This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B2F27AFAC92411F09F068126C4F9AE02.roa
File: B2F27AFAC92411F09F068126C4F9AE02.roa (raw, json)
Hash identifier: DtE4Gub6HXNOtAF1R9QWTavpwFvcacPl8V38z7ZHdcg=
Subject key identifier: F4:3A:7F:BD:B5:C6:76:49:C5:5E:E5:92:F4:00:BB:26:C2:6A:06:1B
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: 42
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B2F27AFAC92411F09F068126C4F9AE02.roa
Signing time: Mon 24 Nov 2025 10:59:51 +0000
ROA not before: Mon 24 Nov 2025 10:59:51 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24042
IP address blocks: 61.19.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Nov 24 10:59:51 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69243aa6-226e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:27:4c:7d:ab:27:04:30:25:c3:a7:f3:a6:
5f:c0:23:de:78:f8:d6:7e:60:bf:17:ce:3e:8b:1c:
d4:3b:4a:3d:a9:52:7c:c4:4f:b2:60:50:f1:78:15:
46:7a:6d:43:62:8a:25:03:bf:4b:b3:84:54:59:9b:
a3:c0:0e:60:cf:e2:8f:b9:18:32:ea:bb:14:11:e6:
23:fa:b7:69:9c:6f:ad:ad:0c:e7:cf:44:45:91:92:
74:84:92:7d:83:62:6c:37:03:28:91:d8:6b:d8:c2:
06:84:47:69:67:4e:59:f7:df:39:eb:90:44:72:f1:
d6:a1:34:5a:42:73:32:1d:55:67:3b:d0:be:cc:40:
32:fe:4c:56:9a:8a:c5:98:b2:27:96:e8:29:ee:9c:
05:84:cb:b1:93:d6:a7:ae:0b:17:d9:02:21:3d:e8:
ba:12:c3:d1:ef:a2:a4:86:48:c3:f3:2b:10:74:30:
1c:52:74:9c:57:70:a0:53:43:e3:ae:8e:a6:6c:c6:
a5:b2:c0:8c:6c:6d:1a:ff:c3:80:0f:82:26:9a:09:
52:d1:9a:db:4a:05:87:17:d2:33:7f:55:c4:61:dd:
94:8f:44:e5:70:b8:b6:89:8a:e9:17:e6:cd:99:88:
65:c5:41:ea:93:7e:92:65:71:c7:95:22:36:bc:a1:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:7F:BD:B5:C6:76:49:C5:5E:E5:92:F4:00:BB:26:C2:6A:06:1B
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/B2F27AFAC92411F09F068126C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.19.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f4:e3:b6:e3:c3:2b:e2:5a:51:b3:59:1a:17:82:74:11:2a:
3b:35:ea:f4:44:64:49:02:c0:d5:3b:f9:3e:b2:70:7d:ea:2e:
2f:e4:b2:42:58:a2:16:29:6a:7e:e7:be:59:e5:28:c6:44:81:
b8:57:49:fd:eb:82:f0:b6:2b:56:a4:63:e1:70:27:14:2e:72:
5a:99:40:fe:00:e5:a4:24:38:94:e7:49:b2:35:55:08:7f:aa:
50:ea:63:b9:78:61:82:48:97:43:44:81:fd:5d:ca:af:d4:b0:
1b:6e:fe:ed:da:71:47:8d:ee:0e:bc:89:7c:0d:94:c7:49:4c:
97:7f:50:0e:b5:75:bf:24:48:67:b0:79:0d:47:13:ac:59:41:
0a:e5:50:52:38:85:58:89:30:e1:0a:be:61:bf:54:8b:cd:51:
f6:7a:4a:ae:86:6f:e4:fc:da:6a:0b:15:9a:5e:a2:95:9e:cc:
2a:43:5a:f6:60:95:3f:f7:04:e7:51:21:4a:61:b3:45:54:79:
b6:2e:d3:c5:b9:53:df:10:af:b8:f9:b4:53:3a:fb:d4:1a:d2:
c1:99:6a:01:68:3b:c2:00:c7:1d:43:dc:1e:19:98:b0:30:ab:
88:6f:73:0f:84:56:08:f6:c5:59:75:7c:2e:91:e6:38:e5:a2:
e9:47:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:35:05 2025 by rpki-client