This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/38ABC92EF39311F0A7BABAF0736F56BC.roa
File: 38ABC92EF39311F0A7BABAF0736F56BC.roa (raw, json)
Hash identifier: 50nxxoPQ0JaXDsAioMMtemlOMe/2zsSLWq4NdpkuXZk=
Subject key identifier: 36:71:3B:10:27:07:7B:AA:4B:17:F3:B1:DA:BA:55:6A:2D:44:F4:23
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: CDF2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/38ABC92EF39311F0A7BABAF0736F56BC.roa
Signing time: Sat 17 Jan 2026 10:56:48 +0000
ROA not before: Sat 17 Jan 2026 10:56:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142204
IP address blocks: 2001:df6:92c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 11:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52722 (0xcdf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 17 10:56:48 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696b6af0-683c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:36:66:47:4b:78:a7:13:41:fc:c2:42:14:
11:01:60:c8:40:f5:28:b5:5e:a9:9c:20:5e:d5:4e:
21:cb:8f:44:9b:4b:ae:85:9a:40:3f:6f:ad:a0:03:
ca:0b:a1:1e:c5:47:fe:e3:c7:76:44:84:11:ca:42:
2f:cb:81:51:3c:75:7d:89:95:a2:c2:1d:49:92:49:
29:42:70:b7:e8:c0:ee:a7:0c:cc:f5:85:12:fd:52:
2c:54:44:0a:cb:c4:ea:3a:dd:bc:3c:71:38:9d:d1:
67:a4:61:bc:a8:93:3e:2c:b8:5e:00:11:a6:ad:b9:
66:9c:39:f1:72:07:3b:76:53:73:dc:3b:58:67:ba:
15:41:ce:81:c7:3f:d8:aa:50:f8:ce:34:a5:e2:e9:
13:aa:00:83:55:06:f0:e4:f1:80:9e:a2:5f:37:df:
26:a4:18:46:74:f3:53:24:f1:95:af:97:5a:95:7c:
3c:67:5f:6c:6e:21:65:5b:55:58:92:ee:b0:15:53:
39:fe:e1:09:f4:d4:3a:74:3a:be:94:e1:51:d1:a9:
e5:c6:d2:93:fd:96:a2:28:d4:74:f7:73:73:79:5d:
49:7c:57:06:80:ac:7b:80:9a:cb:25:2e:c2:0b:b5:
2f:0d:79:19:c2:fd:9b:2a:9d:8b:76:7b:de:e3:6f:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:71:3B:10:27:07:7B:AA:4B:17:F3:B1:DA:BA:55:6A:2D:44:F4:23
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/38ABC92EF39311F0A7BABAF0736F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:92c0::/48
Signature Algorithm: sha256WithRSAEncryption
3e:d2:a1:c9:14:ce:19:3d:c8:cb:81:da:13:39:af:de:ce:e4:
21:cf:99:4b:8b:94:1f:bb:1b:43:a5:e1:0d:53:fd:38:70:d8:
c1:01:b5:e1:b0:dc:68:bf:97:4d:7e:ef:19:55:1a:50:53:c1:
74:19:c6:21:e9:45:0a:d0:6e:77:6d:5c:71:3f:bd:f7:4a:5e:
8b:8a:8e:5e:c2:6c:85:cc:47:64:1b:49:62:63:67:75:a8:40:
a1:f1:c0:24:c1:16:6b:7c:32:fc:1b:37:a1:2d:dc:db:61:aa:
29:ef:d6:30:c5:01:08:ca:a3:53:ef:94:8f:a5:79:34:ab:83:
5c:23:8d:ca:73:ca:b0:20:68:a2:ba:0c:10:73:9e:ab:74:44:
6e:85:9b:9d:82:a7:a4:0a:ef:95:cd:b1:10:1d:b5:71:ab:6f:
d1:c2:ef:42:37:d0:33:c3:75:a9:1a:32:30:04:18:40:fa:62:
7a:ce:ad:da:88:e1:d4:5a:53:e0:0b:bf:8f:fc:0f:93:ba:b2:
5d:36:77:d5:bb:9b:9d:63:ef:eb:47:8e:1d:42:49:9c:02:98:
9b:a2:17:7e:74:74:ca:c6:9d:eb:80:92:9f:0c:41:ef:ea:a9:
31:5f:96:b3:6d:76:91:4f:83:49:b8:54:fc:5b:3a:48:0a:73:
91:6b:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:41:47 2026 by rpki-client