This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/54CF3574EACC11ECAB5E9A54C4F9AE02.roa
File: 54CF3574EACC11ECAB5E9A54C4F9AE02.roa (raw, json)
Hash identifier: EAOJSBt4qodRajgf0kj901aYQnJaXUvZbFsLGm1rIGI=
Subject key identifier: E5:97:3C:B3:AC:D9:87:7E:ED:96:68:41:61:9B:1F:44:09:36:FA:1A
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2B2C
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/54CF3574EACC11ECAB5E9A54C4F9AE02.roa
Signing time: Fri 02 Jan 2026 16:13:53 +0000
ROA not before: Fri 02 Jan 2026 16:13:53 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 7630
IP address blocks: 49.231.212.0/24 maxlen: 24
49.231.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 15:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11052 (0x2b2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:53 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6957eec1-190f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:7f:ec:3d:0b:bd:e0:18:5f:f5:1f:90:0e:
d6:5a:7a:62:fa:02:09:31:e4:12:89:14:6b:6a:99:
b7:16:bd:a3:20:dc:9f:4f:ed:6e:13:65:d9:46:a1:
2a:79:20:72:f1:b3:8d:52:81:19:01:12:f1:d2:e1:
4e:cb:dd:e8:ab:13:1c:f7:89:a4:95:6a:b0:31:3b:
b5:8b:ca:1a:8e:7f:cd:38:7b:e1:0c:7a:8d:23:0a:
da:60:2d:46:81:fd:c9:91:d3:5e:5f:a4:ce:1c:e8:
1e:cb:83:e5:53:57:fb:49:42:71:a1:ed:bf:29:30:
5b:b9:8b:f1:da:71:04:00:e9:53:f2:3a:0c:2f:01:
27:5a:2d:f2:50:42:9f:19:86:0c:01:d3:68:1b:59:
7d:bf:79:5b:5f:77:b8:5f:d9:17:7c:50:05:38:b5:
61:a7:7b:ed:5c:1b:9f:58:99:a6:84:3b:0b:23:18:
bd:e0:60:60:ca:50:d7:db:95:36:5b:19:29:05:16:
f5:c0:53:b0:07:ab:4d:9b:26:ef:e6:a5:89:42:1b:
35:40:5c:e4:b0:0d:34:80:8b:b3:9f:97:74:e4:a2:
c5:35:66:90:48:1f:ff:c5:0e:e1:90:c6:35:43:b7:
8f:2e:ff:91:3e:3e:ea:ba:34:60:5e:1e:39:46:1b:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:97:3C:B3:AC:D9:87:7E:ED:96:68:41:61:9B:1F:44:09:36:FA:1A
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/54CF3574EACC11ECAB5E9A54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.231.212.0/24
49.231.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:03:87:ca:ef:23:c0:71:84:90:37:0e:c8:1c:5e:43:b9:da:
fe:09:6a:f1:19:00:b2:fc:10:a3:74:23:97:97:a0:60:ed:e6:
25:b1:80:3c:0c:c4:97:1c:1b:7d:74:72:6a:82:ab:ee:f2:9d:
9c:17:5b:5e:7c:93:b0:78:56:0e:49:5a:d8:1a:d4:38:0b:44:
6d:bb:c6:17:2e:93:16:65:89:57:70:90:46:0e:7d:12:a3:0d:
87:0d:d9:32:70:b3:b5:60:83:b8:bf:a8:c6:9c:da:c3:64:32:
9d:9d:a4:86:f0:3b:db:c9:de:1c:0f:8a:05:23:a7:de:5c:3c:
86:dd:c7:9c:be:42:4e:e9:7a:08:bd:19:94:3d:91:ff:56:9a:
b6:92:21:a8:54:2b:dd:0a:14:71:77:03:73:1e:41:c6:0e:9e:
81:50:a5:2d:50:92:ca:c0:59:25:46:a9:8a:e7:6c:d8:e6:f5:
d5:0e:a1:b1:9b:66:fe:64:22:09:e9:ce:86:b6:d5:01:e5:34:
ec:59:9b:ca:0c:bc:19:cc:3b:ba:04:46:21:6a:ce:95:f5:2b:
78:38:f1:bd:0d:0c:cf:5a:a1:b2:94:37:cb:5d:12:e4:82:fd:
db:5a:92:14:87:5c:5e:ad:3a:7e:03:79:95:b1:6b:33:ad:2c:
f6:72:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:17:39 2026 by rpki-client