This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa
File: 87B992CE90E211EDB4035D5EC4F9AE02.roa (raw, json)
Hash identifier: NIlEQdl6PAFgsHqhcHh+K69dvSA0DFG1DmXarAAlQfY=
Subject key identifier: 4E:56:4F:EF:C8:DF:1D:70:7D:95:58:93:AD:61:0F:14:77:08:A0:12
Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Certificate serial: 25E1
Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa
Signing time: Fri 28 Nov 2025 14:30:14 +0000
ROA not before: Fri 28 Nov 2025 14:30:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139888
IP address blocks: 45.157.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9697 (0x25e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Validity
Not Before: Nov 28 14:30:14 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6929b1f6-5c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:14:79:29:4c:60:09:14:4e:02:df:5e:d2:
0c:3f:99:ae:3c:a9:1f:ef:26:94:44:40:1d:c9:b1:
3b:dc:f5:01:f9:b7:a5:85:04:cb:fb:28:21:1c:bb:
e0:38:76:f9:6c:68:10:37:d4:45:66:57:57:8e:64:
de:53:0d:33:78:b2:d2:42:ac:5f:a4:f8:90:f5:7b:
5c:a5:f4:dc:83:be:af:bd:4d:03:24:0d:9e:7f:91:
c5:88:97:22:29:0c:c3:fc:60:71:07:40:ad:d6:33:
e7:9c:49:99:ae:5d:6c:94:46:65:53:54:a2:d6:14:
ce:e3:46:91:31:ef:13:63:e2:e3:14:5f:64:57:43:
7e:0c:44:eb:a2:aa:25:47:31:9f:5a:dd:7a:9a:9b:
b0:4d:07:f4:e6:d3:3c:df:84:ba:a5:ad:b4:c9:8d:
57:95:97:ba:d9:8e:22:75:cf:2a:d2:4f:fd:15:b7:
f4:7e:da:28:27:6a:a1:a2:c8:0e:76:ee:35:37:56:
cf:85:a5:ff:42:ff:52:a0:bd:fc:bc:ed:26:dc:66:
89:c7:5e:8c:01:05:3a:14:0b:65:41:31:c9:dd:af:
6a:25:5b:1b:a2:33:89:d5:18:2d:08:b1:d5:2f:7d:
2f:19:b4:c5:43:32:bc:0c:86:a3:dd:13:8a:4f:b9:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:56:4F:EF:C8:DF:1D:70:7D:95:58:93:AD:61:0F:14:77:08:A0:12
X509v3 Authority Key Identifier:
keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/87B992CE90E211EDB4035D5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.157.88.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:80:64:6e:91:d9:e5:d2:35:53:12:bc:32:31:6a:a6:8c:1e:
f0:23:5d:e9:c9:be:c2:6d:8f:ea:d2:f3:97:63:85:dd:74:49:
8f:30:2e:72:b0:bc:e3:0d:80:60:de:98:13:b5:c2:b5:09:0b:
22:f5:f5:88:10:29:ba:89:cc:e3:ae:f2:da:2d:54:dd:98:96:
90:91:87:dd:25:91:f3:95:a6:53:a5:5e:ea:2e:61:3b:15:a0:
a4:a3:fd:78:02:37:fc:ea:1f:61:f6:e3:7f:23:2c:97:70:a5:
8f:54:fc:4d:bf:9f:d5:aa:9a:0d:12:67:cb:b8:52:b4:50:6f:
c8:9f:ba:1e:bf:de:2b:2b:c1:79:82:50:97:4b:50:2c:04:28:
da:c9:f9:3c:d6:93:50:8b:9a:4b:91:5e:ae:e0:29:ba:51:0a:
a7:b4:a8:d6:33:93:45:7f:d6:bc:ee:58:fa:9f:6d:1f:5b:78:
d4:41:02:5e:04:3f:f9:0a:97:30:ce:16:e2:ba:98:02:8e:12:
04:0b:b0:ca:3e:20:a6:41:05:28:ec:fa:7c:83:26:ab:8e:e3:
f8:aa:92:b2:83:70:89:2f:cc:2d:13:4d:21:0f:e6:61:dd:1d:
1e:33:04:2d:b9:9c:2d:99:41:ce:f1:b6:a2:45:ee:e7:82:8a:
c9:86:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 19:13:41 2026 by rpki-client