This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/1CCFF4EAE94411F0858458963C6F56BC.roa
File: 1CCFF4EAE94411F0858458963C6F56BC.roa (raw, json)
Hash identifier: 4RWtVy9GdvEFewhN2uPAMKLzmoonllzY1GWqyqc/rLU=
Subject key identifier: AA:58:46:7C:38:4F:DC:9A:E8:5F:2A:E2:9A:27:E2:AF:C8:88:14:C2
Certificate issuer: /CN=A91918AB/serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
Certificate serial: 04
Authority key identifier: 47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/1CCFF4EAE94411F0858458963C6F56BC.roa
Signing time: Sun 04 Jan 2026 08:05:20 +0000
ROA not before: Sun 04 Jan 2026 08:05:20 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142168
IP address blocks: 2402:44e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl
rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 07:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91918AB, serialNumber=476453BC036F43D5CB906A468C5D8A9868DFFD35
Validity
Not Before: Jan 4 08:05:20 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=695a1f40-7238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:a4:a3:00:eb:b1:74:28:64:ac:40:9b:5b:
8e:43:8b:38:21:38:7f:2d:85:ee:38:d7:20:a5:c0:
e8:f5:6a:5b:25:b3:66:67:f8:ee:08:99:93:c9:d8:
b6:69:51:b8:b3:e4:0a:e2:85:89:ee:3b:7c:cc:da:
1c:b4:5b:74:d6:38:40:53:05:28:e6:24:48:84:99:
d0:77:41:66:d8:d5:28:9b:0a:dc:1d:37:9c:e7:63:
87:9b:50:6f:ba:94:a1:fa:6b:67:2a:26:90:83:6d:
a4:ce:94:04:8b:7c:62:49:88:14:c6:40:fe:0a:f4:
85:b0:08:20:e2:7c:84:60:8d:f7:88:74:e1:b5:6f:
95:1a:b1:12:8f:96:d2:6c:ab:5c:b2:22:b3:56:1d:
29:5d:7b:55:69:7d:fe:29:08:6c:b0:bb:fb:e1:7a:
24:ec:4e:82:ee:5f:cc:fb:7a:26:50:64:62:ca:57:
cb:c1:ba:2b:02:b4:7d:85:85:69:1b:25:62:76:68:
7f:28:fa:05:85:90:01:ec:29:ad:2f:cc:fd:da:ea:
cb:bb:24:2f:17:9f:7c:46:70:26:ea:cf:af:77:3d:
20:20:f5:6a:a1:f0:29:cb:3c:99:e3:6c:25:7b:f1:
9c:c4:db:cc:f4:f9:d1:9b:a2:09:67:6f:9f:25:5e:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:58:46:7C:38:4F:DC:9A:E8:5F:2A:E2:9A:27:E2:AF:C8:88:14:C2
X509v3 Authority Key Identifier:
keyid:47:64:53:BC:03:6F:43:D5:CB:90:6A:46:8C:5D:8A:98:68:DF:FD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/R2RTvANvQ9XLkGpGjF2KmGjf_TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2RTvANvQ9XLkGpGjF2KmGjf_TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/92DC5D70E94111F0BFD6CE333C6F56BC/1CCFF4EAE94411F0858458963C6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:44e0::/32
Signature Algorithm: sha256WithRSAEncryption
01:f5:8a:ab:38:1e:ba:3a:5c:4c:55:43:ce:1e:0f:de:84:dd:
fb:a9:86:f6:f2:2e:b6:6e:ba:a8:0f:e9:57:e3:8a:9f:1e:8a:
19:07:6f:b0:09:9c:7c:b5:b2:0a:18:c9:93:7b:c5:9c:57:7c:
11:69:11:7e:01:c3:7a:ce:6c:6a:05:54:20:82:f7:7c:f3:93:
0d:e4:dd:b7:95:e6:17:47:39:b9:1b:bc:57:69:ef:51:de:ec:
9d:a8:20:a9:76:45:98:f1:2c:c7:64:3c:45:76:76:ef:5f:09:
30:ec:4e:78:83:3f:4a:86:56:a8:d1:a4:04:d0:a2:d1:9b:0e:
f0:2d:51:7f:33:7c:db:5d:15:e8:e4:b0:0e:45:6e:30:82:8b:
af:93:83:7b:77:de:63:21:18:02:a1:ee:1e:8c:e2:45:49:1f:
93:db:1a:bb:49:93:71:72:f8:57:c5:7d:f9:24:04:15:e5:e7:
7e:82:bc:84:bf:6c:b6:6f:14:e7:12:59:17:fe:8f:69:4d:60:
89:f4:dd:79:2b:47:08:ba:f2:4c:23:18:93:51:81:5e:1e:a0:
30:3a:2c:58:74:e5:ea:fb:98:d3:fd:c4:6f:90:9b:b2:99:8f:
08:6c:d9:de:33:48:99:3c:66:6a:25:71:53:d6:42:73:56:9e:
c5:ad:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:33:22 2026 by rpki-client