This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
File: 45395E28C8F411F0A2F04129C4F9AE02.roa (raw, json)
Hash identifier: afkEaQ/8swH1PQQMSELASTKf/x3bI9lkHYSPkyJ2iSo=
Subject key identifier: 7B:6C:4D:9B:3A:5D:EC:05:81:6D:86:53:17:70:8C:D5:A5:89:6F:60
Certificate issuer: /CN=A919B59F/serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Certificate serial: 02
Authority key identifier: FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
Signing time: Mon 24 Nov 2025 05:13:11 +0000
ROA not before: Mon 24 Nov 2025 05:13:11 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139773
IP address blocks: 2001:df6:5ac0::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B59F, serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Validity
Not Before: Nov 24 05:13:11 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6923e967-60e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:7b:21:18:cd:8a:f4:ad:40:d9:b0:2f:c0:
96:17:e0:ff:3b:0a:2f:ed:f5:c9:55:84:07:e9:fa:
00:ed:57:d0:86:42:50:85:6b:3d:ef:28:98:16:92:
31:e9:b0:81:28:63:06:c9:e5:51:e5:34:79:6a:63:
71:0c:f1:e0:d7:e7:06:3e:2e:98:32:c6:90:de:bb:
df:49:76:69:6a:09:6b:70:6f:4c:3d:ea:1c:3a:f8:
cf:06:b0:28:4a:d2:01:7f:34:46:c0:bf:0f:ab:c1:
ed:84:82:0e:aa:42:6b:6c:99:22:3e:a6:bf:57:c4:
44:d7:ce:4e:20:3a:12:c7:ab:d3:19:7d:bb:72:b8:
38:c9:1e:9a:a8:b9:9e:f1:8e:ce:23:f9:fb:28:90:
08:cf:3b:25:bc:99:1b:8e:be:11:75:bd:6d:98:c1:
2a:c5:7f:3d:20:4b:65:90:2d:47:b7:29:13:e1:14:
0a:3c:87:7c:1a:18:8d:5a:9f:81:1e:b1:c5:77:4a:
d1:28:af:73:6c:0e:f3:3f:de:d6:97:e5:a0:45:7f:
47:fc:cc:86:12:30:12:d8:88:24:da:ce:a5:9b:4e:
a8:94:7e:cc:36:c3:33:75:22:21:4e:8e:10:a0:f1:
67:b2:e7:29:85:8c:b1:53:ff:89:ed:43:31:12:c0:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6C:4D:9B:3A:5D:EC:05:81:6D:86:53:17:70:8C:D5:A5:89:6F:60
X509v3 Authority Key Identifier:
keyid:FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:5ac0::/48
Signature Algorithm: sha256WithRSAEncryption
39:a3:13:2a:38:6b:e4:ee:09:e4:52:6b:a0:d0:23:c9:7a:ca:
fe:f6:68:82:8f:4a:88:e5:c8:ee:e5:0c:35:a6:41:6c:2e:85:
cb:f8:5c:8c:cc:c0:7f:7a:cc:44:b9:9b:f1:4a:50:25:19:7e:
a2:90:64:9d:02:34:d8:fb:43:47:fe:8d:18:20:53:94:df:33:
a7:53:a7:11:1e:a7:68:94:6c:d0:c2:bd:f6:c1:01:a0:6f:84:
0f:47:44:90:83:0f:bc:9c:53:2b:cc:ac:1e:32:05:5b:dc:8d:
18:da:fc:35:61:3b:c5:26:19:c9:b0:d5:3f:54:2e:54:89:82:
76:ae:47:01:d4:3f:e9:d8:dd:70:1c:83:c1:e6:29:3f:86:8c:
36:53:3a:b1:9b:fc:f4:42:91:0d:61:8a:40:68:6a:7c:af:37:
6e:51:3d:cf:e3:89:83:fc:6a:df:53:80:f6:87:55:7c:d7:b3:
31:f8:74:f1:7a:57:3a:e8:a5:32:35:7c:11:54:1a:6e:8b:68:
5d:08:b2:24:67:8c:60:69:8f:48:3f:a5:2d:bf:07:be:2f:ea:
bc:9b:95:32:db:78:44:cc:11:fe:54:82:74:b5:36:b3:85:9a:
10:b4:8a:92:d7:07:9f:41:ca:df:4c:02:51:d3:56:ee:98:0c:
57:31:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:19:32 2025 by rpki-client