This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/61D451B2C41411F097D26439C4F9AE02.roa
File: 61D451B2C41411F097D26439C4F9AE02.roa (raw, json)
Hash identifier: 44wCJ2MH/ME4Z6tIy4xx9cgeQi0Iq724YgG7y5IrzSg=
Subject key identifier: 98:70:75:61:C9:00:9F:18:EC:FC:B7:64:A1:A0:F4:5A:28:86:7E:8A
Certificate issuer: /CN=A919D594/serialNumber=590EC30BC10B3D5E7CD582618A19B2C1704B0511
Certificate serial: 03
Authority key identifier: 59:0E:C3:0B:C1:0B:3D:5E:7C:D5:82:61:8A:19:B2:C1:70:4B:05:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ7DC8ELPV581YJhihmywXBLBRE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/61D451B2C41411F097D26439C4F9AE02.roa
Signing time: Tue 18 Nov 2025 00:20:27 +0000
ROA not before: Tue 18 Nov 2025 00:20:27 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139248
IP address blocks: 121.46.74.0/23 maxlen: 24
2402:2460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.crl
rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ7DC8ELPV581YJhihmywXBLBRE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D594, serialNumber=590EC30BC10B3D5E7CD582618A19B2C1704B0511
Validity
Not Before: Nov 18 00:20:27 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=691bbbcb-4912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:e8:73:9e:6d:c7:b8:65:d7:d8:96:74:5e:
e7:58:75:3a:84:42:20:21:bf:9e:c5:0f:97:cc:9f:
e2:7a:63:4f:11:93:7d:5c:00:4c:55:26:57:fa:d4:
61:cc:9e:06:54:a2:d4:57:ee:6b:7c:d0:e4:6c:6e:
fd:d5:36:26:1c:af:fa:25:96:45:10:0e:c5:ca:ca:
63:7c:30:90:eb:63:6e:ae:4f:75:53:54:68:b6:03:
b9:0a:b1:c3:40:87:99:55:8f:5d:10:cc:0d:47:30:
73:5d:8b:e6:ae:74:73:d8:37:c7:4e:c7:df:59:7d:
91:46:41:1d:71:f2:f7:78:af:61:9f:bf:c5:e2:f8:
85:3f:69:86:4b:a9:57:61:d6:99:06:52:cd:22:3b:
ea:a6:95:68:6a:39:fc:e0:a1:34:d2:35:53:32:8a:
df:03:ad:f4:41:65:b2:d0:b5:05:e4:04:06:eb:20:
9b:20:86:2a:a3:7a:ea:0c:16:21:d8:5b:af:77:f1:
3a:80:9c:1e:a7:9b:ad:dc:ad:9a:4e:67:10:3e:33:
d1:15:d6:44:65:28:4a:33:16:53:f2:5b:6c:1b:19:
38:3f:2a:a7:39:54:79:91:7c:5b:c1:a1:7c:58:22:
58:ad:7b:a8:70:ee:2f:bc:2d:cb:f6:83:a3:b7:a4:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:70:75:61:C9:00:9F:18:EC:FC:B7:64:A1:A0:F4:5A:28:86:7E:8A
X509v3 Authority Key Identifier:
keyid:59:0E:C3:0B:C1:0B:3D:5E:7C:D5:82:61:8A:19:B2:C1:70:4B:05:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/WQ7DC8ELPV581YJhihmywXBLBRE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ7DC8ELPV581YJhihmywXBLBRE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D594/6B01D5C6C41311F0835DDA71C4F9AE02/61D451B2C41411F097D26439C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.46.74.0/23
IPv6:
2402:2460::/32
Signature Algorithm: sha256WithRSAEncryption
13:31:22:c3:1e:ac:4e:7b:31:8e:86:bc:22:b0:36:c8:f6:38:
65:5b:95:44:32:2d:f7:a4:e3:f4:f1:c4:d6:6a:a4:ba:22:74:
9e:ae:fb:80:44:3c:73:51:06:dc:d3:f2:ea:6a:4f:d1:99:0d:
96:ad:77:80:07:02:03:f8:01:03:20:ca:69:1c:6f:a1:37:d4:
1b:f7:85:a7:08:59:c8:d3:d4:64:71:4e:20:ea:e2:b1:1b:09:
50:3d:7a:25:7d:b4:45:c4:d3:f1:f8:d5:37:d4:84:53:09:f2:
39:50:a1:dd:0d:ad:d7:1a:4e:81:5e:4d:fd:ea:7f:db:8f:a3:
b7:99:45:64:08:10:7c:b5:5a:de:5e:27:67:5b:c0:3b:a5:7a:
7b:06:20:b5:b4:fb:83:e3:00:b4:3a:8c:fe:05:4d:03:be:27:
d5:a8:67:cd:72:1d:0d:a5:e7:bb:9a:c0:db:11:72:1b:ed:9a:
5a:07:24:39:c2:8d:fd:a1:56:f9:4a:26:ad:7b:4e:48:12:57:
fe:9d:f2:55:92:1b:06:8c:c0:5d:17:ef:7e:b7:b3:50:35:c6:
ef:f4:0d:f7:d7:22:14:f4:98:9a:57:51:26:a0:30:11:3e:f1:
2d:23:90:1a:79:66:5c:16:67:81:67:67:b9:72:b5:a9:7f:a5:
15:52:82:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:08:47 2025 by rpki-client