This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/7D679C84C92511F09CF68054C4F9AE02.roa
File: 7D679C84C92511F09CF68054C4F9AE02.roa (raw, json)
Hash identifier: 7etvoXAGwyYEYpaGBfDwDld33O7lKbrVTucALnOeq/Y=
Subject key identifier: D0:B6:AB:0B:52:AC:93:48:55:0A:FE:61:7C:F8:59:24:74:DA:17:A6
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: 49
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/7D679C84C92511F09CF68054C4F9AE02.roa
Signing time: Mon 24 Nov 2025 11:05:30 +0000
ROA not before: Mon 24 Nov 2025 11:05:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 46071
IP address blocks: 122.155.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Nov 24 11:05:30 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69243bfa-ced3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:3f:11:01:cd:b8:4a:a4:9d:13:8a:81:5f:
00:5e:5f:16:29:bb:7c:03:5b:9a:7b:bf:84:34:56:
aa:80:6b:4e:4d:c9:91:d1:c2:8b:9a:e5:94:1c:f5:
28:4d:21:a3:67:b8:03:02:ae:5f:96:ab:e8:8d:59:
89:e0:b6:4f:39:f1:ad:8c:57:24:83:db:e0:bb:a1:
af:9d:52:c3:83:26:7c:27:10:ea:aa:2a:0e:49:b6:
cc:38:96:b2:1f:76:99:f4:7b:54:b0:0a:5a:97:f5:
25:dc:1c:74:15:67:37:d2:47:03:c4:7d:a0:f1:42:
a4:81:59:ec:7e:33:65:af:f6:d7:83:95:13:68:2a:
3f:78:b0:5b:ab:39:26:cc:3d:13:1b:f0:97:2d:19:
ca:4c:8d:f6:da:8c:37:61:1e:74:64:50:3f:fe:12:
ed:0d:a5:71:6e:9c:0a:06:e0:1e:82:0d:2d:f0:87:
de:e9:82:f8:11:d5:b5:4b:52:89:80:22:9d:f5:13:
da:5d:0c:ae:45:06:57:71:a1:1d:3f:b8:02:e2:e5:
43:5e:76:9c:3d:6b:17:76:c5:12:0e:60:0d:58:03:
48:bb:89:93:b5:d0:b9:0b:21:da:5f:54:d4:62:c3:
88:6e:3c:7f:ab:1e:51:d8:73:26:c5:1a:c7:02:99:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:AB:0B:52:AC:93:48:55:0A:FE:61:7C:F8:59:24:74:DA:17:A6
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/7D679C84C92511F09CF68054C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.155.143.0/24
Signature Algorithm: sha256WithRSAEncryption
37:49:f2:d0:29:d4:42:cd:73:43:10:32:fb:12:97:74:f9:91:
6d:5e:ec:39:c6:6e:68:98:d5:15:7b:11:ba:95:fe:78:92:fe:
d4:48:e0:8e:68:97:55:d8:01:b5:d2:a8:c1:e8:ee:7a:dc:78:
5e:35:c5:85:86:6c:63:e8:69:3b:b9:48:a4:f9:a2:f9:ae:b9:
24:4d:05:65:5b:fb:bf:f9:dc:59:e6:e1:6b:0d:83:f3:88:69:
75:52:d8:5d:8f:a5:89:e1:37:d6:81:33:40:45:7e:2f:1c:3b:
77:4b:a1:a2:06:df:6d:3b:fe:36:07:81:c0:69:a7:07:32:6c:
3e:68:90:52:84:99:c1:7d:e4:da:c2:bc:02:9d:32:0d:87:e6:
b8:e0:45:fd:fc:ab:b5:4b:5c:e3:2a:01:12:03:c1:58:25:02:
a4:ef:59:67:7e:93:42:a5:2f:93:d8:f3:6c:da:ef:16:74:3f:
90:7a:b7:dc:a2:1a:cf:cd:32:96:45:45:4a:45:da:8b:dc:a8:
fb:ae:14:ea:15:86:94:1f:f9:44:f1:9e:16:3e:e2:84:61:40:
d6:72:98:f9:ae:bc:26:1a:40:fc:0b:bb:c3:3a:3e:cf:9f:26:
5f:b5:80:8c:55:d4:3b:1a:e9:a9:cd:4b:e0:3a:f4:e1:48:55:
41:10:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:35:06 2025 by rpki-client