This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/6D188172BF5C11F098B79354C4F9AE02.roa
File: 6D188172BF5C11F098B79354C4F9AE02.roa (raw, json)
Hash identifier: 9rOfz0fGZwOfsWUHVi4P2XkfYsEnC/j/6V1EYeiIEQw=
Subject key identifier: CF:ED:FA:7E:5D:92:5A:9A:11:C2:17:62:8C:06:AB:A0:22:D5:2D:71
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 358A
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/6D188172BF5C11F098B79354C4F9AE02.roa
Signing time: Thu 29 Jan 2026 04:11:47 +0000
ROA not before: Thu 29 Jan 2026 04:11:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 17579
IP address blocks: 134.75.15.0/24 maxlen: 24
134.75.16.0/24 maxlen: 24
134.75.101.0/24 maxlen: 24
134.75.102.0/24 maxlen: 24
134.75.103.0/24 maxlen: 24
134.75.105.0/24 maxlen: 24
134.75.107.0/24 maxlen: 24
134.75.108.0/24 maxlen: 24
134.75.123.0/24 maxlen: 24
134.75.124.0/24 maxlen: 24
134.75.125.0/24 maxlen: 24
134.75.126.0/24 maxlen: 24
134.75.127.0/24 maxlen: 24
134.75.128.0/24 maxlen: 24
134.75.129.0/24 maxlen: 24
134.75.130.0/24 maxlen: 24
134.75.131.0/24 maxlen: 24
134.75.132.0/24 maxlen: 24
134.75.200.0/24 maxlen: 24
134.75.203.0/24 maxlen: 24
134.75.207.0/24 maxlen: 24
134.75.252.0/24 maxlen: 24
134.75.253.0/24 maxlen: 24
134.75.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Feb 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13706 (0x358a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Jan 29 04:11:47 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=697ade03-bd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:af:62:d6:06:f0:f6:ae:fb:1a:0c:af:d5:
56:c5:c3:15:47:31:f9:bf:42:b9:4e:f2:51:4e:b9:
33:ad:a0:20:1c:10:e6:c0:41:0c:91:4a:3e:b5:28:
0e:15:e0:d2:f1:81:47:16:b0:e5:ed:31:c0:22:06:
b9:6a:98:14:a6:f3:87:cf:d5:ac:79:2e:18:43:29:
ca:fa:f5:88:24:2e:f1:8c:ab:8b:5a:f3:bb:42:1a:
14:cb:c3:15:18:c7:1d:83:ff:15:94:87:73:be:3d:
80:d3:a2:79:1f:f5:e5:21:32:48:69:bc:21:ef:50:
a3:61:5c:7b:2e:6a:c9:68:05:75:ed:ad:d0:3b:9e:
a3:a6:19:ed:38:a6:38:d8:2b:73:5d:67:72:1d:a1:
0e:02:26:cd:af:e2:8d:06:e8:09:76:1a:85:a0:16:
2e:e7:61:56:74:e9:23:77:23:5c:ba:25:e9:1c:e6:
88:b1:14:1e:9c:22:28:42:53:a7:86:33:b9:24:4d:
3d:e8:7a:2d:62:ee:3b:ca:5a:2a:a3:9f:ba:f7:44:
46:32:c8:ef:0c:bc:92:65:da:b2:50:d3:81:02:ee:
8b:48:2d:97:64:3e:9f:81:d2:0b:9e:b5:dc:4a:df:
e7:b8:b4:4f:ad:d8:95:80:34:f8:4f:70:95:40:4f:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:FA:7E:5D:92:5A:9A:11:C2:17:62:8C:06:AB:A0:22:D5:2D:71
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/6D188172BF5C11F098B79354C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.75.15.0-134.75.16.255
