This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/57F3E1BCC91911F083BE4C6DC4F9AE02.roa
File: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (raw, json)
Hash identifier: jJXT7Vo6Xui3neNH5mn3y9zT7Dwin+uruwOajavMv80=
Subject key identifier: 4E:33:AB:12:4E:E3:B8:3B:00:12:D4:C3:A5:5F:9D:57:6A:8E:2C:DE
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: 26
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/57F3E1BCC91911F083BE4C6DC4F9AE02.roa
Signing time: Mon 24 Nov 2025 09:47:48 +0000
ROA not before: Mon 24 Nov 2025 09:47:48 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45806
IP address blocks: 61.7.193.0/24 maxlen: 24
122.155.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Nov 24 09:47:48 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692429c4-60c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:32:a7:0a:02:93:45:b0:f4:0a:9e:54:11:eb:
f7:74:04:af:df:51:46:1c:e6:e1:e8:d7:f0:5d:80:
70:fd:88:27:d8:ef:43:65:a1:e2:73:b4:3f:45:62:
c6:ff:b4:d1:bb:a0:2b:15:64:b0:73:47:ad:34:d9:
c3:75:a3:21:bd:f6:2a:56:8c:71:24:cf:35:04:a6:
47:57:c7:18:72:68:e4:08:23:b6:e6:04:79:1a:f4:
05:b4:5c:78:d3:c5:c1:b8:c5:60:43:a7:20:9f:df:
7b:59:f3:cc:74:2c:60:74:31:ec:69:34:84:98:4a:
83:fa:bd:52:6b:75:33:c0:72:58:d4:ec:2f:c0:67:
d8:96:44:3d:33:e2:84:70:bf:cb:5b:42:7e:bf:63:
12:33:6a:9a:b8:a1:00:4a:22:ce:88:35:5d:84:24:
72:a8:8a:98:3e:60:e5:59:54:20:cd:25:ad:76:8d:
fa:61:ca:41:ea:5e:99:34:58:d7:52:11:a6:8d:28:
7b:1a:26:76:34:37:00:91:4c:09:39:dd:89:7d:fc:
27:57:64:0d:cb:00:54:36:aa:63:ad:9b:e1:dd:7c:
96:1e:0c:62:ec:79:8f:06:45:d2:a6:fe:03:0a:77:
2e:e5:01:11:33:f3:07:b8:90:18:f1:7c:e5:14:e6:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:33:AB:12:4E:E3:B8:3B:00:12:D4:C3:A5:5F:9D:57:6A:8E:2C:DE
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/57F3E1BCC91911F083BE4C6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.7.193.0/24
122.155.68.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5e:c6:48:51:3d:2e:36:c8:43:89:6b:81:80:74:76:fd:0d:
14:bb:8e:18:ef:73:29:63:6d:4c:e1:89:7d:7a:6d:ce:f4:e2:
7d:2a:46:30:8f:1d:3e:65:13:ab:df:a0:0b:cb:47:e4:90:b0:
dc:c1:bd:e8:d4:45:db:08:13:2d:44:2c:d4:9f:34:5b:16:0e:
1c:df:26:a5:99:4a:ff:57:87:fb:0a:6f:63:76:25:cd:e7:d1:
1d:98:04:3e:ea:c1:77:d5:cd:b5:e5:e6:2c:4c:10:34:3f:79:
5b:48:f3:bb:77:69:aa:25:ae:88:19:ec:0c:4c:51:a7:dc:ad:
15:fd:35:29:e2:f7:53:88:e2:e5:e8:11:6c:c8:90:a0:fb:97:
ac:c7:2e:09:8c:06:9c:24:11:97:67:80:ba:f4:b6:66:91:49:
55:77:0f:5b:74:9d:bb:9c:0f:fc:0b:f9:ba:a3:19:40:7c:d7:
a3:cc:06:82:7f:ce:90:e9:d8:5d:ad:b2:8e:df:9d:99:2a:85:
c8:cc:47:d5:63:5c:74:82:1d:0c:c1:16:03:5c:85:11:5c:b7:
5b:00:72:64:61:2c:6d:e1:dd:41:c6:d0:dc:3a:f3:07:d5:a5:
b1:6e:8e:a8:d6:52:d5:5c:ff:e8:1f:88:d0:69:b8:f8:2d:e0:
79:a0:fe:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:35:05 2025 by rpki-client