This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/539136C6F0E511F09202A4D23F6F56BC.roa
File: 539136C6F0E511F09202A4D23F6F56BC.roa (raw, json)
Hash identifier: a/284uWZnvIWS04pVMZTZ6UvJQdlBSX9laKSnDa0VFQ=
Subject key identifier: 15:67:E6:7C:05:5D:E1:B7:B1:FC:23:0A:F1:1C:66:F2:92:4E:F8:14
Certificate issuer: /CN=A91A68C0/serialNumber=EB1253D12C38FAB47EEDF25B6A641E03C2866F98
Certificate serial: 03
Authority key identifier: EB:12:53:D1:2C:38:FA:B4:7E:ED:F2:5B:6A:64:1E:03:C2:86:6F:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/539136C6F0E511F09202A4D23F6F56BC.roa
Signing time: Wed 14 Jan 2026 01:06:59 +0000
ROA not before: Wed 14 Jan 2026 01:06:59 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 147028
IP address blocks: 2001:df6:47c0::/48 maxlen: 49
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl
rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 07:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A68C0, serialNumber=EB1253D12C38FAB47EEDF25B6A641E03C2866F98
Validity
Not Before: Jan 14 01:06:59 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6966ec33-8e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:bc:b1:1e:5f:59:16:2e:55:bd:53:8a:0a:
c0:06:f5:e4:cb:0a:ed:75:3b:6d:ee:c0:4d:16:9f:
d2:66:a9:6b:2a:16:5c:52:84:e2:1c:cb:2a:2c:f0:
04:c8:b5:23:af:df:71:89:62:8c:17:f8:ff:fa:ef:
73:2f:2a:49:e6:1b:1f:9c:cc:18:29:9b:ac:b3:66:
b3:63:58:32:78:52:16:e9:28:ad:4c:ec:48:f4:6c:
71:64:9f:18:3e:41:dc:f6:8f:98:a0:00:37:68:51:
e8:8d:8f:2c:2c:95:12:73:6a:0b:0f:b7:81:6d:ed:
5e:74:f5:55:60:36:15:0b:63:6a:7b:2d:37:4a:7e:
24:d3:91:f7:18:da:23:0f:08:4e:31:83:d0:ff:90:
14:3e:d6:68:9e:dd:65:8e:49:d4:eb:d2:f9:db:0d:
0e:ef:18:72:0f:82:38:e2:6d:3e:14:5d:9f:1d:2e:
e4:df:07:24:5b:0d:a7:fb:ac:bf:af:5f:e5:30:61:
5d:6e:96:a6:cf:82:16:f9:de:f8:dd:8d:72:55:b3:
8d:09:ff:db:ba:eb:49:cb:89:8b:ce:86:f6:23:a9:
5f:11:74:cf:29:d3:31:41:5a:05:c1:d4:d0:94:6d:
08:a4:3d:77:c0:34:59:3e:b8:70:42:b8:75:25:15:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:67:E6:7C:05:5D:E1:B7:B1:FC:23:0A:F1:1C:66:F2:92:4E:F8:14
X509v3 Authority Key Identifier:
keyid:EB:12:53:D1:2C:38:FA:B4:7E:ED:F2:5B:6A:64:1E:03:C2:86:6F:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/539136C6F0E511F09202A4D23F6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:47c0::/48
Signature Algorithm: sha256WithRSAEncryption
87:6e:29:af:dc:20:da:8e:f8:ad:b8:b6:08:88:13:ac:cf:b4:
82:1f:9a:e5:81:9a:79:99:0e:0f:53:79:f6:28:9f:ef:bc:f7:
7c:44:f8:a7:b8:c2:04:d2:02:36:ac:6b:10:42:4c:4c:13:2f:
dd:b3:fb:ee:bb:d4:67:a8:5b:91:66:0b:4e:01:b1:f0:cb:95:
2d:06:f7:5f:f7:66:78:db:cb:82:7c:69:8f:7e:9f:19:16:5a:
57:9e:ce:3a:e9:16:b2:90:c0:d7:4d:14:c9:6b:58:6e:cc:6d:
d9:d4:ec:98:ea:94:76:15:9c:a3:2e:ca:10:b0:e7:90:40:50:
55:7c:28:35:7b:b2:48:5e:28:ac:e2:25:e0:f2:e7:c3:85:9f:
97:ec:fe:7c:2b:ab:ab:71:e1:5c:1e:7e:45:d0:30:50:3d:ef:
b9:db:c5:b6:6f:35:89:a5:26:c3:de:60:e3:4d:bd:70:61:d0:
2a:e7:67:e7:91:9f:af:e2:b2:c9:ad:71:96:13:cf:77:99:45:
29:40:f6:77:19:11:2c:9c:e2:a7:ce:78:b6:46:e8:79:03:98:
a0:c9:41:0c:04:1a:cc:60:de:3a:e3:82:98:07:4b:e8:d1:b2:
b2:43:c1:b4:a5:b8:8f:ce:2a:c3:7f:9d:24:d1:f7:c8:cc:14:
a7:83:84:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:23:24 2026 by rpki-client