This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/D7A7F3FEE18711F0A8B43181426F56BC.roa
File: D7A7F3FEE18711F0A8B43181426F56BC.roa (raw, json)
Hash identifier: vYKoPSfFLuXVy0A8zTQtYmFtyImPKcp/50daoXBvX1o=
Subject key identifier: 27:26:5C:72:20:B5:31:DB:27:76:9C:CE:9C:F3:38:1A:29:60:EF:F5
Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Certificate serial: EA
Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/D7A7F3FEE18711F0A8B43181426F56BC.roa
Signing time: Wed 31 Dec 2025 12:24:56 +0000
ROA not before: Wed 31 Dec 2025 12:24:56 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152690
IP address blocks: 163.61.48.0/24 maxlen: 24
202.37.166.0/24 maxlen: 24
2401:dfa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl
rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 05:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Validity
Not Before: Dec 31 12:24:56 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69551617-dffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cf:1e:2b:99:c8:86:dc:24:dc:35:08:f5:22:
20:ee:48:59:99:98:9e:f8:d7:df:f1:eb:29:0c:90:
15:b1:42:aa:d8:f2:9b:0e:49:d6:1e:69:80:ef:34:
d6:8d:01:09:d5:36:1c:90:36:f2:7b:37:4f:fb:50:
d9:40:87:0e:44:ce:ca:0f:39:5a:87:69:6c:35:cc:
2d:5a:2c:b7:43:c8:97:c7:f1:d7:61:f6:46:73:50:
9b:0f:13:e8:7f:b7:43:d9:00:f9:aa:cc:97:0f:63:
a1:06:9c:a4:cb:b4:65:d8:2b:1b:03:b8:f2:aa:a9:
8a:8d:ab:ea:38:a9:96:c1:4d:78:da:08:f6:08:2f:
93:18:e1:e4:e7:de:bc:e2:9f:60:82:3a:10:e8:d9:
bd:d0:cb:1f:88:09:2d:f0:cd:2a:5e:fd:3d:85:07:
5c:4d:de:c6:59:f1:95:3d:28:cc:0d:fe:75:4c:ec:
fe:7d:95:59:02:c8:24:d0:d6:73:d9:0f:b4:cf:f2:
68:08:69:a1:88:80:f4:69:06:09:c6:28:3c:d4:eb:
df:06:c2:d6:8d:7d:5a:f9:e1:d7:58:74:6a:32:14:
d7:58:8b:a1:fb:7b:25:90:f0:37:ef:33:da:16:ad:
8c:5a:0d:8e:c7:ad:41:5d:17:d5:15:6e:8a:33:a5:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:26:5C:72:20:B5:31:DB:27:76:9C:CE:9C:F3:38:1A:29:60:EF:F5
X509v3 Authority Key Identifier:
keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/D7A7F3FEE18711F0A8B43181426F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.48.0/24
202.37.166.0/24
IPv6:
2401:dfa0::/32
Signature Algorithm: sha256WithRSAEncryption
19:c9:23:b4:2a:04:0c:41:20:bf:b8:f1:5c:87:90:1a:b8:9b:
75:d3:fd:5d:21:ad:f7:6c:57:81:89:cf:0b:ee:37:8b:b2:33:
31:4f:d9:77:b4:08:28:54:89:1b:1d:23:1e:d5:e2:2d:94:60:
2d:8e:50:09:c0:99:1a:c5:a4:e6:69:b4:63:1b:0f:25:92:00:
69:c1:7a:b9:64:2f:ee:0b:12:3d:9e:58:81:4d:90:a3:2b:56:
0a:1f:50:e5:f3:82:40:61:a3:d5:a3:32:4e:79:92:20:b7:39:
71:db:3d:6e:02:27:2a:d8:70:96:ff:f2:4a:86:8e:62:0d:7b:
05:a8:67:f2:4f:7f:98:8d:e1:86:9c:01:d0:34:06:df:45:42:
10:2c:c5:3c:7a:e2:37:bb:4b:34:01:5f:2c:aa:3e:b5:70:52:
4a:a0:2e:66:d6:fd:da:13:18:c5:39:08:0e:e7:a1:ca:71:ab:
17:fe:0b:cf:4f:60:0e:81:da:d9:2b:33:5b:bd:bc:21:62:88:
6e:ce:29:68:71:54:3c:29:91:da:58:43:63:0a:dc:78:93:d8:
41:be:d4:4d:a7:8c:6e:5d:0a:7a:4c:63:62:c6:9b:bc:a8:61:
96:be:ea:0a:ca:96:d5:05:00:69:ad:65:b8:88:6f:6f:8a:91:
c8:7d:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 15:55:11 2026 by rpki-client