This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
File: 328EDB76383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier: XQUxJKrG/4jg7RU3mf165JAmUkfpGEaIQ86XSTUnYoU=
Subject key identifier: AA:90:D3:78:8D:1D:72:DB:15:93:D7:06:7C:A7:09:A1:38:DD:C0:4E
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 36ED
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
Signing time: Tue 30 Dec 2025 15:10:09 +0000
ROA not before: Tue 30 Dec 2025 15:10:09 +0000
ROA not after: Thu 30 Apr 2026 00:00:00 +0000
asID: 135536
IP address blocks: 61.45.251.0/24 maxlen: 24
2401:4601:251::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Feb 2026 14:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14061 (0x36ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Dec 30 15:10:09 2025 GMT
Not After : Apr 30 00:00:00 2026 GMT
Subject: CN=6953eb51-1110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:f6:d5:e1:cb:9f:18:2b:d2:ed:be:d8:85:
fa:3d:66:68:00:aa:c4:5c:a1:61:31:df:d6:92:31:
9f:99:9c:20:68:ce:d3:e9:69:96:17:b5:e7:b6:d3:
28:c1:59:07:26:d1:8f:f3:1f:75:85:6e:35:88:79:
ab:6e:e2:fe:90:0b:7e:9b:57:a1:aa:39:11:81:0c:
08:3a:7e:ac:c8:e2:8b:b7:3a:87:2e:a1:a0:ca:1f:
3d:6f:a5:1a:aa:e6:bc:1f:d2:ed:cc:22:d3:e8:6a:
76:5b:d2:56:27:f7:a4:2e:a7:d6:4c:0a:13:5f:c8:
fc:dc:3a:3e:5f:6e:a1:8e:40:f4:50:ff:4a:d0:e3:
80:cd:37:34:e3:30:78:de:e2:55:eb:3e:da:fb:c0:
8e:54:c5:d2:f5:1e:58:de:d5:c0:bf:fd:fb:9f:73:
0f:f3:b7:df:db:0b:29:f7:12:d3:32:3e:fb:7c:3a:
80:53:cc:9f:03:d6:b6:1c:c6:e4:bc:43:6f:76:99:
82:5a:8e:86:25:e7:41:26:e2:8e:53:f2:b8:26:ad:
87:59:a6:f4:be:7b:5f:54:58:4f:22:5f:6c:02:eb:
2e:6f:be:dc:88:ab:fa:ad:ae:fc:0e:eb:d4:b4:35:
e3:7b:35:68:96:3a:22:29:6d:5b:f4:a3:88:4d:74:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:D3:78:8D:1D:72:DB:15:93:D7:06:7C:A7:09:A1:38:DD:C0:4E
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.45.251.0/24
IPv6:
2401:4601:251::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ae:3b:53:41:fa:af:40:55:19:2f:84:c6:10:d5:d7:18:87:
d9:e0:50:4f:56:65:c0:d5:21:e5:5f:27:ab:3c:8a:b8:4b:6d:
95:3a:f2:14:6e:9a:a9:8e:98:b5:2c:0f:8e:92:f3:da:0d:6f:
16:c8:06:c7:e6:90:0f:1f:fd:c3:e4:e2:00:2a:9a:a1:2c:26:
b8:87:ea:61:5f:a7:40:46:66:52:7b:ec:2b:86:d4:da:f4:3d:
67:97:0a:fc:d3:f6:15:48:d4:0c:25:a2:df:c8:08:3a:2e:16:
bf:4a:b7:6e:0d:01:2f:f3:4c:6b:36:13:c0:16:50:18:bb:87:
3c:4f:30:ad:55:71:1a:c2:04:86:f8:04:3e:ee:a1:e5:58:1a:
4b:a5:5d:ea:73:51:2e:af:85:fb:a8:99:cb:48:f7:ec:47:a0:
75:39:06:b3:35:ce:df:fd:d4:e2:27:86:5a:41:eb:f7:aa:d0:
7f:85:3b:a8:b7:62:ac:cd:65:45:f1:45:47:58:1c:a8:37:e5:
f1:19:d0:7b:c5:87:3c:34:cb:af:dd:39:62:36:b5:7d:6b:d1:
e6:f5:31:cf:65:44:35:b7:a2:7a:08:90:1d:ef:b6:7d:c8:f7:
a4:82:d8:07:2a:c4:74:4f:7c:69:c9:f7:97:c6:18:34:f3:da:
ee:2e:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 13:39:07 2026 by rpki-client