This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/E98E927EC8DE11F08D4C886AC4F9AE02/510F2368C91C11F0BC9C607AC4F9AE02.roa
File: 510F2368C91C11F0BC9C607AC4F9AE02.roa (raw, json)
Hash identifier: xRaNwm1Q75oxEsTvOZtxHfezRtY715lLYaXigHg7tns=
Subject key identifier: 89:F7:ED:FB:F9:77:3A:49:CE:34:E1:8C:EB:C8:74:69:8C:95:52:B4
Certificate issuer: /CN=A91A470C/serialNumber=BB2613DBBFEF15EF43292075D1D29CAE66107EA5
Certificate serial: 08
Authority key identifier: BB:26:13:DB:BF:EF:15:EF:43:29:20:75:D1:D2:9C:AE:66:10:7E:A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyYT27_vFe9DKSB10dKcrmYQfqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A470C/E98E927EC8DE11F08D4C886AC4F9AE02/510F2368C91C11F0BC9C607AC4F9AE02.roa
Signing time: Mon 24 Nov 2025 09:59:50 +0000
ROA not before: Mon 24 Nov 2025 09:59:50 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154386
IP address blocks: 144.79.20.0/23 maxlen: 23
144.79.20.0/24 maxlen: 24
144.79.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A470C/E98E927EC8DE11F08D4C886AC4F9AE02/uyYT27_vFe9DKSB10dKcrmYQfqU.crl
rsync://rpki.apnic.net/member_repository/A91A470C/E98E927EC8DE11F08D4C886AC4F9AE02/uyYT27_vFe9DKSB10dKcrmYQfqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyYT27_vFe9DKSB10dKcrmYQfqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A470C, serialNumber=BB2613DBBFEF15EF43292075D1D29CAE66107EA5
Validity
Not Before: Nov 24 09:59:50 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69242c96-8405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:73:3c:c0:53:c2:09:35:37:23:23:2d:a2:
97:af:b2:f2:d1:11:8c:da:82:9b:2c:19:9f:1b:a7:
17:ab:cc:e2:3e:d2:9b:45:86:ed:36:51:21:83:0b:
28:94:42:2d:dd:fb:70:dd:99:2c:77:ee:4e:d1:f7:
66:7f:3b:7a:d3:d1:16:c2:8b:0e:6c:82:f2:90:76:
07:c2:ce:12:2d:74:48:bb:20:6f:fd:22:43:95:2e:
d2:17:31:5f:b7:84:7e:50:a4:50:d5:b1:99:6d:86:
58:33:0b:ff:46:54:64:61:a8:c7:fb:56:27:60:7f:
dd:1a:6f:41:1a:78:1a:79:d2:38:13:a2:2e:a1:b0:
bc:3a:42:ed:f3:49:1b:1a:ea:af:25:17:e5:d1:d3:
7b:9d:b9:e1:d9:97:8d:28:4e:69:1b:47:d9:19:91:
44:9d:e9:25:2b:5d:87:d0:12:e5:ea:f6:3f:e0:00:
93:7d:06:b5:1f:ea:54:f3:0f:e2:fc:c9:33:cb:c8:
d4:1b:2c:01:77:bb:90:45:09:63:7f:93:fc:72:cc:
41:0b:83:e1:e9:fb:b2:32:ea:42:52:d0:5f:94:44:
9d:c0:c7:70:3c:94:b6:06:5d:00:20:96:54:7a:e8:
93:7a:7f:8b:3d:dd:95:33:1b:ad:19:48:3d:8c:f8:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F7:ED:FB:F9:77:3A:49:CE:34:E1:8C:EB:C8:74:69:8C:95:52:B4
X509v3 Authority Key Identifier:
