This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7744CE40691111F0B8610780C4F9AE02.roa
File: 7744CE40691111F0B8610780C4F9AE02.roa (raw, json)
Hash identifier: Q0fWC3bPxRyRi5oWpOG3gRLSwXCGSgzCMGGkM6gBWnQ=
Subject key identifier: B2:71:B4:D3:AA:A6:3D:F8:32:96:F8:F9:27:2C:65:E7:42:69:FC:CE
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0841
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7744CE40691111F0B8610780C4F9AE02.roa
Signing time: Wed 08 Oct 2025 22:54:01 +0000
ROA not before: Wed 08 Oct 2025 22:54:01 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136173
IP address blocks: 36.255.192.0/24 maxlen: 24
43.229.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 8 22:54:01 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68e6eb88-bc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:c9:1d:2e:89:a8:0a:33:2f:0e:08:09:aa:
ff:ab:cc:4b:6f:5f:30:a3:15:28:2a:c0:e4:b8:2b:
9c:74:e5:de:a6:6d:c6:f5:cf:8b:0a:82:d2:8d:82:
95:62:61:1e:11:94:b5:d7:a0:41:d5:f3:a2:9f:98:
8d:b4:c3:30:6a:bf:48:db:67:78:c2:2f:34:cb:45:
7b:71:c0:dd:cf:06:0a:b3:29:a4:7f:04:90:8e:d4:
9d:56:b0:6f:74:d4:60:e9:3f:a8:43:af:57:04:a1:
d3:a1:8b:46:18:99:84:42:a1:53:cd:0b:2e:26:81:
49:b2:04:a0:d7:84:8d:bf:95:13:03:12:ff:ac:68:
01:ed:11:7d:00:b0:03:b2:62:31:ac:a8:fb:18:18:
09:5d:d3:76:80:06:5e:44:a9:c8:83:d5:4b:93:0c:
ee:3c:31:30:fb:b8:7e:a2:33:ee:0f:64:45:64:36:
bb:49:a9:ab:87:54:73:c2:b8:ee:1f:60:53:98:d3:
c9:22:2f:76:17:5f:db:3d:58:60:a4:b5:37:c4:74:
c2:b8:f5:7d:52:7c:b0:38:3a:2d:57:41:67:3b:70:
cb:72:91:6e:00:2f:ce:0a:cf:14:4a:42:fe:25:25:
bc:8b:68:6f:15:8a:ff:f5:28:cd:6b:98:40:2d:21:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:71:B4:D3:AA:A6:3D:F8:32:96:F8:F9:27:2C:65:E7:42:69:FC:CE
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/7744CE40691111F0B8610780C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.192.0/24
43.229.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b3:9b:85:1e:a9:3e:64:48:b1:57:09:df:2c:ac:bd:05:d2:
d9:20:94:85:37:61:4c:0b:e0:69:24:84:69:35:db:88:c9:bb:
ba:e9:d4:9e:f9:05:8b:c8:af:8c:43:6b:41:20:4c:90:3f:52:
08:97:76:56:f7:46:51:2d:f0:49:35:a8:23:f2:80:d3:29:ae:
46:c6:20:bf:3c:98:35:87:03:e1:c9:e9:af:59:b8:cd:65:16:
a3:2f:c7:be:84:38:7d:f2:11:d9:09:31:94:72:99:10:03:5c:
2d:f6:8d:56:19:5c:1a:d8:70:4b:57:96:71:31:66:56:f1:2c:
07:98:37:9a:f1:03:8d:ea:f1:71:7a:ce:69:3b:f6:58:da:bd:
03:44:10:37:36:6b:64:61:70:e4:c3:29:6d:a8:ef:20:c2:43:
26:28:7b:c7:50:3a:13:18:07:ea:0b:71:f8:0d:7b:f1:5a:17:
c4:d4:cb:15:61:00:5f:23:68:5c:53:06:ea:45:29:47:32:e9:
f9:75:bf:74:3f:de:6d:73:a5:1d:45:82:8d:13:02:f7:b8:af:
eb:b7:c7:9b:65:4e:4b:c0:db:1f:4c:56:d4:85:f5:11:92:03:
d4:f0:2c:86:55:71:11:60:d4:73:7e:c8:98:41:70:02:66:df:
8a:5a:15:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 17:24:17 2025 by rpki-client