This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
File: 1CED22CCEEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier: UnTioPkbCdnaHVXem2L8C99cFYpykfmfVRNN6wCbfGE=
Subject key identifier: D4:BC:36:99:7C:DE:B4:E7:81:07:4D:91:97:AC:01:68:50:55:4D:64
Certificate issuer: /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial: 1B
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
Signing time: Sun 11 Jan 2026 08:18:30 +0000
ROA not before: Sun 11 Jan 2026 08:18:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147176
IP address blocks: 138.252.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Validity
Not Before: Jan 11 08:18:30 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69635cd6-3b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:5f:f0:b4:d1:84:f9:3d:37:9e:99:f2:25:
7f:83:eb:d4:33:bc:c7:06:7f:4d:f5:90:cb:d4:4f:
1d:ac:e1:bd:05:6e:6c:1e:37:a0:df:a8:dd:e2:f1:
6e:0e:f7:1a:62:d3:22:71:71:01:1f:09:e9:2c:0f:
b6:3a:69:15:08:57:c6:17:67:09:18:45:f4:af:89:
be:a1:26:cf:1f:c1:dc:38:13:8e:30:c8:3c:d9:c9:
72:97:f4:18:d1:3d:c9:22:28:82:23:8c:b7:7b:e8:
8e:b3:40:7a:25:c1:f0:9b:7a:ec:45:da:ee:0d:0a:
18:b4:55:72:fd:91:42:37:97:37:bb:b3:cd:c9:a5:
33:12:c8:56:bc:b1:41:86:c3:51:8c:87:8d:52:c0:
7f:28:b1:04:4c:be:f9:36:68:d1:be:39:a1:9c:00:
c1:bd:e8:8f:e8:57:29:9e:97:b0:e9:9d:f4:17:9e:
41:8d:4a:21:74:af:37:97:2d:ab:09:f5:81:81:28:
45:dd:8f:2e:22:76:21:92:ac:24:54:34:bf:20:ce:
57:bb:99:0e:90:a6:3b:21:05:9f:3c:ec:73:5d:36:
79:d8:bd:06:42:b5:64:da:4f:f3:4f:4e:67:b2:78:
5b:26:13:1d:13:74:ae:03:06:82:20:eb:45:5a:42:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BC:36:99:7C:DE:B4:E7:81:07:4D:91:97:AC:01:68:50:55:4D:64
X509v3 Authority Key Identifier:
keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:03:6a:4b:eb:0c:ab:af:59:36:11:7c:75:80:0b:d9:e3:10:
db:fd:c2:70:74:64:bb:bf:6a:16:23:a4:6c:a7:8f:c5:75:0d:
a1:51:f7:24:de:c6:d1:77:3b:de:50:a9:dc:56:0f:a3:4e:dd:
73:a4:77:e8:3c:d5:0e:2b:d3:6c:7c:a8:c8:26:da:41:5b:37:
d2:3b:37:61:35:f5:72:c9:d8:dd:5d:82:91:37:3e:95:b9:6a:
c9:a8:f1:be:97:c0:4a:71:fa:60:bb:84:4c:40:f1:34:05:e2:
32:28:fb:eb:8f:0e:ac:d2:67:81:9c:3c:cb:a1:e3:ca:30:68:
1f:e5:88:66:4a:03:14:7c:98:68:7f:1f:0c:5c:67:b6:2e:1c:
47:6a:6d:df:ad:61:10:b6:bf:ba:00:49:6e:f7:ca:a4:a7:a9:
64:95:d6:ca:4b:18:dd:bc:2e:ed:0a:f9:9d:5a:e1:2e:f2:b3:
74:25:9a:c6:88:ea:96:68:dc:95:82:a3:0a:54:41:9c:62:f4:
fe:d7:ea:19:c5:c5:0a:dd:d1:99:ca:21:d9:91:2b:7f:4e:e8:
d5:b8:7e:40:82:05:ba:dd:6c:74:2e:fc:e8:cd:a4:a2:a7:48:
ef:15:6b:db:18:63:31:02:4e:46:63:33:69:aa:ba:be:be:5c:
86:47:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:42:51 2026 by rpki-client