This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/3AB1C050E13911F0A327D96A6F6F56BC.roa
File: 3AB1C050E13911F0A327D96A6F6F56BC.roa (raw, json)
Hash identifier: e4Y/+Y0VENFTeCG2uYKdn/5X3YbL0s2mnehyJW/JXfg=
Subject key identifier: 57:15:18:A0:F3:48:78:F6:94:2B:EE:A0:2F:8E:A5:45:D1:F1:65:BF
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 026F
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/3AB1C050E13911F0A327D96A6F6F56BC.roa
Signing time: Thu 25 Dec 2025 02:27:16 +0000
ROA not before: Thu 25 Dec 2025 02:27:16 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 204910
IP address blocks: 2401:b60:e210::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 01:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Dec 25 02:27:16 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=694ca104-6600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fc:70:46:d3:1c:f4:d0:6b:39:70:f0:31:7b:
60:04:f6:a2:7f:65:0d:c7:f4:2c:0f:47:06:b7:df:
d1:5f:ea:13:37:a9:4e:cf:47:b1:d2:17:94:1a:68:
cb:a5:d7:6e:26:67:10:24:0d:79:61:2f:eb:d7:20:
be:9e:08:6b:d2:d7:a4:59:7c:d7:1a:5f:90:53:38:
80:2c:fb:da:9f:75:23:3d:66:3d:a2:5f:74:83:07:
06:50:70:1e:0f:25:00:ec:2c:0c:b1:08:47:45:29:
6c:e9:8a:bd:28:9a:a7:5e:f4:94:f8:ff:79:5b:2b:
5d:6a:97:f2:bf:04:f7:43:30:f6:a1:bc:60:f3:15:
48:f4:92:32:f1:04:d5:18:d5:a3:12:a0:5f:c6:5d:
45:a9:bb:45:3c:e6:03:fe:0b:1d:86:e6:69:48:14:
ae:40:d3:bb:f9:ac:e3:a0:ca:9b:56:70:69:6b:40:
e5:ac:21:39:7c:91:f6:ba:ad:24:0a:27:db:1b:3c:
14:d4:88:fa:63:8d:c3:35:d5:76:21:63:8a:96:68:
04:ce:0a:57:15:7d:31:1d:41:78:0e:b0:56:36:3a:
7a:cc:34:12:79:55:eb:ee:e8:06:4d:ad:68:90:1f:
79:b7:1b:aa:96:65:36:96:52:4c:a3:8e:4b:c9:da:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:15:18:A0:F3:48:78:F6:94:2B:EE:A0:2F:8E:A5:45:D1:F1:65:BF
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/3AB1C050E13911F0A327D96A6F6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b60:e210::/44
Signature Algorithm: sha256WithRSAEncryption
90:fe:43:2d:a4:1f:07:ab:a6:c2:58:7d:16:a3:8f:d8:a6:80:
c8:f0:d3:5d:20:07:a7:0a:ce:be:14:da:f2:31:a5:aa:c2:2c:
2c:b2:a2:b0:3a:be:23:cb:6c:94:5b:a0:1c:87:4e:3f:08:5b:
00:6f:cd:1d:b9:4a:94:ea:94:82:85:4b:4d:99:15:aa:e4:f6:
75:48:b0:97:60:ab:75:0e:10:66:89:92:c7:9b:f9:c1:b2:cd:
95:75:57:61:3c:73:68:ed:e1:41:ce:cd:24:2b:de:2e:b9:ef:
3d:68:eb:60:05:ed:a2:10:75:f2:dd:23:e8:b1:0b:9b:8d:13:
66:b8:bf:dc:86:71:0d:f0:37:47:95:4f:cc:dc:5b:b8:43:72:
ea:98:de:34:3a:e0:69:93:4b:07:0f:36:a1:cf:52:67:33:ff:
27:42:0d:56:a1:be:e3:3c:78:91:b9:a5:e7:9c:51:87:dd:2a:
06:9d:1b:1f:ce:ed:73:bb:a2:94:ab:bf:f3:78:f2:08:a0:c9:
c9:e3:b6:64:77:3d:1d:18:c5:8d:3c:02:4a:54:1e:fd:d1:c9:
c6:45:a1:6e:08:a9:8a:9d:cd:a6:32:82:21:c4:32:d9:66:b1:
63:e2:e4:03:29:84:ee:4f:7e:87:20:7d:4b:80:84:c5:59:91:
c3:72:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:08:54 2026 by rpki-client