This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
File: 7D2D672CDED711F0AB94945E506F56BC.roa (raw, json)
Hash identifier: u2zduMkx4xhg9DLF082d9hmsAswVdTWy9LumUJPHJOI=
Subject key identifier: 5E:76:DF:D0:26:E0:C8:49:C2:8A:9E:B6:20:95:FD:A8:C7:57:64:10
Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Certificate serial: 07
Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
Signing time: Fri 26 Dec 2025 03:11:19 +0000
ROA not before: Fri 26 Dec 2025 03:11:19 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 149014
IP address blocks: 45.146.112.0/22 maxlen: 22
45.146.112.0/24 maxlen: 24
45.146.113.0/24 maxlen: 24
45.146.114.0/24 maxlen: 24
45.146.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 05:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698
Validity
Not Before: Dec 26 03:11:19 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=694dfcd7-8c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:24:eb:85:6a:a2:ee:f0:77:12:b3:99:b2:
7a:56:b4:f9:a7:4a:28:29:3e:91:07:ed:b4:17:47:
b3:5a:c6:64:25:52:fb:53:a1:79:80:b5:0e:4e:5c:
91:9f:1a:17:12:61:79:e9:e2:65:42:2b:28:b0:42:
3b:09:3a:5c:51:08:38:1d:5c:34:e4:a1:4b:3e:ca:
4f:19:60:5f:38:9c:81:b9:b9:7a:13:b0:62:01:13:
19:16:63:7d:9c:6e:9f:d6:31:1a:0b:30:c3:a6:a6:
a5:4a:f0:90:96:c5:8c:d3:ae:dc:b0:9d:39:84:6c:
8b:01:ca:44:fe:82:9b:77:a2:53:04:48:4c:15:35:
33:fe:ac:71:1d:61:4e:ba:93:e3:c9:6d:f2:d2:06:
80:93:2e:51:ef:26:f0:88:b9:68:b7:27:a7:1c:e8:
bb:37:a8:63:27:a6:37:8f:e0:77:3f:6f:49:65:61:
c7:e8:f6:70:8b:15:7c:22:13:ef:be:54:c9:83:25:
9d:a1:d8:64:e6:03:b5:55:65:89:6b:a4:17:e4:34:
06:16:f0:90:74:d1:9b:ca:3d:f0:15:24:b6:1c:d6:
ae:d6:df:be:20:12:9d:7e:f8:96:b8:8a:58:51:ee:
a8:75:6d:97:60:6f:53:5f:b1:6c:b5:67:5c:76:86:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:76:DF:D0:26:E0:C8:49:C2:8A:9E:B6:20:95:FD:A8:C7:57:64:10
X509v3 Authority Key Identifier:
keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/7D2D672CDED711F0AB94945E506F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.146.112.0/22
Signature Algorithm: sha256WithRSAEncryption
25:af:ff:02:74:4f:93:3d:53:ca:ad:e6:11:8d:87:22:a9:85:
43:7e:ba:71:3e:3c:b6:8c:8a:d8:0c:45:69:36:a4:92:53:01:
d0:a2:39:bc:0a:c3:c7:8e:87:7c:2f:48:1f:33:8b:dd:fe:aa:
d6:a8:d4:c4:2a:ce:f6:d7:e4:7e:47:10:61:2f:43:97:61:7d:
7a:cf:3a:45:60:55:a0:a6:1f:9f:36:83:1e:be:8c:68:49:cb:
32:35:e3:a7:96:ac:6d:af:1f:3f:0a:e0:fd:67:25:68:76:bc:
b5:5b:71:82:5f:72:21:b8:96:81:02:92:18:cf:64:98:96:13:
c4:f0:ee:17:69:bd:a0:e5:44:c6:0c:18:a8:33:4e:87:5b:75:
ae:dc:ed:89:35:bb:39:47:b5:9e:c8:2e:63:05:bd:9d:d9:1a:
3f:ac:ad:af:33:bd:0e:8a:02:05:75:27:bb:6e:c8:47:84:14:
59:5d:c4:93:ae:e0:e8:b7:3d:4f:15:c9:88:70:cc:67:ec:b7:
42:47:a2:ba:58:99:cd:32:97:f0:a3:5f:7b:a0:a3:23:f9:c5:
2a:ec:9e:04:2f:da:1a:35:93:1b:c6:f6:ce:d1:6a:85:2a:fb:
fe:5f:fd:4a:4c:64:67:aa:d0:4e:72:51:4e:64:8a:7d:84:6a:
77:b6:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:30:31 2026 by rpki-client