This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/09564342CB4411F08B1A8717C4F9AE02.roa
File: 09564342CB4411F08B1A8717C4F9AE02.roa (raw, json)
Hash identifier: C6KaUYkuXw/EK14wFOYeCZS/hcPJdULPaduyGjIQCqA=
Subject key identifier: EC:72:0C:DF:A3:D0:9B:5C:A1:B4:88:7B:3C:14:B5:97:DB:36:F2:30
Certificate issuer: /CN=A919E94C/serialNumber=52F883667AC9E61FF9C430A8BB950959634D78AE
Certificate serial: 03
Authority key identifier: 52:F8:83:66:7A:C9:E6:1F:F9:C4:30:A8:BB:95:09:59:63:4D:78:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UviDZnrJ5h_5xDCou5UJWWNNeK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/09564342CB4411F08B1A8717C4F9AE02.roa
Signing time: Thu 27 Nov 2025 03:49:13 +0000
ROA not before: Thu 27 Nov 2025 03:49:13 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154215
IP address blocks: 202.133.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/UviDZnrJ5h_5xDCou5UJWWNNeK4.crl
rsync://rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/UviDZnrJ5h_5xDCou5UJWWNNeK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UviDZnrJ5h_5xDCou5UJWWNNeK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E94C, serialNumber=52F883667AC9E61FF9C430A8BB950959634D78AE
Validity
Not Before: Nov 27 03:49:13 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6927ca39-6583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:10:cd:e6:4f:54:33:64:8d:85:88:78:2f:
81:76:c0:19:21:3c:3f:12:99:a4:f8:fb:86:aa:9d:
e7:6c:35:18:02:51:82:80:6f:f1:13:82:86:1e:0e:
11:7f:f3:82:1d:63:be:58:96:55:8d:e5:59:71:7c:
2d:81:ec:0a:64:df:87:31:10:19:9d:2f:4a:27:42:
bf:f9:94:84:6e:9c:02:33:79:66:da:62:fe:54:41:
48:7d:65:ed:f2:50:be:32:af:4c:5e:15:76:34:db:
d4:55:02:e7:42:fa:97:3b:d7:7a:e1:23:65:a2:a7:
ea:ff:55:f5:5d:ec:fb:40:4f:36:92:51:f3:e8:95:
9e:71:14:9f:d4:bd:a6:45:45:ab:91:7f:4e:cd:49:
00:e1:ba:37:1a:d2:70:d5:49:9d:74:8f:33:00:2e:
cb:4c:f2:98:49:eb:67:1f:c9:5c:ee:59:c8:e2:d8:
00:f0:6f:2c:0c:86:ed:7f:70:1f:8a:23:a8:ff:22:
7e:47:9a:4f:87:3d:24:65:98:9d:64:4c:e4:21:e3:
9c:bd:f0:05:98:18:67:c1:59:4f:ea:6c:97:8a:9f:
a0:88:6f:43:50:8d:ca:58:87:00:e0:37:af:e7:17:
ac:43:ed:dc:56:93:c9:d9:62:ac:58:e4:4a:28:cb:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:72:0C:DF:A3:D0:9B:5C:A1:B4:88:7B:3C:14:B5:97:DB:36:F2:30
X509v3 Authority Key Identifier:
keyid:52:F8:83:66:7A:C9:E6:1F:F9:C4:30:A8:BB:95:09:59:63:4D:78:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/UviDZnrJ5h_5xDCou5UJWWNNeK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UviDZnrJ5h_5xDCou5UJWWNNeK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/09564342CB4411F08B1A8717C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.133.94.0/23
Signature Algorithm: sha256WithRSAEncryption
62:aa:96:6a:8a:a4:f1:7b:ae:51:1c:bc:ea:b7:99:f7:2d:e2:
58:2d:61:b9:a1:4b:97:85:5f:8f:25:6a:43:30:e8:90:fa:b9:
0b:c8:04:75:74:ce:67:55:44:04:f4:e1:16:32:e6:35:7a:03:
b7:21:a0:b7:a3:cb:97:9b:fb:ab:17:c6:43:d4:4e:69:52:37:
2b:17:e2:26:72:e7:34:a8:f2:cc:3d:48:4b:44:2a:c6:62:40:
d2:00:d5:c8:ad:44:e6:b5:8f:e8:3a:99:89:7c:16:28:76:e5:
eb:40:26:36:1a:10:23:b5:f0:99:84:4a:d8:ff:25:1f:5d:40:
d6:f9:cb:18:92:fa:46:75:4d:88:50:90:e5:53:57:1d:ce:4c:
12:64:48:f7:e3:d5:e0:30:46:e8:53:e4:62:4e:b3:da:30:73:
8d:4a:92:9b:10:fe:1f:88:28:61:4e:bb:e2:d4:49:c9:d5:99:
d9:59:aa:44:8f:bd:7b:3e:63:b9:22:bb:c1:c1:a5:01:1d:7e:
59:ea:86:ce:a1:10:c4:7d:e7:5b:e5:90:22:9d:0c:d9:bc:71:
c8:e8:47:67:d6:25:73:cf:e8:b5:dd:36:02:51:be:67:1a:e0:
f4:91:8c:ca:ae:0f:dc:04:f9:ad:08:1a:c7:17:e7:cd:8b:d4:
e4:85:63:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:27 2025 by rpki-client