This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/0A6F23BCD89011F0809DF24792D3641D.roa
File: 0A6F23BCD89011F0809DF24792D3641D.roa (raw, json)
Hash identifier: w54n3xroRGH8dke7e/Dx0FmQj9Q9lWiOIK95NdES2bA=
Subject key identifier: F8:BB:2E:B8:E6:0A:37:0E:1D:B7:55:4F:EF:26:0B:EB:CD:BE:AC:70
Certificate issuer: /CN=A9142127/serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Certificate serial: 04
Authority key identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/0A6F23BCD89011F0809DF24792D3641D.roa
Signing time: Sun 14 Dec 2025 01:56:01 +0000
ROA not before: Sun 14 Dec 2025 01:56:01 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 4049
IP address blocks: 157.85.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142127, serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Validity
Not Before: Dec 14 01:56:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=693e1931-de6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:13:f8:06:9e:73:84:85:66:c3:83:5d:9f:08:
4f:79:51:3a:34:52:2a:b6:01:a5:62:8b:39:76:a5:
a7:ff:97:e2:50:e5:8c:15:6e:59:2c:21:c8:66:90:
4d:d4:7a:c1:59:06:9a:b7:fc:60:b5:37:fb:01:6c:
33:52:cd:cf:b4:b5:39:00:84:de:40:7a:c0:0b:78:
61:ad:91:55:27:16:13:08:03:da:11:34:52:35:87:
5e:6f:6d:89:df:18:31:6d:fe:8e:13:4f:15:26:a8:
3f:0a:63:f7:e4:dc:05:05:2f:3e:f4:39:43:78:b9:
60:47:75:9c:bc:48:23:8c:4c:ed:25:69:e7:b2:2f:
85:ee:92:0d:05:f5:20:89:4d:58:98:cb:16:ec:79:
a9:7d:cc:ba:83:1b:3b:e4:89:3e:89:df:71:ad:d9:
3b:5e:81:90:0f:05:f5:56:85:12:65:da:a1:09:80:
80:58:aa:e0:1f:b1:4d:d4:3c:50:bc:44:c1:64:b2:
c2:d5:e5:33:22:80:fd:cd:3f:a1:63:10:01:8b:cc:
c2:9e:b5:cd:54:09:c3:1f:a5:47:bf:68:94:39:90:
79:1a:fc:ea:b4:b6:cb:fc:8a:ad:8c:e3:6b:6a:e7:
ff:d5:a9:2e:e5:a9:9a:33:c6:df:7d:d8:54:d7:89:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:2E:B8:E6:0A:37:0E:1D:B7:55:4F:EF:26:0B:EB:CD:BE:AC:70
X509v3 Authority Key Identifier:
keyid:EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/0A6F23BCD89011F0809DF24792D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.85.112.0/20
Signature Algorithm: sha256WithRSAEncryption
15:e5:2a:31:af:6d:b0:f4:13:c5:12:49:7a:8a:77:04:e2:ea:
cd:93:5b:b1:62:11:87:4c:60:92:6e:09:98:9d:54:eb:c2:e4:
06:23:2b:dc:41:38:55:0f:00:00:cb:4e:5d:64:b2:91:a1:69:
0d:86:d0:63:d6:03:a8:c9:8f:51:4c:0d:da:85:74:9c:68:b1:
db:8a:bc:87:7a:a2:6d:aa:81:19:92:8d:9a:8e:49:89:86:bc:
81:4d:fa:96:14:f1:c0:6a:b3:c9:74:89:af:b7:30:92:0a:e2:
0e:fe:91:c3:dd:50:88:53:4c:37:01:e5:79:43:d1:12:68:ea:
d7:1e:70:db:c6:62:d6:72:bc:15:75:df:da:63:be:7e:64:da:
f6:2d:d3:8e:79:72:1d:ec:84:de:8b:67:97:5d:f9:3c:19:63:
cc:39:c3:e5:7c:86:95:dc:8d:7d:6c:76:b3:f8:2e:75:25:db:
7c:2a:fa:7f:d9:97:dd:0b:ad:56:99:e6:4b:de:0d:16:9e:c3:
9d:e3:91:86:10:c6:ed:9d:22:fb:d1:9c:0b:3c:5d:2f:c5:90:
b2:1c:1a:c5:e7:cf:9a:c7:35:ff:23:0b:04:b7:38:b8:b5:5c:
14:97:9f:3b:d3:5e:0f:e0:5a:a2:62:42:1a:3a:0e:3d:95:56:
6e:3d:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:37:39 2025 by rpki-client