This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/55B2771AC91911F0BA7D4C6DC4F9AE02.roa
File: 55B2771AC91911F0BA7D4C6DC4F9AE02.roa (raw, json)
Hash identifier: +Lyza8h2/Z4uXs2d+lFs1I7p0cxofH7YS5tzMbCiLyc=
Subject key identifier: 86:17:0C:C8:2A:1A:C8:16:53:DC:16:72:9F:95:FC:83:FE:AF:B9:F2
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: 10
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/55B2771AC91911F0BA7D4C6DC4F9AE02.roa
Signing time: Mon 24 Nov 2025 09:38:30 +0000
ROA not before: Mon 24 Nov 2025 09:38:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137058
IP address blocks: 61.19.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Nov 24 09:38:30 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69242796-0ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:74:87:6f:e8:72:a4:4a:69:24:13:9d:a1:
e2:b1:05:9f:04:dd:0b:93:6f:74:60:b3:a7:33:97:
bb:e2:6e:af:a7:14:4d:5d:11:75:c5:85:99:ea:b0:
e5:8d:67:a7:09:f2:50:e7:09:b0:e9:66:f0:3e:e8:
e3:8c:ab:20:20:04:47:3b:86:83:74:b5:5e:58:43:
e3:bd:00:88:97:0e:94:27:05:71:fc:71:20:d8:69:
74:af:93:4a:3e:b7:04:50:b8:ef:f1:44:a0:e9:19:
45:b6:c1:ba:ee:0b:e7:eb:02:11:62:b7:83:8a:8c:
40:7b:8b:c7:82:bb:85:85:a7:be:94:87:1a:ee:dd:
26:40:4a:41:24:10:7a:3a:73:01:19:e7:89:e1:50:
10:cc:f3:37:be:7f:8f:c5:f9:70:6d:03:ff:9e:0f:
e4:46:1f:18:17:54:47:9e:18:47:3c:12:d6:de:fc:
1b:87:bb:47:4e:62:e1:ac:f5:e2:71:c9:64:02:de:
7a:96:5d:5d:84:4e:75:85:17:f6:e9:f6:4c:30:ae:
19:d9:ef:05:45:33:0a:2e:b6:b0:ea:44:c3:d5:73:
bc:14:66:75:f8:8d:e6:01:c8:a8:38:e9:73:9e:4c:
e7:64:fe:3c:ed:2e:fb:93:e4:22:b9:0a:64:37:e4:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:17:0C:C8:2A:1A:C8:16:53:DC:16:72:9F:95:FC:83:FE:AF:B9:F2
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/55B2771AC91911F0BA7D4C6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.19.16.0/24
Signature Algorithm: sha256WithRSAEncryption
16:33:4f:e9:26:cd:1e:e4:9b:4b:80:f3:ff:a8:df:59:22:24:
38:4d:ee:68:c4:5b:bb:85:ed:c9:bb:e6:b6:dd:35:96:f5:68:
79:59:3d:01:64:ed:5d:1c:d5:16:ea:34:35:a3:43:e8:95:1e:
79:d3:ac:73:62:0e:59:35:1e:2a:c3:ca:14:2a:71:78:92:94:
8b:3a:ab:47:44:3e:d0:7c:7d:9a:aa:1a:b0:f6:ba:88:ae:e1:
0d:08:b0:c7:2a:f2:9e:00:4b:a9:07:33:d8:06:f1:b7:a3:dd:
a8:16:16:39:2c:cc:03:4c:01:3c:50:df:17:dc:58:54:38:38:
76:fa:48:84:c0:7a:93:d5:59:c1:81:82:6c:a7:f3:fd:f3:ab:
c6:0a:c1:91:7e:26:ac:58:9b:ab:ed:36:ad:f4:88:b4:7e:71:
12:f9:9a:de:14:fd:67:d0:b6:81:21:f4:2d:04:8e:ad:3d:70:
37:b0:42:22:7d:1c:a4:65:cf:d5:92:aa:b1:41:1e:71:e8:18:
03:43:1d:82:43:5f:40:82:46:b7:1c:48:51:aa:24:9c:bd:8c:
20:48:e5:e3:bb:07:c5:46:be:5b:a8:4e:d8:98:2f:55:eb:e7:
22:cf:8e:57:c1:b2:ca:26:b8:c3:69:10:f6:4c:99:23:a0:b9:
55:1d:53:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:35:06 2025 by rpki-client