134.75.101.0-134.75.103.255
134.75.105.0/24
134.75.107.0-134.75.108.255
134.75.123.0-134.75.132.255
134.75.200.0/24
134.75.203.0/24
134.75.207.0/24
134.75.252.0-134.75.254.255
Signature Algorithm: sha256WithRSAEncryption
4e:f0:df:a0:e6:21:ae:8a:4d:57:d9:4d:21:ff:80:7e:8c:92:
a0:07:35:ee:6d:ff:2e:eb:1e:9f:98:6b:f4:19:12:a2:90:ed:
64:49:88:3f:e2:b8:08:51:d6:e2:fb:9f:84:7a:59:f7:af:d1:
53:c3:a4:ed:4f:1b:08:56:52:c6:29:8b:0d:1e:45:37:d4:1d:
fd:c0:90:a6:c8:0a:36:52:fe:2c:4e:3d:c7:0e:1e:f7:e5:57:
e4:25:cb:e0:a5:37:28:ee:69:aa:a3:5e:c5:d2:0c:26:ff:ce:
20:bc:e9:08:d3:b2:ff:fa:31:ae:fb:a3:6d:ab:8a:1f:3b:b2:
93:64:8b:4d:6a:bf:e8:6d:04:e0:ec:fe:71:7a:34:b4:25:31:
30:5c:35:78:02:85:ac:c1:cb:de:12:86:ae:95:78:4d:a2:17:
f9:ba:70:bc:fd:93:e4:79:da:01:9a:7f:a9:bb:47:ed:b4:87:
1f:d7:9e:2f:c0:98:70:f0:da:91:b3:8c:15:a1:ba:48:10:c6:
9f:d7:3c:50:4a:62:08:34:35:86:b9:91:4c:90:5f:b3:a7:b7:
ae:da:30:34:f2:2c:04:16:de:ac:7d:d6:3b:ae:ec:14:8d:17:
ef:57:f2:bc:e3:ef:d2:13:82:2c:00:24:46:17:93:c6:dc:19:
78:03:1d:59
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgICNYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4
N0FBNTc1OUYwHhcNMjYwMTI5MDQxMTQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdhZGUwMy1iZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZSvYtYG8Pau+xoMr9VWxcMVRzH5v0K5TvJRTrkzraAgHBDmwEEMkUo+tSgO
FeDS8YFHFrDl7THAIga5apgUpvOHz9WseS4YQynK+vWIJC7xjKuLWvO7QhoUy8MV
GMcdg/8VlIdzvj2A06J5H/XlITJIabwh71CjYVx7LmrJaAV17a3QO56jphntOKY4
2CtzXWdyHaEOAibNr+KNBugJdhqFoBYu52FWdOkjdyNcuiXpHOaIsRQenCIoQlOn
hjO5JE096HotYu47yloqo5+690RGMsjvDLySZdqyUNOBAu6LSC2XZD6fgdILnrXc
St/nuLRPrdiVgDT4T3CVQE+7NwIDAQABo4IC7TCCAukwHQYDVR0OBBYEFM/t+n5d
klqaEcIXYowGq6Ai1S1xMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvOUE4NUJCNTAxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNkQxODgxNzJC
RjVDMTFGMDk4Qjc5MzU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdwYIKwYBBQUHAQcBAf8E
aDBmMGQEAgABMF4wDAMEAIZLDwMEAIZLEDAMAwQAhktlAwQDhktgAwQAhktpMAwD
BACGS2sDBACGS2wwDAMEAIZLewMEAIZLhAMEAIZLyAMEAIZLywMEAIZLzzAMAwQC
hkv8AwQAhkv+MA0GCSqGSIb3DQEBCwUAA4IBAQBO8N+g5iGuik1X2U0h/4B+jJKg
BzXubf8u6x6fmGv0GRKikO1kSYg/4rgIUdbi+5+Eeln3r9FTw6TtTxsIVlLGKYsN
HkU31B39wJCmyAo2Uv4sTj3HDh735VfkJcvgpTco7mmqo17F0gwm/84gvOkI07L/
+jGu+6Ntq4ofO7KTZItNar/obQTg7P5xejS0JTEwXDV4AoWswcveEoaulXhNohf5
unC8/ZPkedoBmn+pu0fttIcf154vwJhw8NqRs4wVobpIEMaf1zxQSmIINDWGuZFM
kF+zp7eu2jA08iwEFt6sfdY7ruwUjRfvV/K84+/SE4IsACRGF5PG3Bl4Ax1Z
-----END CERTIFICATE-----
Generated at Mon Feb 16 09:20:07 2026 by rpki-client