This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9530495612BE11F08CCA4623C4F9AE02.roa
File: 9530495612BE11F08CCA4623C4F9AE02.roa (raw, json)
Hash identifier: CpLagtsPkvYQEsQJw4QHzdwPMYX8+a2V6yA9k83dNNM=
Subject key identifier: 06:75:33:D0:A6:8B:54:DB:3D:E3:CA:AB:3F:AC:FE:04:FC:55:EC:F3
Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial: 0166
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9530495612BE11F08CCA4623C4F9AE02.roa
Signing time: Thu 04 Dec 2025 09:29:34 +0000
ROA not before: Thu 04 Dec 2025 09:29:34 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152586
IP address blocks: 2401:8360:2::/48 maxlen: 48
2401:8360:6::/48 maxlen: 48
2401:8360:b::/48 maxlen: 48
2401:8360:c::/48 maxlen: 48
2401:8360:d::/48 maxlen: 48
2401:8360:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Validity
Not Before: Dec 4 09:29:34 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6931547e-34eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:29:8b:84:c9:85:3c:a3:fb:ac:5b:26:74:
41:ff:37:8c:3f:48:18:69:34:4d:d3:e6:dd:e8:9f:
b7:1c:b6:3b:34:3f:76:79:cf:a8:38:61:df:ac:ae:
13:83:f2:b5:1c:39:ee:56:f8:bc:20:b5:25:63:b8:
89:6b:68:34:16:88:08:b1:59:7c:ab:1c:fd:ca:66:
c0:7c:da:3e:1c:5d:c0:bf:56:da:9e:d3:2e:64:b8:
6d:0b:e6:48:2c:f6:e3:16:95:81:66:c7:84:b5:64:
f9:99:c8:4e:c0:39:4f:6f:94:4b:d7:89:14:0f:d1:
30:1d:cf:53:b3:63:76:08:d5:74:4c:0d:82:36:02:
48:c5:e0:43:27:07:fa:c6:7e:7d:52:1a:83:01:a1:
0a:47:89:98:d1:c6:74:0d:eb:41:c9:8a:4a:f5:7f:
b0:a7:d3:0e:9d:1f:ef:4a:cb:f7:ab:e2:68:9b:ea:
05:23:c8:b0:27:8d:84:ac:85:6b:fd:58:dd:8b:87:
4d:21:c3:15:4e:8a:00:0f:a2:0a:aa:40:2d:83:81:
43:ca:e5:20:3e:d4:51:79:50:ca:d8:03:b3:99:53:
ea:00:e1:a0:db:4e:58:e4:6a:78:35:3f:91:19:16:
c2:72:09:c4:5e:4e:73:53:f4:03:d9:bf:82:c8:e9:
a7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:75:33:D0:A6:8B:54:DB:3D:E3:CA:AB:3F:AC:FE:04:FC:55:EC:F3
X509v3 Authority Key Identifier:
keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9530495612BE11F08CCA4623C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:8360:2::/48
2401:8360:6::/48
2401:8360:b::-2401:8360:e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a3:da:d7:09:a2:96:d1:27:75:b3:49:7e:f0:d2:4e:41:1b:d4:
0f:99:29:66:fa:4a:6c:89:f2:6c:55:71:92:c8:9c:3b:03:68:
cd:05:df:8d:13:ce:99:56:c4:ef:88:61:21:b4:3d:27:42:eb:
eb:ab:24:ea:78:51:7c:bf:12:2b:31:be:ee:3c:2c:56:6b:1f:
92:16:2b:ba:14:73:96:6d:6d:0f:68:a1:11:48:10:68:27:53:
4b:92:23:13:3c:1c:7c:de:e5:1f:b3:6e:7c:b4:ac:35:75:b7:
be:d4:3f:ae:c5:8c:81:52:0f:61:1c:38:5f:85:a0:5a:d8:ca:
6e:02:dd:ad:c6:04:f5:4e:cf:75:dd:b2:0e:a3:2c:f8:e6:df:
5c:97:0a:6d:37:83:6b:d3:db:4f:4c:aa:8c:34:66:a5:d7:74:
c2:b4:4f:53:9a:9a:dc:56:a0:3a:64:01:8d:74:f0:1a:e3:b9:
f2:3c:6e:65:56:44:8a:fa:0c:8a:d9:e8:0a:82:70:74:49:30:
11:d1:c1:df:ad:71:05:71:ee:8b:c3:67:0f:4a:f1:0b:6b:c6:
79:01:90:b2:fb:ad:37:24:ee:fc:7c:5f:bf:f8:fd:2d:90:69:
a0:fb:92:33:26:d9:8d:41:31:53:27:c1:38:60:f8:11:72:23:
8d:71:8b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 09:31:58 2025 by rpki-client