This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/FA9003D2D76B11F095EF502678D3641D.roa
File: FA9003D2D76B11F095EF502678D3641D.roa (raw, json)
Hash identifier: Ykp2UN9GPMyXKOTVb5r0Mqvneu3EgQYlO7QLXYUBEi0=
Subject key identifier: 52:BB:D2:E9:71:43:87:2D:88:89:1F:7B:7B:E8:C8:9C:B0:C5:F7:6F
Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Certificate serial: 8E
Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/FA9003D2D76B11F095EF502678D3641D.roa
Signing time: Fri 12 Dec 2025 15:05:22 +0000
ROA not before: Fri 12 Dec 2025 15:05:22 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153755
IP address blocks: 163.223.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 05:43:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Validity
Not Before: Dec 12 15:05:22 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=693c2f32-032d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:d4:35:40:ad:f1:f5:1f:17:e9:84:cb:c7:
20:7a:7b:cb:64:89:a9:50:c1:69:39:0e:38:15:9f:
50:eb:e3:76:c3:fa:b1:21:79:4c:e1:b2:c2:35:87:
6d:f8:d2:14:e3:be:3b:b0:35:a9:4b:44:fa:69:e9:
a5:d9:69:de:1f:65:94:f8:02:da:1e:0e:b4:8e:57:
7c:e0:ef:36:fa:4c:06:f7:e8:d9:e2:b4:d3:9a:5a:
a2:0f:3a:d7:c1:ac:9d:7d:5f:33:bc:51:cb:62:57:
b7:9b:4e:3b:b6:56:f3:de:d0:5f:fc:c8:22:a5:ec:
08:b5:12:c4:47:2f:75:0a:d3:85:47:7f:82:4a:7f:
d1:f0:4d:02:13:eb:52:68:39:c3:15:99:02:36:7d:
7f:29:a1:21:bc:47:3e:02:a6:aa:d0:c8:43:5e:0b:
40:5c:5a:a2:b1:23:1c:da:c2:9b:fb:65:6f:ae:99:
6b:ab:93:4b:f5:46:e7:46:8b:b3:02:87:0c:a8:4b:
75:84:e5:44:67:b0:ba:03:2d:e3:49:36:cb:84:95:
9d:07:9d:0f:b6:d8:51:0b:65:9f:0e:b0:08:08:cb:
72:44:13:dc:be:d9:12:f6:ed:84:5a:fa:5d:49:41:
8c:4f:38:d8:ae:23:b4:3b:d4:2a:5f:c3:19:a8:e6:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:D2:E9:71:43:87:2D:88:89:1F:7B:7B:E8:C8:9C:B0:C5:F7:6F
X509v3 Authority Key Identifier:
keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/FA9003D2D76B11F095EF502678D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.241.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:83:e2:ce:0f:43:64:49:33:50:fe:83:b6:67:b5:a0:d1:7f:
1e:b6:b7:a2:b5:60:80:a7:7c:02:12:56:d2:18:54:7d:b9:6a:
11:08:87:78:e0:05:95:48:67:42:e6:0c:45:8f:76:62:b6:3a:
3b:26:80:29:e2:2f:84:03:60:60:7e:00:47:52:73:54:83:8c:
ad:78:67:b9:9b:06:2b:6a:e1:aa:fd:4f:76:24:f4:bf:eb:ce:
42:5f:34:8c:25:47:51:e5:64:79:52:43:ce:10:a9:98:03:ba:
6b:57:92:db:60:2f:dc:16:3d:0c:bf:e4:bd:82:ce:88:63:b1:
c3:cc:9d:8b:50:4b:68:9f:56:b8:21:62:45:10:3d:d9:ea:31:
f6:9b:07:63:49:43:74:d0:d2:9a:35:aa:cd:0d:24:a4:2b:8d:
81:26:2b:73:00:b3:d7:30:e4:d1:a2:f8:cc:e0:19:82:d9:a4:
f9:87:be:53:96:e9:1b:02:a0:1c:be:4c:71:bb:b9:3b:a3:6a:
dc:38:c3:b9:e9:76:21:74:2b:94:6e:82:50:24:e0:17:55:45:
5b:a8:83:19:31:ab:58:51:e8:ce:89:91:30:c4:e6:29:a0:5f:
d3:e8:d2:46:78:68:94:f9:22:72:d0:85:4c:7d:93:c4:8f:41:
cb:2b:4a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:45:21 2025 by rpki-client