This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/2CF7FA46995011F082453F71C4F9AE02.roa
File: 2CF7FA46995011F082453F71C4F9AE02.roa (raw, json)
Hash identifier: 3ORSsymXVLLeXLtjuPskJvheSRddUouqDixLZ7cUu7w=
Subject key identifier: AC:51:27:FE:54:09:9D:C7:A6:03:BD:89:B0:21:41:92:E5:A3:4A:47
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 03B6
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/2CF7FA46995011F082453F71C4F9AE02.roa
Signing time: Sat 08 Nov 2025 23:45:48 +0000
ROA not before: Sat 08 Nov 2025 23:45:48 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2407:30c0:184::/48 maxlen: 48
2407:30c0:186::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Nov 8 23:45:48 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690fd62c-b093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ac:4c:0b:ab:3a:54:1c:ff:42:25:70:fa:c1:
cc:50:07:f6:29:27:61:4f:70:dc:94:a5:46:a5:07:
64:d5:20:db:a0:36:13:d0:90:94:8c:cb:78:d9:96:
c8:ab:9e:62:fa:6b:a9:67:d9:f9:7b:df:4c:c0:dd:
48:ad:60:ac:50:d2:0f:79:77:8e:75:01:94:b3:3a:
6b:c9:e6:28:24:7f:ea:0e:5a:c0:51:41:ee:f8:f9:
2f:88:9d:cc:94:22:7c:2e:66:1d:64:39:f6:36:08:
e8:81:7a:8a:af:5a:df:b6:1a:0b:7f:f3:50:5f:f9:
81:7d:f6:18:52:54:f9:64:d4:3b:16:49:8e:09:be:
f3:61:b4:be:e2:79:82:82:4c:9b:f1:51:62:06:b8:
ef:74:b5:3d:2a:80:05:1a:13:b4:c2:19:e0:82:6e:
c7:1b:44:1a:fc:f5:4f:fc:50:54:44:c4:ea:88:de:
27:78:04:0e:78:ab:62:60:9f:98:68:4a:65:5f:e4:
6a:42:e8:2c:06:79:82:04:6a:79:d2:dd:01:c4:91:
1f:3f:3a:4a:2f:7f:e9:61:f1:06:30:6f:dc:e3:1c:
7a:05:d6:85:2f:a3:b5:36:d1:94:ba:12:39:39:8f:
fe:3b:41:cf:20:31:e5:ff:cf:a4:cd:7b:f0:c2:4b:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:51:27:FE:54:09:9D:C7:A6:03:BD:89:B0:21:41:92:E5:A3:4A:47
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/2CF7FA46995011F082453F71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:184::/48
2407:30c0:186::/48
Signature Algorithm: sha256WithRSAEncryption
b4:a5:54:1d:92:f4:08:51:76:09:1f:f9:5f:6d:d4:e7:89:9a:
70:b1:df:a9:fe:20:ce:3e:5f:81:fe:5c:48:0b:14:80:bf:f9:
28:85:53:89:6c:20:d0:b5:62:d8:5c:62:84:39:1f:0c:81:c1:
6d:e8:28:0a:d8:20:64:8a:02:42:b9:af:da:7f:22:45:2d:72:
1f:8c:27:90:eb:71:f7:38:9c:08:c7:2d:f6:82:dd:13:9a:dc:
5f:85:af:3c:75:9a:6d:c9:a8:71:f2:8a:61:5a:54:d9:bb:9d:
c8:1a:e6:7a:c5:8c:b6:3c:ab:18:9a:84:89:df:9e:6e:5e:ec:
14:e0:11:57:0d:64:23:82:9d:97:75:e4:a6:d1:be:be:e6:b0:
08:74:b8:e2:b6:f9:a3:78:b7:79:30:45:72:b0:d1:5e:a8:54:
f1:ca:e7:8a:fc:1a:84:7d:04:d0:e7:bd:a3:8a:33:63:03:60:
1f:b1:7e:b3:f4:35:1e:8a:e1:b6:e1:e4:85:80:61:5c:35:f1:
bb:01:2e:64:84:6e:74:cb:53:86:17:15:e0:a6:36:97:6c:f0:
70:ab:11:04:74:5c:06:06:2b:14:5a:8b:7f:0c:c8:c0:4f:6a:
da:e3:f1:58:41:2f:02:3c:9e:e2:1a:bd:c5:f0:b4:73:df:5a:
c2:41:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 08:53:10 2025 by rpki-client