This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9C9F0DC6DA5A11F08EBD209195D3641D.roa
File: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (raw, json)
Hash identifier: douuChwE4cVa4UY5ZnkV63EgeOMAXa3nKvyfzbnBXGs=
Subject key identifier: A9:26:DD:96:6C:41:FA:35:16:04:E3:93:B3:7F:BA:5E:CA:5B:F7:AD
Certificate issuer: /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial: 09
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9C9F0DC6DA5A11F08EBD209195D3641D.roa
Signing time: Tue 16 Dec 2025 08:38:36 +0000
ROA not before: Tue 16 Dec 2025 08:38:36 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153528
IP address blocks: 144.79.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
Validity
Not Before: Dec 16 08:38:36 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69411a8c-3b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:55:47:7a:2b:5f:75:1c:6c:54:c4:35:30:
db:8d:20:b3:34:16:1f:9e:e9:11:b3:fc:f9:9c:d1:
9e:49:bd:a3:0a:7b:f2:f7:d3:b5:e9:c7:55:ee:32:
48:8b:e2:6f:92:90:67:81:15:9c:e9:33:81:44:08:
f9:ed:35:76:fb:85:77:ba:e2:3b:48:d6:34:5a:d8:
5f:fe:1c:18:1d:16:8d:4e:59:b7:e3:2e:85:a0:c5:
09:b5:84:6e:2d:63:f8:a6:d4:35:dd:c7:9b:b7:43:
b9:fa:a7:88:1c:e1:38:5d:36:35:89:09:e8:9c:45:
73:74:65:ef:0b:f2:8a:7e:43:29:0b:51:11:62:4e:
9e:e5:50:c1:6e:68:53:e0:bc:32:c6:aa:41:66:7e:
7d:52:ba:94:89:76:01:82:6f:aa:5a:53:47:98:17:
a9:d5:41:8a:fa:2c:f2:d6:09:5c:3c:75:a9:6d:58:
1d:c0:49:38:7a:df:f5:68:d6:46:ef:92:58:71:eb:
cd:ad:3b:d7:14:7f:7a:bf:7f:f6:49:d9:d9:a5:00:
0d:9e:2e:02:79:00:c4:e1:47:a1:3f:46:93:ca:25:
54:60:e4:77:fe:f0:61:54:52:84:8f:79:2b:a5:ee:
3f:56:40:cf:e6:ff:96:cb:6a:61:f5:61:c5:4f:39:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:26:DD:96:6C:41:FA:35:16:04:E3:93:B3:7F:BA:5E:CA:5B:F7:AD
X509v3 Authority Key Identifier:
keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9C9F0DC6DA5A11F08EBD209195D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.133.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e4:ac:33:de:93:0f:d5:68:3b:6d:7d:8f:1a:d1:c6:82:6f:
2d:9d:c8:6b:c7:cb:0a:8a:bb:3b:18:c0:5c:e7:39:98:b9:25:
e2:f0:01:e4:4e:9b:ee:0f:f3:12:fb:58:30:72:53:79:fd:12:
f2:f5:77:ea:d2:9d:e8:35:4e:1b:8c:a9:a4:58:72:de:ff:b4:
97:54:dc:27:1d:93:af:a0:f5:63:e2:11:f5:6f:b5:88:b2:46:
5d:ea:4c:39:36:e3:f4:74:74:c3:3c:bc:37:c6:96:f8:7f:ad:
6e:42:11:93:18:1d:58:df:dc:af:ff:6e:96:59:15:19:47:00:
2a:08:1b:fd:90:04:3b:34:e8:5b:02:e1:14:6f:bd:2e:f1:1e:
e7:02:b9:2c:7c:52:bb:65:5b:bb:8d:fc:1d:a9:67:0a:fa:23:
25:d6:6d:df:1e:f9:ed:7b:54:b1:82:ab:49:e1:e1:ba:0d:91:
e2:03:fe:40:fc:5a:14:f2:82:1a:59:2e:dc:d1:9d:49:4f:ce:
bf:ae:15:41:85:80:f0:0f:e0:0d:01:ac:ce:6d:5f:ab:20:eb:
2e:8d:c9:8e:19:b6:0b:d3:a0:cd:a6:d5:75:53:40:34:05:e0:
bb:87:b9:1e:0d:ec:2f:90:a5:bc:b7:2c:eb:66:30:fd:b9:79:
4d:3d:89:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:57:36 2025 by rpki-client