This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/5725C1363AB711EDBB6FC759C4F9AE02.roa
File: 5725C1363AB711EDBB6FC759C4F9AE02.roa (raw, json)
Hash identifier: MMNV0WFJPDmBrnJ58hLCTn0qZ0UGPXof6MadQzXXtIs=
Subject key identifier: 1F:A0:0C:BB:A3:52:C2:CC:DE:34:55:5B:80:F5:DC:98:61:94:A4:DB
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 03B2
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/5725C1363AB711EDBB6FC759C4F9AE02.roa
Signing time: Sat 08 Nov 2025 23:45:45 +0000
ROA not before: Sat 08 Nov 2025 23:45:45 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 209242
IP address blocks: 2407:30c0:182::/48 maxlen: 48
2407:30c0:183::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 946 (0x3b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Nov 8 23:45:45 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690fd629-5479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:76:5f:de:8b:e9:54:84:da:d2:55:30:06:
85:1e:a6:72:52:1d:4c:c0:e8:f9:54:78:db:7b:7b:
b4:e5:6a:61:ce:c5:3e:a8:e7:35:e0:c1:6c:62:40:
ec:dd:d0:7e:d5:6b:d3:30:52:75:94:f1:d3:5a:76:
52:d5:e9:8b:be:24:a6:c1:03:08:2f:ce:00:15:57:
26:44:5f:a5:19:98:a8:ab:54:a2:85:78:79:2f:f6:
81:df:35:b2:00:79:ca:9e:6e:79:50:7c:68:39:76:
89:30:dd:d4:0c:76:59:25:38:3c:ff:ba:4e:e6:1d:
b1:a1:ef:40:e6:80:ac:cf:c1:1e:72:ae:a0:bf:dc:
78:70:25:61:0e:da:73:a0:61:4a:6d:75:69:b6:60:
75:e9:ef:11:fb:25:fd:5f:1d:75:fd:fe:01:d0:e3:
f2:e7:a5:73:82:54:6a:cc:42:13:88:44:58:1e:55:
ff:80:dd:05:dc:ba:82:60:b6:8f:47:81:4c:e6:55:
ad:d6:30:bf:fa:8f:5b:c3:2a:53:39:ba:8d:08:e3:
4d:97:11:6b:01:2d:f5:8c:e8:94:bc:46:8e:0c:8a:
47:38:e7:04:c9:d6:8e:ac:63:cf:54:40:6f:58:12:
1e:e2:9e:6b:b6:43:60:85:9e:af:e0:37:b3:55:5d:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A0:0C:BB:A3:52:C2:CC:DE:34:55:5B:80:F5:DC:98:61:94:A4:DB
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/5725C1363AB711EDBB6FC759C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:182::/47
Signature Algorithm: sha256WithRSAEncryption
95:69:8a:29:27:3e:62:47:97:33:56:fa:8a:a3:2f:88:9d:94:
c4:7e:38:7d:97:a6:4e:43:d6:91:c3:44:a7:ac:ba:6c:9d:a6:
73:a4:3a:37:5c:e8:f5:d1:e4:a5:d5:ba:a8:42:22:21:3e:2d:
55:d1:4c:08:c1:a2:8c:1b:d1:4d:26:7d:ca:45:03:87:ea:b8:
d0:13:37:da:09:d4:20:bb:35:a9:31:f4:07:42:56:de:f3:c4:
5e:b3:fe:27:a1:e6:c1:f7:f5:f6:38:20:9d:95:8f:1b:1a:9b:
74:eb:9c:75:5e:80:da:fb:04:f9:e3:e3:54:e1:2a:ca:8e:4e:
ce:91:f2:1e:61:6f:6f:91:3f:5f:22:95:f3:e7:e9:f3:e8:05:
19:0e:d8:be:0c:78:b5:bf:7b:11:e6:9a:eb:d4:a8:8e:5a:b1:
fe:aa:d2:17:3c:ec:14:da:5b:fe:32:03:f9:a7:90:b6:ce:53:
bc:40:b8:08:7b:3f:a7:24:23:d3:fd:bd:75:24:e5:69:c6:ec:
92:44:b3:23:bb:7b:2f:30:90:80:e2:c8:ac:9e:c7:c5:e2:30:
92:aa:de:8a:28:74:75:db:2e:07:4b:cc:09:93:bf:c1:c2:fb:
69:3b:ee:7e:32:32:3f:f9:63:5d:16:7a:34:5d:24:54:7a:58:
32:5c:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 08:53:19 2025 by rpki-client