This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
File: 5415D510C68E11F0BC83973CC4F9AE02.roa (raw, json)
Hash identifier: cR2EzFZXQ3OaIi8xJ7tAl3/J8aU9AAmLtvKskXaeeio=
Subject key identifier: A1:58:DF:A2:DA:39:A9:38:E2:37:F6:1E:F1:42:38:88:29:BE:92:EA
Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial: 0101
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
Signing time: Fri 21 Nov 2025 03:58:25 +0000
ROA not before: Fri 21 Nov 2025 03:58:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9650
IP address blocks: 192.88.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Validity
Not Before: Nov 21 03:58:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=691fe360-76d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:07:21:25:9f:b7:79:65:fe:8e:be:8e:40:
53:47:96:94:30:b9:6e:43:cc:60:d4:3c:bf:de:69:
2e:4f:92:52:d2:14:15:5e:93:43:8d:7c:3c:f0:b6:
b3:16:b7:a7:02:ba:f6:3d:aa:43:97:72:65:c8:5a:
07:6c:9b:40:78:79:9d:9b:24:2b:d9:68:83:11:64:
6b:85:b8:7d:e2:43:27:1e:67:e0:e1:7f:e1:0a:8d:
d4:8c:19:40:80:30:09:e1:ba:e4:84:09:47:4b:df:
e1:0b:8b:d9:37:e0:ac:85:1a:d1:1f:d7:64:35:31:
69:ee:c6:c8:db:54:ca:4a:54:b0:80:9b:8b:24:bd:
83:4f:1e:5d:22:1b:a3:60:10:aa:45:83:b2:7c:a4:
27:2f:c4:3e:df:95:8c:e4:fd:ce:8e:36:46:0c:97:
f0:db:16:32:c0:e9:8d:7a:00:dd:67:77:6e:64:63:
ef:c2:26:09:4f:73:37:bf:78:70:1c:c7:60:d9:b0:
9b:a6:b8:d2:d5:23:ed:85:c2:77:a9:f3:fe:c0:20:
66:82:c9:a1:30:cc:7e:93:32:97:37:c5:66:9e:fa:
25:92:df:7d:c5:6c:fa:c4:e5:a0:ac:8c:0f:98:50:
ba:6f:f5:8a:6d:01:00:9b:c5:0a:67:7a:f4:4b:58:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:DF:A2:DA:39:A9:38:E2:37:F6:1E:F1:42:38:88:29:BE:92:EA
X509v3 Authority Key Identifier:
keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.88.7.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d8:a5:17:48:08:db:4e:03:30:fd:3a:b2:56:56:b6:72:14:
5c:de:4b:b8:20:35:08:a9:5c:58:83:a0:8a:64:27:51:75:40:
5e:2e:75:24:23:2b:b9:65:da:bc:34:3d:ea:52:ef:7b:47:e6:
fd:3d:cc:82:f5:6a:c1:8b:44:55:26:0e:9f:c8:8b:f5:25:10:
8a:ef:f1:ef:06:9e:f5:1c:aa:04:a2:91:b1:c1:60:91:a2:ef:
cf:e2:61:f4:5c:4a:3c:7a:89:54:d7:04:c1:35:0e:40:ed:b0:
11:02:4a:ef:2d:96:25:5f:c0:a3:40:33:ff:4d:b9:c6:a7:23:
8b:02:d4:13:d4:8c:c2:91:47:c9:ee:78:c9:48:8a:e1:a8:59:
99:a2:dc:be:e4:e9:f9:9e:41:56:9f:29:44:ac:6b:cb:85:26:
49:f4:c2:da:c2:3c:2f:99:f1:37:90:f3:40:7f:a2:0e:f9:26:
73:b9:e0:f4:e0:ea:05:c3:59:fe:bb:96:58:98:6a:ab:cc:c8:
41:5c:57:b0:0f:34:8c:d9:06:af:9b:f0:14:11:b5:c3:f3:4a:
80:14:0c:e5:3e:74:d0:98:a3:e7:c6:f8:e7:5b:05:37:0f:b6:
4c:df:47:ef:6c:ff:2b:8b:c6:1b:bc:93:c6:0a:eb:9d:f0:60:
8c:ce:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:13 2025 by rpki-client