This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/703D5E5CE0D811F0B739A402566F56BC.roa
File: 703D5E5CE0D811F0B739A402566F56BC.roa (raw, json)
Hash identifier: cSsHW1AQDnZTmkEcOf3VstoK1IJ7Pm8UEACcU3WkeZk=
Subject key identifier: 0A:A3:FE:13:88:13:2E:7B:5E:0C:42:65:57:29:BC:41:A5:5C:8E:C3
Certificate issuer: /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial: 63
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/703D5E5CE0D811F0B739A402566F56BC.roa
Signing time: Wed 24 Dec 2025 14:54:25 +0000
ROA not before: Wed 24 Dec 2025 14:54:25 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 152475
IP address blocks: 79.109.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 19:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Validity
Not Before: Dec 24 14:54:25 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=694bfea1-a5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:71:13:72:f5:ac:b2:09:b8:8a:f4:2e:bb:21:
0f:38:71:8c:c2:53:f9:09:32:62:1f:c0:23:48:28:
33:99:17:c0:46:2d:54:52:9a:f3:a6:d0:b6:b8:47:
1d:65:4d:06:4e:08:4e:23:b2:81:f9:c7:56:cd:11:
e9:05:3a:47:14:64:40:27:f5:d4:27:ed:0f:cb:ed:
68:b0:83:26:43:60:90:4d:70:aa:ec:e2:f2:dd:d5:
63:38:47:93:0e:69:e0:50:74:65:97:6c:21:d1:34:
75:ef:06:12:da:84:6a:8d:85:8d:89:23:c5:5f:f5:
c2:37:09:85:8f:b9:0e:12:d6:6b:20:7c:5b:f1:e2:
0b:f5:33:a7:b3:81:c9:8f:54:0d:d2:40:53:1f:a6:
40:61:2c:1b:f0:31:38:5c:b8:34:08:1d:2f:6c:39:
54:0b:09:f5:ff:68:4c:61:91:86:39:db:f7:2e:11:
89:6c:eb:ac:3e:52:b9:b0:d7:49:3b:fc:ab:9b:95:
cb:5f:13:85:a5:a4:ad:b8:7d:a7:bc:28:8b:f3:30:
b6:b2:6a:74:47:c0:3a:b2:6f:f7:87:82:41:31:ce:
b4:7c:e5:40:43:05:db:94:bc:99:89:71:52:1e:10:
b9:aa:63:f0:8c:56:9f:34:d8:41:c5:ef:37:d9:e2:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:FE:13:88:13:2E:7B:5E:0C:42:65:57:29:BC:41:A5:5C:8E:C3
X509v3 Authority Key Identifier:
keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/703D5E5CE0D811F0B739A402566F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
79.109.228.0/22
Signature Algorithm: sha256WithRSAEncryption
18:54:ae:3a:2d:cc:30:6e:67:cd:e9:ae:ab:8a:60:d2:aa:2d:
dd:a4:1c:ae:0d:43:a3:3d:4b:00:c5:c3:f9:f4:36:20:50:61:
9c:c2:3b:9a:c0:55:f9:8a:86:3b:e6:3a:00:e2:91:4d:97:ba:
61:bd:0e:32:22:56:a3:81:0c:15:b1:e5:87:99:9d:4a:4d:87:
50:d4:8c:e3:2b:af:b1:b9:16:fc:b5:09:f2:b3:0f:a2:c9:55:
98:ae:b0:8d:cb:5c:5a:c1:e8:56:b4:67:93:5c:a5:db:a0:c0:
70:f5:d0:9d:aa:8a:2a:c2:b1:f5:d1:e6:97:3c:c7:97:39:42:
1f:6e:e8:21:28:7d:27:db:29:08:0b:fc:dc:f6:1a:26:e6:a0:
6a:f1:a8:86:a7:a7:83:11:73:66:85:71:0c:7c:a5:4e:07:af:
87:f2:5e:b2:fd:32:4b:46:f1:3f:43:b3:41:f5:c4:66:cf:d3:
f3:fa:cf:6d:4e:9a:61:75:c8:bc:f6:f8:24:45:cf:09:03:dd:
bf:47:7b:10:6b:6d:18:29:57:49:ec:14:be:25:32:1b:0b:11:
5e:82:fc:b9:82:9c:24:f8:16:0c:65:14:bc:27:93:70:d8:7d:
dd:0d:74:c4:14:60:db:89:66:c8:0e:c4:e4:3a:e7:c9:ea:92:
5a:ca:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:23:03 2026 by rpki-client