This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa
File: A2EC7F44DC0111F0AD21AAB7586F56BC.roa (raw, json)
Hash identifier: DNgmOb1gD5CLpQzdHYZZFDaQHjowRz5alNY46oUbjvg=
Subject key identifier: C9:91:C8:D1:B8:48:76:4E:6D:85:57:86:BC:F1:44:D6:A2:E3:2E:31
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 215F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa
Signing time: Thu 18 Dec 2025 11:06:44 +0000
ROA not before: Thu 18 Dec 2025 11:06:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154426
IP address blocks: 144.79.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8543 (0x215f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Dec 18 11:06:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6943e043-1865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:1c:88:ee:59:07:09:0d:dc:e8:74:b8:83:
12:94:0d:9e:76:db:b2:cd:a3:2f:2b:50:12:89:1c:
01:48:31:e1:c3:12:2f:00:d0:a9:b5:d1:ce:e1:49:
ef:6d:a4:a2:78:48:8c:e5:5c:ac:77:53:e4:3a:05:
9c:63:03:1d:72:f1:ba:42:27:06:1e:e0:ef:64:8d:
0d:6b:e7:2e:ba:1c:5d:dd:7a:c0:7d:75:1c:b0:66:
77:4d:d0:ec:ef:a4:5f:c7:d2:43:d0:52:bd:b8:e4:
9c:5d:b0:f4:ca:c2:4a:9b:66:47:4d:6e:5b:ac:9f:
c6:b1:6b:ec:91:e2:30:28:d6:07:6f:a2:14:a1:3a:
7d:9f:88:b2:58:f9:76:54:7a:40:69:e0:21:cb:fd:
5d:18:65:41:74:16:65:54:65:a9:58:db:84:7f:32:
55:a0:ff:c2:3b:b5:d0:35:e0:ec:3f:18:fb:38:26:
99:ea:b3:f7:b0:32:d6:69:12:bc:28:0d:e3:54:17:
11:e4:da:45:07:2c:b4:b4:87:41:75:4c:2c:43:2a:
c9:d0:e2:5c:9d:25:9f:70:7e:61:8d:6f:c7:5d:03:
e2:a7:89:68:6c:56:30:b9:4c:08:bd:1c:2a:a9:6a:
d9:7e:ec:ed:ed:f0:40:de:a8:71:07:68:8e:ab:85:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:C8:D1:B8:48:76:4E:6D:85:57:86:BC:F1:44:D6:A2:E3:2E:31
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.114.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a0:ae:ac:3b:7a:13:27:2a:9d:65:a7:c7:be:ae:19:25:94:
76:ad:d1:ae:64:11:6b:9d:b1:16:b5:ba:6a:3c:58:18:bb:21:
a0:ac:3b:cb:49:0d:a0:31:0c:5a:63:2c:5e:57:d1:07:78:54:
63:c2:da:3d:5a:00:68:fe:a8:70:ef:d1:ea:7f:1c:53:76:f4:
ab:e8:16:53:12:c7:ec:02:7b:e4:88:fb:88:03:30:ce:45:38:
f3:9a:c4:4e:77:fb:9b:35:e7:17:8a:88:64:9e:8d:b3:58:9e:
ce:cf:db:36:3e:b3:44:79:f2:7d:b7:bc:40:98:cc:2b:88:8b:
7f:b2:c6:33:26:b6:d9:9d:a8:c1:e7:b5:49:15:e8:4f:4c:1c:
10:c6:b6:69:3f:c4:b0:2d:7e:c4:0e:bb:78:56:36:37:f6:35:
9f:05:06:94:e6:21:d6:3a:94:9e:e3:6b:f8:a8:94:77:ad:e7:
57:d5:31:5e:1b:29:f5:50:94:32:9f:0a:e0:61:cc:5c:3a:11:
46:93:c6:b4:d2:ab:96:a3:c8:d6:9c:37:1b:54:d6:c5:8e:ea:
5a:cf:82:0b:07:96:95:f2:2d:70:e4:ce:37:7f:7a:7d:6d:21:
de:e7:0d:04:9a:c4:c8:15:7c:45:9d:7b:8f:58:6d:7f:f5:b5:
62:0a:4d:73
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICIV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUxMjE4MTEwNjQ0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQzZTA0My0xODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoLUciO5ZBwkN3Oh0uIMSlA2edtuyzaMvK1ASiRwBSDHhwxIvANCptdHO4Unv
baSieEiM5Vysd1PkOgWcYwMdcvG6QicGHuDvZI0Na+cuuhxd3XrAfXUcsGZ3TdDs
76Rfx9JD0FK9uOScXbD0ysJKm2ZHTW5brJ/GsWvskeIwKNYHb6IUoTp9n4iyWPl2
VHpAaeAhy/1dGGVBdBZlVGWpWNuEfzJVoP/CO7XQNeDsPxj7OCaZ6rP3sDLWaRK8
KA3jVBcR5NpFByy0tIdBdUwsQyrJ0OJcnSWfcH5hjW/HXQPip4lobFYwuUwIvRwq
qWrZfuzt7fBA3qhxB2iOq4UHNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMmRyNG4
SHZObYVXhrzxRNai4y4xMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTJFQzdGNDRE
QzAxMTFGMEFEMjFBQUI3NTg2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACQT3IwDQYJKoZIhvcNAQELBQADggEBAGSgrqw7ehMnKp1l
p8e+rhkllHat0a5kEWudsRa1umo8WBi7IaCsO8tJDaAxDFpjLF5X0Qd4VGPC2j1a
AGj+qHDv0ep/HFN29KvoFlMSx+wCe+SI+4gDMM5FOPOaxE53+5s15xeKiGSejbNY
ns7P2zY+s0R58n23vECYzCuIi3+yxjMmttmdqMHntUkV6E9MHBDGtmk/xLAtfsQO
u3hWNjf2NZ8FBpTmIdY6lJ7ja/iolHet51fVMV4bKfVQlDKfCuBhzFw6EUaTxrTS
q5ajyNacNxtU1sWO6lrPggsHlpXyLXDkzjd/en1tId7nDQSaxMgVfEWde49YbX/1
tWIKTXM=
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:45:26 2025 by rpki-client