This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/30D59F38D61011E996559038C4F9AE02.roa
File: 30D59F38D61011E996559038C4F9AE02.roa (raw, json)
Hash identifier: NMdL9dMWcX+0D4QZ0q97mgQaNmslq2M8zzAlDvcQOKY=
Subject key identifier: 20:C8:65:3D:08:61:C8:D4:9A:BF:1F:37:65:A1:DB:C6:4C:22:90:1A
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2B17
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/30D59F38D61011E996559038C4F9AE02.roa
Signing time: Fri 02 Jan 2026 16:13:33 +0000
ROA not before: Fri 02 Jan 2026 16:13:33 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 20940
IP address blocks: 49.231.112.0/24 maxlen: 24
49.231.116.0/23 maxlen: 23
2405:9800:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 15:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11031 (0x2b17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:33 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6957eeac-a3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:29:bc:5e:62:2b:a0:e4:d0:43:0b:5e:f0:
13:bf:fc:d1:16:3c:9a:84:d2:16:c5:55:15:8d:46:
a2:00:b8:df:32:b2:c4:a6:61:99:cb:cd:67:16:30:
95:89:e0:06:af:85:db:c1:7e:e3:22:c1:a9:36:31:
a0:e8:93:17:37:9a:ed:96:83:bb:f0:96:74:a7:7e:
1c:ff:9e:6b:e6:1a:d9:f5:ff:97:35:16:6a:de:ab:
b7:33:80:db:65:8c:b6:b3:a4:be:35:d9:3c:78:6a:
20:6a:1f:76:9a:5b:12:10:7e:2b:dd:c7:fd:21:57:
c5:d4:67:bf:2b:2a:4d:23:13:b4:6c:a3:ad:fb:94:
91:1b:78:da:bd:0b:46:08:17:46:38:bc:a0:5b:67:
57:1c:4b:5e:c3:3b:45:1e:9d:a1:6e:0b:8e:52:1c:
3e:1a:86:95:67:df:72:33:b7:da:79:e5:86:c1:71:
f0:43:dc:37:d4:93:03:a8:0f:cc:6a:2d:7f:e7:56:
86:c9:64:2e:5b:95:79:16:92:41:3c:b1:1b:c6:64:
47:0a:41:70:85:ed:38:30:67:bb:1d:e0:c7:8b:20:
14:d6:1b:79:1f:0e:47:8c:24:e4:c7:39:ff:e8:31:
10:df:6b:c7:1e:c3:77:43:b4:6d:3b:e4:4e:38:55:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:65:3D:08:61:C8:D4:9A:BF:1F:37:65:A1:DB:C6:4C:22:90:1A
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/30D59F38D61011E996559038C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.231.112.0/24
49.231.116.0/23
IPv6:
2405:9800:b::/48
Signature Algorithm: sha256WithRSAEncryption
50:bf:a9:16:61:aa:77:99:6e:82:c3:9b:f8:4f:dc:46:fd:72:
19:c2:f8:40:18:fa:fa:7a:5d:6a:30:7f:65:b0:d5:a6:b8:94:
8f:94:af:e3:fb:b1:49:91:c8:57:fe:d3:aa:bb:e4:8a:ce:cc:
71:1a:65:ef:c5:78:fe:95:72:49:93:f6:08:ed:44:dc:7e:d1:
e0:6f:19:db:34:67:62:9a:71:50:46:d2:09:8b:8d:2a:23:40:
f2:f2:62:eb:2a:5d:ab:5d:39:4b:80:f6:4e:d7:e6:9c:54:33:
1e:34:25:f6:e8:16:56:87:d8:4e:25:27:29:53:7a:77:5c:e6:
73:09:5a:88:12:ab:a9:a0:a4:25:ea:24:68:50:32:25:a2:55:
84:da:c6:7e:d9:6d:e0:23:9e:9c:d2:eb:64:81:52:bb:68:59:
b2:f1:bb:2f:38:c8:b5:b3:bb:fd:dc:d8:eb:7f:75:6a:7e:0c:
f4:f3:3f:f6:86:3f:d9:6f:8a:69:c6:b0:58:f8:87:43:0b:7d:
56:98:62:d9:83:bd:82:da:09:7f:5c:df:4a:44:f7:81:d3:90:
e2:f6:cf:55:a4:84:ee:80:f9:45:b8:53:33:cc:9a:5b:12:87:
35:6c:fe:71:5a:54:29:2f:ce:bc:f4:87:a7:5e:1b:6f:26:29:
68:4d:b7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:17:59 2026 by rpki-client