This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa
File: B77A93FE852411EFA67F8144C4F9AE02.roa (raw, json)
Hash identifier: PWkDZi06ADjI6yjBBU4aYQrWTgNSnaqa8au2v37zNL0=
Subject key identifier: FE:22:DF:26:45:5C:9F:90:8E:CC:5F:4A:27:50:3E:9E:F2:D2:52:82
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 25D9
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa
Signing time: Fri 02 Jan 2026 16:14:06 +0000
ROA not before: Fri 02 Jan 2026 16:14:06 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45458
IP address blocks: 147.50.32.0/24 maxlen: 24
147.50.33.0/24 maxlen: 24
147.50.63.0/24 maxlen: 24
147.50.79.0/24 maxlen: 24
147.50.80.0/20 maxlen: 24
147.50.96.0/20 maxlen: 24
147.50.112.0/21 maxlen: 21
147.50.117.0/24 maxlen: 24
147.50.119.0/24 maxlen: 24
147.50.120.0/22 maxlen: 24
147.50.125.0/24 maxlen: 24
147.50.126.0/23 maxlen: 24
147.50.192.0/19 maxlen: 19
147.50.192.0/24 maxlen: 24
147.50.193.0/24 maxlen: 24
147.50.195.0/24 maxlen: 24
147.50.201.0/24 maxlen: 24
147.50.202.0/24 maxlen: 24
147.50.203.0/24 maxlen: 24
147.50.208.0/20 maxlen: 24
184.82.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 15:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9689 (0x25d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Jan 2 16:14:06 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6957eece-7d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:e7:2b:82:c0:d1:8f:e5:cf:e5:ca:0e:50:
60:83:65:da:96:f2:c1:44:08:0b:db:5e:2e:3e:b0:
ca:82:99:48:bb:3d:12:9d:e4:57:89:61:82:19:24:
69:4b:24:9b:b2:05:bb:a0:11:b4:cd:13:c2:11:37:
c4:47:d5:5e:d9:84:42:79:1d:90:7c:62:84:a6:c2:
f4:c8:2f:13:cd:3b:e6:6b:97:69:f6:84:20:cf:43:
9a:9f:80:5a:4e:9b:83:3f:e1:51:32:98:1e:8c:fe:
97:ba:1d:0c:3a:77:5f:c7:b1:cf:61:84:b1:93:3c:
4a:2c:60:8e:68:e2:fb:6a:69:2e:cf:41:27:75:46:
25:1e:4b:a6:66:79:92:7b:c6:2a:37:d7:91:e7:8c:
ae:48:7c:ea:73:8f:67:6b:3d:93:9d:16:90:c1:95:
d7:ff:e4:3e:0f:e8:19:02:1d:87:6e:02:23:36:3f:
a4:90:3c:62:74:fc:a1:c5:75:e6:ed:e8:4c:26:cd:
64:4b:0e:e7:ac:f4:dd:35:83:57:ac:17:80:b3:c2:
09:16:6b:20:5c:45:1a:c9:70:62:1f:19:4f:4f:fa:
5d:38:c1:ce:44:e0:f2:ca:5f:56:48:e0:a3:ea:87:
8d:80:06:92:2b:b5:31:65:21:29:3a:2e:85:d5:9b:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:22:DF:26:45:5C:9F:90:8E:CC:5F:4A:27:50:3E:9E:F2:D2:52:82
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/B77A93FE852411EFA67F8144C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.32.0/23
147.50.63.0/24
147.50.79.0-147.50.123.255
147.50.125.0-147.50.127.255
147.50.192.0/19
184.82.128.0/21
Signature Algorithm: sha256WithRSAEncryption
77:bd:97:14:21:0d:82:a6:ba:03:ba:9f:f8:58:54:78:77:4e:
18:27:b1:9f:2a:71:ff:e0:ac:d1:76:96:13:bb:24:54:80:50:
cb:ac:98:4b:15:32:d4:e7:4a:5a:7b:46:3f:ea:0a:54:58:7b:
5f:2d:68:e6:5f:a1:41:b5:09:dd:ee:04:61:0a:1e:c7:14:94:
f4:5f:ba:a4:86:26:8a:88:99:a5:a5:a5:1d:81:53:51:da:3c:
00:15:94:ac:44:ab:12:f6:82:76:61:67:b2:76:77:8e:c8:fd:
72:ae:0f:25:ed:54:fd:74:aa:f0:57:b5:22:70:63:e0:76:cc:
e9:e9:e0:c0:a3:b9:e4:24:6f:28:3e:68:3a:b6:d2:97:2a:8b:
63:af:ad:df:a0:99:f6:2a:1c:26:74:1e:c1:d3:c9:50:b9:4b:
e7:42:7a:2e:0f:07:fd:5f:3b:ce:1f:12:58:5a:f7:0d:d0:0e:
1b:38:ab:66:7a:6b:83:3d:c1:86:8e:b9:2e:b6:e2:6b:5e:e6:
e4:03:c2:8c:5a:4d:7c:e0:03:1e:a9:d6:06:7d:f5:32:fe:1f:
be:c9:c6:3e:62:c9:94:c7:77:4b:ee:72:26:70:4c:09:c2:0f:
9d:10:f4:af:52:3e:e5:fc:17:9c:1d:05:6d:8e:3d:50:5c:7e:
ae:f6:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 05:56:58 2026 by rpki-client