This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/C40F74B2D5C611EEA589D110C4F9AE02.roa
File: C40F74B2D5C611EEA589D110C4F9AE02.roa (raw, json)
Hash identifier: NFcBxaNz6mf8ehCSWmhGaRGkP0i5x4WvGMuGJ53JdH4=
Subject key identifier: D6:72:18:4E:4C:CD:24:9E:17:51:05:35:94:59:90:C3:8E:6A:42:13
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 03B7
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/C40F74B2D5C611EEA589D110C4F9AE02.roa
Signing time: Sat 08 Nov 2025 23:45:50 +0000
ROA not before: Sat 08 Nov 2025 23:45:50 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 8987
IP address blocks: 2407:30c0:113::/48 maxlen: 48
2407:30c0:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Nov 8 23:45:50 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690fd62e-7b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:ac:9b:7c:81:27:19:5f:18:01:42:79:ee:
28:db:21:0c:13:72:4f:58:cb:a7:9b:79:44:e1:52:
8d:bc:c3:3e:15:58:5f:44:d5:55:20:04:0a:94:15:
10:b0:70:41:49:03:ae:d1:70:32:65:0c:62:34:fc:
35:e5:74:8b:18:5e:8b:a7:52:30:95:ec:9c:40:98:
6b:b5:87:99:b4:1e:74:2e:20:25:97:e4:cf:87:2a:
9f:4e:90:30:2e:46:32:80:fc:3c:f0:da:1a:97:0a:
1e:dd:e9:b3:2f:7a:2a:ef:eb:81:7f:68:2e:38:0a:
d7:ff:9f:d4:af:58:40:7a:49:20:8f:80:eb:95:73:
3b:d8:5d:e0:b9:44:9d:d1:de:84:89:4b:dd:ce:12:
67:18:f8:24:f5:e1:0e:25:41:37:75:6c:3f:91:11:
a5:03:26:9a:ca:1d:e7:e4:1e:6a:f2:36:1a:2c:30:
ad:32:2a:ac:87:86:15:ba:c3:7b:fd:82:aa:4a:f2:
c6:fe:4b:29:16:aa:a3:3d:71:d3:93:03:8f:6d:7f:
c5:28:bc:fe:33:f3:52:ff:2d:02:00:33:d5:f9:1e:
40:ad:1a:57:51:af:79:92:58:fe:32:ba:32:06:f1:
41:2f:44:1c:5a:5d:63:9b:fe:a1:74:97:a9:88:8b:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:18:4E:4C:CD:24:9E:17:51:05:35:94:59:90:C3:8E:6A:42:13
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/C40F74B2D5C611EEA589D110C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:113::/48
2407:30c0:121::/48
Signature Algorithm: sha256WithRSAEncryption
49:03:61:1a:bb:c5:8f:66:6b:37:40:4e:76:df:fd:ae:48:5d:
ab:43:6d:23:6a:8f:7a:6c:16:1e:94:a1:48:74:1f:fa:37:2a:
cf:ba:55:80:3d:11:fb:bf:14:44:15:b7:27:44:15:a7:03:97:
c0:12:53:f2:0a:be:d5:41:3b:49:6e:97:26:fa:b1:a7:3b:26:
db:66:3c:46:d3:ab:70:fe:a5:0e:39:29:0a:80:66:ea:00:88:
d5:b9:28:a8:04:74:86:d5:b0:17:c7:3b:06:57:aa:d6:15:8f:
07:74:6d:9b:73:3d:c8:3d:9f:e5:aa:50:1a:ae:5f:7b:ee:9a:
62:73:1c:41:6f:6e:71:10:e6:57:26:0b:a3:3b:d8:a2:ab:85:
01:47:c4:eb:3a:6f:85:8f:d9:33:a3:d4:20:a6:2d:dc:39:13:
7c:2d:48:1e:2f:13:b1:dd:10:da:f2:9f:17:72:b2:d0:39:67:
07:23:49:a1:86:d9:40:bc:36:df:68:9f:2b:9f:a8:99:0a:1a:
31:07:20:f3:96:b5:73:c9:92:d9:9f:33:d0:69:af:6c:ea:62:
8c:bf:c8:dd:3a:af:a2:0e:c6:1d:67:9c:14:a0:88:be:b8:31:
8a:0c:4e:4d:8c:64:bf:00:1f:ef:ec:f1:f3:4e:c1:31:2e:5d:
dd:7a:79:db
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3
NzEyRTI3NkEwHhcNMjUxMTA4MjM0NTUwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBmZDYyZS03YjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtDusm3yBJxlfGAFCee4o2yEME3JPWMunm3lE4VKNvMM+FVhfRNVVIAQKlBUQ
sHBBSQOu0XAyZQxiNPw15XSLGF6Lp1IwleycQJhrtYeZtB50LiAll+TPhyqfTpAw
LkYygPw88Noalwoe3emzL3oq7+uBf2guOArX/5/Ur1hAekkgj4DrlXM72F3guUSd
0d6EiUvdzhJnGPgk9eEOJUE3dWw/kRGlAyaayh3n5B5q8jYaLDCtMiqsh4YVusN7
/YKqSvLG/kspFqqjPXHTkwOPbX/FKLz+M/NS/y0CADPV+R5ArRpXUa95klj+Mroy
BvFBL0QcWl1jm/6hdJepiIvRVQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNZyGE5M
zSSeF1EFNZRZkMOOakITMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC
MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYzMDQvMTlFNERGMDZEQjA3MTFFQzk5MjJENzBGQzRGOUFFMDIvQzQwRjc0QjJE
NUM2MTFFRUE1ODlEMTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwAkBzDAARMDBwAkBzDAASEwDQYJKoZIhvcNAQELBQADggEB
AEkDYRq7xY9mazdATnbf/a5IXatDbSNqj3psFh6UoUh0H/o3Ks+6VYA9Efu/FEQV
tydEFacDl8ASU/IKvtVBO0lulyb6sac7JttmPEbTq3D+pQ45KQqAZuoAiNW5KKgE
dIbVsBfHOwZXqtYVjwd0bZtzPcg9n+WqUBquX3vummJzHEFvbnEQ5lcmC6M72KKr
hQFHxOs6b4WP2TOj1CCmLdw5E3wtSB4vE7HdENrynxdystA5ZwcjSaGG2UC8Nt9o
nyufqJkKGjEHIPOWtXPJktmfM9Bpr2zqYoy/yN06r6IOxh1nnBSgiL64MYoMTk2M
ZL8AH+/s8fNOwTEuXd16eds=
-----END CERTIFICATE-----
Generated at Fri Dec 5 07:29:42 2025 by rpki-client