keyid:BB:26:13:DB:BF:EF:15:EF:43:29:20:75:D1:D2:9C:AE:66:10:7E:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A470C/E98E927EC8DE11F08D4C886AC4F9AE02/uyYT27_vFe9DKSB10dKcrmYQfqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyYT27_vFe9DKSB10dKcrmYQfqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/E98E927EC8DE11F08D4C886AC4F9AE02/510F2368C91C11F0BC9C607AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.20.0/23
Signature Algorithm: sha256WithRSAEncryption
43:19:12:f9:97:b4:a6:a9:f2:be:ad:bb:9f:17:5e:d3:8f:4f:
c9:37:b0:91:e9:c4:20:ff:59:11:9a:30:73:e8:64:a7:fe:73:
e8:d8:19:37:48:e0:38:17:d5:1f:47:8d:4d:2c:82:ce:c2:69:
38:55:bb:e8:b9:f5:d2:0e:dd:3f:73:01:fe:de:f3:c7:d1:3b:
ba:f1:09:97:94:84:28:7e:4e:33:37:0d:70:74:e5:3c:0a:01:
13:7e:01:f3:f0:a9:87:ac:cb:74:d0:d4:7c:15:b2:8d:cb:b3:
a4:3e:7e:0b:20:83:54:60:87:39:84:43:51:54:56:cc:6e:e8:
58:b5:95:04:06:d5:1e:98:c9:ac:44:16:08:d6:10:fc:f9:18:
0e:84:06:38:62:d4:c5:35:7c:bb:49:4b:28:8a:47:b7:1e:17:
6e:2d:20:16:ff:d5:38:18:b8:a3:cd:75:3c:8e:0b:89:30:e2:
5b:1a:58:81:33:4b:46:4a:1d:1c:c6:47:8c:3b:7a:85:0b:45:
94:22:d6:20:e0:9e:5a:34:d8:da:d5:ef:91:bc:b4:d5:08:8a:
0a:35:02:97:04:7c:b6:2b:01:73:32:aa:2b:d5:cc:d4:d5:19:
b7:ca:80:ad:b2:28:aa:b5:bd:5b:a3:5f:f5:5c:e2:31:ee:54:
18:6a:a1:1e
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NDcwQzExMC8GA1UEBRMoQkIyNjEzREJCRkVGMTVFRjQzMjkyMDc1RDFEMjlDQUU2
NjEwN0VBNTAeFw0yNTExMjQwOTU5NTBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MjQyYzk2LTg0MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCl13M8wFPCCTU3IyMtopevsvLREYzagpssGZ8bpxerzOI+0ptFhu02USGDCyiU
Qi3d+3DdmSx37k7R92Z/O3rT0RbCiw5sgvKQdgfCzhItdEi7IG/9IkOVLtIXMV+3
hH5QpFDVsZlthlgzC/9GVGRhqMf7Vidgf90ab0EaeBp50jgToi6hsLw6Qu3zSRsa
6q8lF+XR03udueHZl40oTmkbR9kZkUSd6SUrXYfQEuXq9j/gAJN9BrUf6lTzD+L8
yTPLyNQbLAF3u5BFCWN/k/xyzEELg+Hp+7Iy6kJS0F+URJ3Ax3A8lLYGXQAgllR6
6JN6f4s93ZUzG60ZSD2M+LfHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUifft+/l3
OknONOGM68h0aYyVUrQwHwYDVR0jBBgwFoAUuyYT27/vFe9DKSB10dKcrmYQfqUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0NzBDL0U5OEU5MjdFQzhE
RTExRjA4RDRDODg2QUM0RjlBRTAyL3V5WVQyN192RmU5REtTQjEwZEtjcm1ZUWZx
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdXlZVDI3X3ZGZTlES1NCMTBkS2NybVlRZnFVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDcwQy9FOThFOTI3RUM4REUxMUYwOEQ0Qzg4NkFDNEY5QUUwMi81MTBGMjM2OEM5
MUMxMUYwQkM5QzYwN0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZBPFDANBgkqhkiG9w0BAQsFAAOCAQEAQxkS+Ze0pqnyvq27
nxde049PyTewkenEIP9ZEZowc+hkp/5z6NgZN0jgOBfVH0eNTSyCzsJpOFW76Ln1
0g7dP3MB/t7zx9E7uvEJl5SEKH5OMzcNcHTlPAoBE34B8/Cph6zLdNDUfBWyjcuz
pD5+CyCDVGCHOYRDUVRWzG7oWLWVBAbVHpjJrEQWCNYQ/PkYDoQGOGLUxTV8u0lL
KIpHtx4Xbi0gFv/VOBi4o811PI4LiTDiWxpYgTNLRkodHMZHjDt6hQtFlCLWIOCe
WjTY2tXvkby01QiKCjUClwR8tisBczKqK9XM1NUZt8qArbIoqrW9W6Nf9VziMe5U
GGqhHg==
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:52:19 2025 by rpki-client