This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/C1B7F140EF6811F09BA576A7586F56BC.roa
File: C1B7F140EF6811F09BA576A7586F56BC.roa (raw, json)
Hash identifier: 4jZh/AUohlYOypPBvV6z3q4rXnhSp14Z18jcZ4dgFT8=
Subject key identifier: 15:58:13:8F:02:24:DF:9B:EE:5D:F0:16:AC:C0:D8:29:B1:3C:1B:68
Certificate issuer: /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial: 05
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/C1B7F140EF6811F09BA576A7586F56BC.roa
Signing time: Mon 12 Jan 2026 03:42:45 +0000
ROA not before: Mon 12 Jan 2026 03:42:45 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 142192
IP address blocks: 2001:df6:8f40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 07:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Validity
Not Before: Jan 12 03:42:45 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69646db5-137c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:b5:0c:0e:1c:b7:d7:e4:96:84:da:b8:b7:
b2:63:d7:b8:83:51:41:c0:8b:89:4b:73:bc:1b:02:
eb:14:34:b5:8a:2e:9b:14:f9:37:c5:fb:6c:b6:5f:
73:6f:b7:9a:d0:eb:66:b2:c3:33:ca:67:ff:5c:68:
29:27:fb:62:40:bf:65:58:55:1b:50:fa:2a:5d:f5:
d1:9c:ed:83:54:3f:ef:45:9d:75:f6:67:8c:ed:13:
69:8e:d4:fc:36:f6:1c:ae:70:83:1b:40:f6:bd:ff:
40:8e:b7:ba:61:da:a1:e6:98:b8:8d:7d:9c:3f:75:
ab:33:45:19:b8:65:60:18:b1:59:06:c3:a1:27:3f:
91:04:8e:ac:69:b7:8b:77:fc:8f:43:97:af:45:e8:
ee:7c:c1:2c:de:a4:fb:d3:fe:e0:22:d1:f9:37:18:
13:cc:27:b9:3e:09:1d:88:76:41:dd:b2:d1:75:41:
6b:cc:d3:d4:61:01:81:a0:a5:72:aa:13:ec:1e:9b:
6f:00:b0:66:5a:d3:54:04:8c:99:6b:b6:f5:d4:37:
96:28:cf:8f:99:39:47:e2:b5:f4:a6:6b:e3:2e:bc:
59:99:0b:b3:f3:65:eb:16:59:2c:1d:ce:c9:c9:85:
d8:6a:bb:3d:f0:80:00:15:5a:10:5c:a3:0a:1e:9d:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:13:8F:02:24:DF:9B:EE:5D:F0:16:AC:C0:D8:29:B1:3C:1B:68
X509v3 Authority Key Identifier:
keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/C1B7F140EF6811F09BA576A7586F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:8f40::/48
Signature Algorithm: sha256WithRSAEncryption
9f:a0:ee:c5:a1:83:c2:98:a4:06:c0:cc:c6:d0:84:8a:18:bd:
55:63:a4:44:fc:a9:da:35:0b:93:ba:84:fb:a5:cc:79:2e:69:
aa:8f:00:0a:89:2d:10:4a:fc:62:e6:67:01:94:00:79:f9:d0:
e0:e5:ee:ad:c2:6e:cc:3f:cb:35:a6:77:b5:ca:d3:60:f3:39:
a6:5c:60:ce:d6:d1:c3:2f:ef:93:b4:7a:c2:6f:2e:c1:b5:f6:
39:68:84:a5:20:47:9f:8f:a1:e3:2a:f0:25:61:db:8c:9b:7f:
70:f0:15:c8:16:ee:de:b5:30:5d:7f:92:ca:df:a0:b4:f3:9f:
75:f0:3b:8b:90:20:19:7e:51:f8:83:b7:14:d2:22:fa:a7:bf:
4c:f3:f3:26:21:40:2e:ab:9f:2b:cb:7b:37:39:46:bb:12:b1:
fc:7a:58:e6:b6:2a:40:54:50:d2:7f:a9:b9:b8:e7:46:a8:d0:
6e:9c:e8:e7:20:e5:39:83:6d:9d:65:f0:34:d9:57:e6:99:7c:
cf:93:a9:28:48:1b:39:b3:20:5a:69:4b:94:c2:33:4e:09:13:
a0:cc:d0:1f:c7:fa:44:51:4e:69:02:6c:fb:40:a9:5b:8b:1a:
6b:ee:6a:56:e3:52:83:0c:17:a6:90:b6:af:97:a4:2c:bd:d3:
d0:ed:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 07:20:48 2026 by rpki-client