This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
File: EAA5793C367411EF98F49F1CC4F9AE02.roa (raw, json)
Hash identifier: 1hUCax5WiGiWQgbYzegA6fFS1jIG16Os9zx/NpFktvA=
Subject key identifier: FE:74:5A:7C:E0:AE:CD:68:55:E4:D4:84:0F:AD:E2:8E:D3:4B:90:3A
Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Certificate serial: 019E
Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
Signing time: Sat 27 Sep 2025 04:02:10 +0000
ROA not before: Sat 27 Sep 2025 04:02:10 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151779
IP address blocks: 202.27.114.0/24 maxlen: 24
2001:df2:da40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Validity
Not Before: Sep 27 04:02:10 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68d761c2-2bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:5d:c0:d9:6d:2b:9c:b5:f7:dd:92:2f:18:
69:3d:be:8e:6e:66:b5:7c:f8:c4:7b:94:e1:2e:fd:
f8:44:e6:d6:ec:45:70:83:6c:a0:82:0a:d0:81:1c:
ce:10:5d:cd:5d:ac:ea:5a:58:e1:df:90:3b:6b:53:
d8:75:da:0f:63:73:81:21:a2:80:1d:be:6c:10:e6:
c0:56:ff:da:51:51:bb:44:fa:7b:75:0f:b9:cf:21:
17:8d:3d:a6:c3:ab:b2:a3:4f:11:28:ef:8a:02:41:
6b:24:be:ed:4a:7f:f0:05:37:1a:c7:a3:21:47:41:
bf:bd:3e:da:c7:40:e8:e7:17:80:49:25:3d:71:52:
9a:92:1c:68:b4:0b:41:1b:23:55:e6:fd:06:5d:b5:
b2:e1:61:ef:b7:45:1e:51:18:2b:cc:f5:c0:cd:9d:
da:f1:87:be:a9:84:ff:40:0a:8c:0e:b8:98:a3:f1:
2e:91:f2:3c:b0:20:00:17:be:c8:45:c2:3a:b2:ef:
ac:5a:8d:d6:fe:fc:69:df:37:af:fc:99:df:f7:df:
18:d8:6c:88:e3:93:4f:d5:e2:ee:71:d6:86:d7:49:
69:f2:71:25:fb:4f:cb:d9:f2:65:46:18:aa:bf:c4:
11:2d:e7:44:d1:9a:30:f0:69:9a:eb:58:5c:78:c6:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:5A:7C:E0:AE:CD:68:55:E4:D4:84:0F:AD:E2:8E:D3:4B:90:3A
X509v3 Authority Key Identifier:
keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/EAA5793C367411EF98F49F1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.27.114.0/24
IPv6:
2001:df2:da40::/48
Signature Algorithm: sha256WithRSAEncryption
93:6d:9a:5e:05:19:4f:7c:b1:e7:8f:96:ec:04:61:b7:13:33:
86:7c:a9:4a:1a:fa:e9:50:9e:af:53:7f:99:e4:40:ca:27:af:
97:ee:c6:3a:78:0f:4f:ae:cc:bc:b3:67:5b:7d:99:2c:6e:02:
46:94:e7:b8:d4:61:24:43:74:c5:e7:40:55:39:65:ab:47:4b:
af:c4:92:3e:84:0d:c0:57:ed:70:5c:6a:93:a7:16:0e:b5:a7:
e7:b4:3e:7a:8c:2d:e6:2b:e9:12:60:25:dd:33:65:da:4a:51:
58:7b:15:93:f5:b2:51:bf:9b:a6:ce:2a:17:3f:ab:d5:26:70:
e5:3c:8c:b8:ae:3f:c7:2e:e2:6a:de:5a:03:e6:2a:1e:5c:62:
49:f0:8c:e4:7d:c7:73:86:8d:8b:72:24:e1:64:ea:78:e5:37:
57:f3:96:dc:3b:20:23:25:62:4e:45:b6:27:ec:1e:0c:00:fa:
5a:fe:58:0f:b4:15:87:91:e7:5e:90:2a:99:8b:1b:a3:31:55:
9c:8a:da:ee:42:fb:70:5c:21:19:5b:39:cb:4c:4d:69:2c:07:
6e:b7:3a:0c:a8:85:0f:a5:f4:ba:e6:f0:5a:43:b9:d2:0f:61:
ba:85:29:55:97:95:23:17:cf:7d:9f:33:87:c3:5e:19:2f:c6:
a5:03:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:48 2025 by rpki-client