This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EAEC9066690E11EF9396CC48C4F9AE02.roa
File: EAEC9066690E11EF9396CC48C4F9AE02.roa (raw, json)
Hash identifier: 2vWk3DGkjeXEl7FbZy0aavCh6asq08aBokPfmXkrJdc=
Subject key identifier: 80:10:4E:0E:28:F9:68:5F:9A:E7:D6:23:7F:63:4C:B7:DD:EF:FF:AE
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 03D4
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EAEC9066690E11EF9396CC48C4F9AE02.roa
Signing time: Tue 02 Dec 2025 23:59:02 +0000
ROA not before: Tue 02 Dec 2025 23:59:02 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 140662
IP address blocks: 119.63.70.0/24 maxlen: 24
119.63.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 23:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980 (0x3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Dec 2 23:59:02 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f7d46-87b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:ee:28:d9:db:aa:81:cb:91:e0:1d:5e:1f:
b6:e2:19:ea:1b:fa:d2:42:79:f2:04:37:ce:38:bc:
a2:aa:3a:d2:21:64:9d:ab:56:c1:2e:8b:b3:7f:df:
66:e7:76:22:2c:ed:7b:8c:fe:0d:7b:f9:8d:50:90:
38:69:74:a4:38:79:3a:10:9b:26:59:98:db:06:59:
23:79:84:3d:75:06:5f:52:87:d7:3a:54:d8:6d:d9:
9f:d1:69:2f:a8:d0:23:e1:34:a9:39:26:81:ff:9f:
f9:f2:02:9a:ac:dd:18:6b:81:ff:2d:45:33:15:da:
7e:b6:fb:ce:a0:af:e3:06:1f:8d:47:b6:d1:2a:1b:
dc:81:95:a2:d1:96:a9:22:51:00:3b:e5:c1:71:dc:
11:31:b8:54:6f:f5:5f:b1:11:0b:04:bb:f9:3f:2a:
c5:cd:3d:ad:0d:ec:20:f9:1e:e0:44:34:ee:aa:2d:
e3:43:55:ea:1b:39:fb:d9:94:22:51:e1:8a:a9:8b:
18:2a:3d:4b:90:d4:63:60:5e:c6:c3:69:e4:1f:b0:
23:f5:98:46:cd:50:5d:85:58:f2:fd:59:c8:71:2d:
38:4b:39:20:ec:51:aa:e0:28:79:e5:34:d9:3f:70:
a6:86:a1:be:ad:37:37:a8:b8:ef:f2:90:b7:df:3f:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:10:4E:0E:28:F9:68:5F:9A:E7:D6:23:7F:63:4C:B7:DD:EF:FF:AE
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EAEC9066690E11EF9396CC48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.63.70.0/24
119.63.82.0/24
Signature Algorithm: sha256WithRSAEncryption
87:37:a1:6b:9b:b5:4e:26:a2:e7:1b:6f:ce:7f:ea:0f:0a:5d:
69:4c:25:d7:74:58:7e:49:25:d3:9c:e1:22:aa:a3:93:7a:72:
6f:af:6e:9a:b2:f0:f3:97:1b:f6:aa:cb:ac:42:35:13:00:ff:
ca:0d:ec:e2:78:d2:bd:98:d5:b2:25:10:a1:ed:40:11:8c:b6:
e9:a3:ef:d4:2f:e2:57:b9:e2:98:c5:c7:e2:1f:d7:af:3a:10:
34:e7:12:22:51:e8:d5:d0:4e:ba:b9:bd:b7:ab:c6:2f:4b:22:
3f:56:bc:93:1d:78:02:43:d6:1b:3b:cf:18:7f:3f:35:5f:32:
b0:42:d3:13:44:26:23:23:ad:00:cf:9a:1b:5a:e3:f5:25:e6:
99:d6:a4:92:b2:f2:9e:da:4e:29:04:9e:d4:03:4f:07:51:16:
27:28:cf:5a:3c:87:3c:d1:2f:4b:a7:19:b6:99:15:e8:92:e6:
94:32:c1:93:7e:34:60:b0:94:9b:18:0f:6d:35:e7:a2:cc:49:
b1:44:dd:aa:6e:03:7d:89:94:da:5f:2c:16:8d:68:42:a0:f7:
ef:84:75:53:60:90:1d:d4:2f:bf:24:bb:e1:2e:5a:f7:b0:66:
fa:0d:cc:47:66:f5:cf:6a:0f:28:b5:93:10:9a:04:2a:77:83:
58:a3:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 14:45:37 2025 by rpki-client