This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/EE2DC576942811EEAA69EB54C4F9AE02.roa
File: EE2DC576942811EEAA69EB54C4F9AE02.roa (raw, json)
Hash identifier: RUIP1xOFQ+ZDvsWKZV/CHSTe0s5xZpcTqMniDp6vi0k=
Subject key identifier: F2:91:8F:49:9D:45:4B:1C:F2:32:8A:34:4E:6C:A8:32:C2:E1:AE:58
Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial: 07A1
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/EE2DC576942811EEAA69EB54C4F9AE02.roa
Signing time: Fri 19 Dec 2025 03:51:31 +0000
ROA not before: Fri 19 Dec 2025 03:51:31 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 55441
IP address blocks: 14.96.7.0/24 maxlen: 24
14.96.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 21:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1953 (0x7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Validity
Not Before: Dec 19 03:51:31 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6944cbc3-ab00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:8a:69:bb:7c:91:33:08:bf:f9:e1:00:92:
93:9c:f4:74:31:38:02:90:0e:77:90:c7:4b:94:8d:
9a:69:d9:86:f2:cb:18:7e:36:29:c8:fa:05:97:d2:
79:4e:3b:f8:8a:14:d1:f2:19:45:1f:85:37:22:42:
bd:91:45:db:89:08:6b:9d:86:6e:39:d4:4f:48:27:
25:9b:70:82:81:e5:6a:d0:89:c2:b1:d5:67:6a:26:
d2:43:72:30:56:a2:3c:20:1b:3b:f7:a0:ab:06:ca:
aa:ab:cb:5b:ce:df:36:48:b9:97:45:0e:d4:76:65:
18:c2:c1:d8:05:9a:64:ca:aa:49:9c:c7:da:f0:0e:
dc:58:d5:e0:67:8f:de:82:56:5c:93:43:6f:43:51:
de:d3:a8:06:06:34:5f:65:62:44:b1:91:3e:90:b8:
20:40:9d:8b:b7:39:9c:b1:15:18:29:32:a0:8c:2f:
79:53:ba:85:b4:4a:6c:6b:17:fc:26:bf:db:ec:f7:
9b:25:ba:44:6b:69:50:17:2f:35:f2:90:f6:96:c6:
4d:bd:7f:23:c0:36:50:3c:34:77:f0:3d:9c:d0:29:
39:90:e5:b5:90:36:86:49:ad:fb:54:ff:23:7c:62:
55:af:3e:4d:1f:da:80:9a:3e:57:df:6f:2f:39:2a:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:91:8F:49:9D:45:4B:1C:F2:32:8A:34:4E:6C:A8:32:C2:E1:AE:58
X509v3 Authority Key Identifier:
keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/EE2DC576942811EEAA69EB54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.96.7.0/24
14.96.64.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:4f:ae:ce:0c:e8:28:7a:c6:e6:e2:7c:ae:ae:a6:c7:c0:6b:
64:47:5d:f9:90:b5:59:1f:60:55:7c:3f:b3:ca:33:05:23:38:
88:f2:58:fa:c0:ad:84:7a:43:1f:0a:4d:6f:9a:5d:49:5e:3d:
f3:6f:7a:18:1d:40:91:b1:11:61:37:1a:7f:19:67:39:63:ad:
a7:cb:dd:13:e7:cd:70:49:4e:4d:23:1a:e5:88:7e:27:68:6a:
1a:48:f4:64:1d:1c:ea:7b:2a:e8:2f:f8:e6:ae:c9:ad:f7:db:
1c:9f:05:29:98:e2:d5:e6:07:24:1e:7a:2e:a9:b2:f9:1d:65:
b9:cc:ec:ef:66:9d:b5:2f:13:6d:e0:6b:54:c7:73:16:e6:f7:
98:8a:91:aa:07:4e:c5:09:09:c9:47:87:a4:da:35:f3:05:d8:
0f:ba:cc:76:da:f3:72:ca:77:8d:af:6e:59:91:e8:e2:c0:e9:
dc:f7:ce:1e:19:4b:e9:c6:91:89:c3:e1:e2:63:20:e9:40:80:
36:f2:f8:4a:82:e3:23:01:23:82:78:08:f3:98:1d:e1:30:49:
57:05:af:bc:95:7a:31:9d:ce:84:d0:55:e5:4f:c7:fc:a7:6a:
87:09:8f:eb:80:d6:8a:5d:00:70:21:37:df:23:3e:33:66:9f:
bd:72:cb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 23:58:04 2025 by rpki-client