This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9DA31C0EC91A11F0AEDEC673C4F9AE02.roa
File: 9DA31C0EC91A11F0AEDEC673C4F9AE02.roa (raw, json)
Hash identifier: xTLF64HiFnl4Ua3DqFhX3rQXHABClSMIShrBUqKCQDg=
Subject key identifier: 4F:70:24:19:5E:B1:2E:7F:D5:3C:12:7F:FD:E5:6A:3D:77:B3:A0:A1
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: 1C
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9DA31C0EC91A11F0AEDEC673C4F9AE02.roa
Signing time: Mon 24 Nov 2025 09:47:40 +0000
ROA not before: Mon 24 Nov 2025 09:47:40 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135635
IP address blocks: 61.19.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Nov 24 09:47:40 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692429bc-3f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:54:21:4f:5d:fe:84:0b:1a:bf:2c:93:ff:
4b:c4:e8:e0:9b:c5:73:64:f6:fb:9f:10:28:19:1f:
f7:24:16:c4:09:db:00:54:2c:a0:23:bc:76:fb:b6:
c5:9f:6a:b4:83:b8:78:79:0d:ed:ae:fb:89:1b:74:
f7:17:87:26:00:95:ce:22:4c:bd:cd:8a:8a:64:c0:
6c:d8:c9:b5:89:56:41:78:87:80:06:a4:70:18:7c:
c9:93:e1:3a:79:9e:c7:d0:4f:9a:a1:2b:49:d3:b0:
11:0b:d4:e4:83:73:5c:d9:8c:70:98:55:ff:a7:fe:
01:bc:de:ec:49:4c:6d:e9:6b:db:3c:50:67:83:84:
97:78:4f:09:2a:c9:26:42:a9:49:50:09:24:0e:cf:
61:36:f8:50:f2:ae:3c:e3:f9:23:13:b7:ec:46:55:
9d:34:8f:78:a5:36:44:34:b7:ab:ce:0c:34:ca:87:
53:01:7e:97:19:b3:f8:99:73:b0:c6:39:e1:63:41:
00:50:30:83:e6:fd:6d:9b:66:7d:d2:0b:58:6c:d6:
36:cd:96:1b:ed:08:3d:be:0b:1d:c7:39:70:e8:e5:
9c:2b:74:d6:da:8f:a6:65:8b:d5:36:65:06:80:74:
a1:d6:d0:5a:77:92:58:b6:71:bd:a4:a5:75:80:97:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:70:24:19:5E:B1:2E:7F:D5:3C:12:7F:FD:E5:6A:3D:77:B3:A0:A1
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9DA31C0EC91A11F0AEDEC673C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.19.204.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4d:d3:1e:e3:be:35:25:c3:b7:27:e3:8c:c9:5d:a6:24:53:
ba:0b:b0:65:dd:a8:33:22:ac:dc:d9:cd:68:9f:e2:2b:6b:b1:
55:de:fb:73:f1:1a:6d:68:ec:32:5a:d6:c9:f6:55:5f:4e:36:
20:15:e8:85:59:58:18:31:cb:55:b6:ed:7a:96:5f:e8:ee:cd:
f5:a9:b0:16:69:e5:23:aa:ac:50:25:9c:d9:d9:61:6b:4b:4f:
1d:cd:82:1b:26:98:af:dd:a1:70:5e:bb:b8:f9:f6:8e:96:2c:
79:fc:48:30:e3:69:cd:e0:57:72:71:0d:a1:02:08:fe:ad:9b:
0d:ad:56:76:ea:1a:37:ea:b2:0f:23:a5:14:04:06:5d:21:d9:
b7:94:db:d5:69:3a:b5:b2:1d:09:01:62:9c:73:ea:fb:5d:37:
c7:19:b3:81:e1:6e:df:f4:60:4f:af:e8:82:37:55:c0:9f:58:
29:f9:6d:f7:e8:39:32:86:05:eb:4b:44:e5:38:92:e8:9f:a9:
49:5e:9c:c4:70:6c:8b:b4:64:71:34:38:ed:f5:83:d5:dd:71:
d5:b5:b6:6a:2b:47:4c:d0:83:d8:3b:e4:72:ec:6e:50:0c:6b:
6b:1e:73:5c:d8:69:5a:25:79:57:5d:d4:f4:83:75:2f:dc:e4:
2f:c2:c7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:35:06 2025 by rpki-client