This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/955A10B4D61111E999D7033CC4F9AE02.roa
File: 955A10B4D61111E999D7033CC4F9AE02.roa (raw, json)
Hash identifier: Fplzt4D0PHGqjke0LrlgNKcC1O9qACKu33Nbf+s8Www=
Subject key identifier: FA:E4:FD:94:CF:62:AB:AF:A7:E2:BD:0A:C9:0E:FE:6F:BB:03:3E:9E
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2B2F
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/955A10B4D61111E999D7033CC4F9AE02.roa
Signing time: Fri 02 Jan 2026 16:13:56 +0000
ROA not before: Fri 02 Jan 2026 16:13:56 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9551
IP address blocks: 49.231.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 15:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11055 (0x2b2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:56 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6957eec4-d9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:92:20:14:33:10:c2:6b:08:fd:8b:55:f1:
b4:28:0e:d4:72:a8:98:64:42:fa:75:68:e2:f6:1f:
bc:00:6c:d3:b0:2e:28:a7:6e:cf:cf:8c:bf:f6:a7:
76:d6:44:60:b6:65:85:08:a2:f3:52:9b:0e:3e:72:
4a:13:22:8e:a4:f3:82:8a:53:d0:d5:33:62:37:6e:
1e:36:e9:e5:a4:62:07:29:b1:dc:88:dc:dd:b5:6e:
bf:98:13:1f:e7:e0:28:30:63:50:98:80:a7:72:73:
53:70:65:51:13:54:4a:78:cf:86:8f:1f:92:a0:6c:
94:60:b0:10:c9:f1:b2:25:ef:46:f9:42:e9:48:61:
21:99:3b:a8:57:64:cd:23:f0:8b:f3:5e:b8:a5:03:
28:48:9c:b6:5d:cd:4e:82:6e:6d:5b:ca:72:24:b0:
7a:77:4d:9b:b2:29:8b:38:be:56:8c:aa:fc:d3:dd:
d4:a6:57:30:f6:f5:4b:59:7e:82:0c:22:62:92:b6:
27:c3:01:2e:00:52:3d:f1:35:42:2d:1b:88:d2:22:
94:fd:08:81:59:b8:41:6f:6d:51:58:74:76:18:aa:
1e:1d:14:cf:40:10:fc:fd:a8:ea:73:b8:34:25:f4:
9c:6c:db:f3:c1:1c:e6:6b:50:93:1a:e8:d7:b8:e4:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:FD:94:CF:62:AB:AF:A7:E2:BD:0A:C9:0E:FE:6F:BB:03:3E:9E
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/955A10B4D61111E999D7033CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.231.232.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:5a:74:6d:7b:3d:fb:27:30:fc:ee:1e:94:86:3d:f1:0e:fa:
49:38:ac:56:3f:a8:cf:ce:dc:0f:58:9c:9c:3b:31:a3:3d:67:
57:9d:72:65:b3:a7:a7:fe:27:00:0a:aa:c3:ad:d8:d9:b2:3a:
f1:62:3b:c9:12:cd:17:0d:49:2e:73:b1:25:c4:48:92:bc:c7:
8c:87:2f:e3:d9:80:d0:a5:82:f9:46:8d:39:97:3e:98:38:45:
aa:69:f4:33:8d:9e:ff:e7:c0:cb:4d:76:86:3c:18:b0:23:3b:
b7:7b:f5:f8:38:0a:0f:0a:71:71:cf:ff:73:6f:48:3a:46:90:
33:77:9b:b1:42:1a:7d:27:67:8b:c4:5b:0e:90:6c:8c:d4:72:
de:f5:fd:73:e6:0f:cf:37:25:d6:75:6f:26:86:b5:fb:4a:7e:
58:3e:4f:4d:0d:75:d7:5a:a4:0e:67:dc:69:33:62:54:37:9d:
8a:56:42:62:9b:19:90:2c:16:ca:39:96:76:20:00:ba:df:61:
7e:49:3f:60:a3:e4:ca:83:0b:d9:72:d5:8b:bc:03:87:48:48:
3e:9a:d9:bc:f7:78:00:e7:dd:28:23:d4:45:7c:fd:51:26:9b:
0c:49:f6:96:f3:2d:d5:f1:75:fd:c3:cc:99:3c:38:c9:a7:f5:
00:8b:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:18:49 2026 by rpki-client