This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/E047F204A4CC11F0AE32440DC4F9AE02.roa
File: E047F204A4CC11F0AE32440DC4F9AE02.roa (raw, json)
Hash identifier: /yMvW6j9E/MWjUr1yzzTYNvvSQ9WdpdLB7zKcAWxhVY=
Subject key identifier: 76:99:5C:07:EB:45:6D:D8:C1:8C:9A:21:6A:1D:B7:C7:91:A5:3A:D1
Certificate issuer: /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Certificate serial: 34
Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/E047F204A4CC11F0AE32440DC4F9AE02.roa
Signing time: Fri 19 Dec 2025 06:24:47 +0000
ROA not before: Fri 19 Dec 2025 06:24:47 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152699
IP address blocks: 157.85.80.0/21 maxlen: 24
157.85.88.0/24 maxlen: 24
157.85.89.0/24 maxlen: 24
157.85.90.0/24 maxlen: 24
157.85.91.0/24 maxlen: 24
157.85.92.0/24 maxlen: 24
157.85.93.0/24 maxlen: 24
157.85.94.0/24 maxlen: 24
157.85.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Validity
Not Before: Dec 19 06:24:47 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6944efaf-f8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:8e:fa:bb:02:56:97:b6:f5:71:59:51:ba:
ce:f8:3f:b7:67:8b:52:05:50:cb:15:ae:13:fb:3b:
6d:cd:20:a6:a6:af:f9:0c:2c:da:73:98:b6:3a:86:
d9:70:71:9d:87:9d:6e:96:58:e2:91:f1:13:90:f5:
36:6b:be:e9:1e:6d:36:0b:02:b6:ac:40:05:0f:69:
e8:9b:ac:ea:b3:0b:7f:8c:aa:0b:9e:70:3f:72:be:
d7:e5:46:34:90:19:f7:6d:9b:c3:4f:1d:17:7b:f3:
0a:e7:e6:81:65:0d:4f:ec:41:49:e3:01:b6:c2:34:
0f:f3:e2:7e:1c:f1:c6:72:b5:79:06:85:26:96:57:
e6:5a:94:b9:78:4e:29:f4:e4:04:7f:3b:8d:b0:34:
2b:67:f7:c2:c7:c2:e5:49:36:1c:27:99:85:78:34:
de:6c:6f:c1:78:8d:de:9f:09:4a:b2:1a:ea:d0:1a:
52:98:68:c6:53:a0:2e:b3:4b:ad:ff:84:c8:e0:2a:
d5:4c:b9:4e:78:d2:ca:3f:37:42:2c:7c:46:b9:09:
c4:a8:54:03:35:a6:fb:10:9d:e4:79:ce:11:50:03:
80:6a:88:1f:00:5a:0a:e0:af:d9:09:ca:b2:f0:34:
38:a5:51:ea:7d:50:60:3f:b1:e1:a2:8b:ae:c5:94:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:5C:07:EB:45:6D:D8:C1:8C:9A:21:6A:1D:B7:C7:91:A5:3A:D1
X509v3 Authority Key Identifier:
keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/E047F204A4CC11F0AE32440DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.85.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:86:b1:ba:62:94:30:32:1d:97:30:69:3a:0e:41:6e:9b:2b:
a5:6c:60:82:2c:40:6c:5b:fd:5c:74:a2:58:de:63:6c:cc:01:
0c:c1:eb:ca:92:cf:bc:db:b5:a4:96:42:86:38:99:2e:c8:6c:
39:ff:63:d7:3b:5d:24:78:fe:57:b1:9c:06:93:38:01:f2:ae:
35:3b:2e:df:49:24:7a:a5:1e:ca:0c:83:c0:cc:88:29:ca:d6:
a9:b9:e9:9c:83:0d:2b:22:4d:0b:9e:2a:ef:d6:58:2c:0a:c5:
ff:78:c1:57:a9:c7:dd:01:02:9e:a5:c2:e4:fe:2f:35:b8:65:
65:bc:52:b1:41:7a:e9:16:b6:31:7a:28:af:66:f5:68:97:33:
df:6d:da:52:c2:45:57:ad:09:42:89:24:d3:40:20:56:83:5a:
1e:a0:3f:f6:f9:59:0a:8b:68:f9:4a:f7:e4:7b:43:c9:25:e7:
da:e4:7e:77:7f:10:85:10:2b:34:94:60:ee:4b:d5:5d:7f:24:
14:b2:64:97:0c:8a:f3:a3:4b:03:23:89:8f:25:9f:2f:41:12:
58:98:6a:3a:46:38:43:57:f6:42:99:54:9b:b4:9a:67:b4:3e:
e2:44:f1:9e:cf:0f:14:27:33:a3:61:0c:f1:fb:d2:6b:4b:ed:
e8:3c:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:06:40 2025 by rpki-client