
23JwqJt3j84XioR5rRZxKcQsDT3EM+AvtYEeYSHZWWME2wlm/ufAphI8vavbgeKU
agD1y21qwSQ1loLgy67c5RugV1He6QnDry5pjr5tEc8yTxAypmlo7uYXucYzn03b
5unRY8/GAwPeSjiolKoU2LhVHf30S0FlOPwmRrfc5MHu6GLZ3VvwRc6zWDqR4QMd
iWNgk9FufA241rzHlCbXq3JFMeGjYUFkSiQku9pme1BdtgPeMlqbt9FQgqQ/1Dxu
Pw6H8Mg=
-----END CERTIFICATE-----
Generated at Sun Jan 18 06:28:51 2026 by rpki-client