This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/4FFB27E2BDBE11F0999C417DC4F9AE02.roa
File: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (raw, json)
Hash identifier: QTRHzthcKTfHq7lMpoI6Y/zfK2lWpwoDu2JMPtFs/1Y=
Subject key identifier: 39:26:CD:E3:52:68:C5:5D:60:26:B1:50:B5:AF:A9:A0:AF:54:E7:09
Certificate issuer: /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Certificate serial: 04
Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/4FFB27E2BDBE11F0999C417DC4F9AE02.roa
Signing time: Sun 09 Nov 2025 22:49:13 +0000
ROA not before: Sun 09 Nov 2025 22:49:13 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 45793
IP address blocks: 202.43.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 05:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Validity
Not Before: Nov 9 22:49:13 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69111a69-3b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:88:b7:e4:19:7e:ad:10:38:d3:61:78:7c:
c9:64:67:cb:e4:25:fa:97:0e:58:a8:22:f6:11:ea:
d4:69:14:17:cb:e5:81:c2:60:8c:af:17:0c:21:f2:
6e:ce:62:8c:d1:e8:e2:d6:29:5f:db:a6:bd:72:3b:
47:01:ac:ec:7a:db:6b:69:38:50:c0:1f:cb:4c:46:
86:0c:08:4a:c1:d6:c3:94:a3:fa:68:93:ab:42:39:
72:16:30:fc:b7:7b:d9:bc:bb:4a:75:3e:a7:86:af:
d5:2f:f2:d6:98:06:bd:04:bb:18:b8:25:66:3b:82:
ec:6a:f8:71:21:d2:ab:97:13:3d:a6:73:87:b1:ea:
00:99:9a:0b:8c:81:3c:6d:50:74:e5:e4:27:31:03:
69:f9:f1:78:e8:a7:54:74:b5:6c:c3:15:9e:0f:25:
e5:97:f9:c1:c8:86:38:74:62:2d:0f:b9:d2:fc:8c:
5a:9e:2c:51:d9:42:c0:e8:e3:f0:f8:2e:ce:fe:71:
9c:fd:1f:d8:e1:c4:51:a6:52:b2:82:0a:aa:24:2f:
cf:69:e8:7f:1b:d5:90:26:0c:77:21:15:dd:6d:48:
ec:08:11:0d:d7:63:54:70:3d:0a:d2:29:cf:50:25:
bd:5f:bf:94:7f:53:9e:3f:82:76:f3:9c:b0:3b:45:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:26:CD:E3:52:68:C5:5D:60:26:B1:50:B5:AF:A9:A0:AF:54:E7:09
X509v3 Authority Key Identifier:
keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/4FFB27E2BDBE11F0999C417DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.43.80.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:03:be:fb:a5:c1:15:0f:9a:7e:ce:53:18:e3:d4:c2:10:49:
7a:43:f0:ae:5a:16:0d:78:f0:11:53:43:7e:24:70:25:e5:46:
44:6a:19:2c:fd:7d:42:83:56:57:36:5c:e9:b6:26:9b:7e:fe:
e8:8d:fc:ee:90:d0:3a:14:d7:96:48:57:17:15:28:0f:51:9e:
d7:ae:16:b6:8b:b3:83:c2:63:0d:4d:6b:7e:0e:f9:6a:ee:9b:
b9:92:07:6a:55:c8:bd:4f:fa:8a:10:a0:1e:71:bc:95:96:a9:
ee:37:c7:e3:c7:84:ee:df:8d:5e:0a:ba:3e:42:fb:92:aa:08:
bf:08:a6:d1:fc:70:e0:48:1f:b2:6b:09:a0:57:b9:5e:37:bb:
0c:1e:0c:24:a8:c7:67:15:e7:ad:59:c7:2c:5f:13:a6:db:9a:
a1:5b:b9:1e:2f:70:da:a8:49:b9:52:b2:cc:d8:b8:d6:6c:79:
cc:55:58:02:5d:e0:56:fb:0e:82:24:84:fe:23:28:fb:c8:2d:
13:99:ad:59:57:6a:8a:c7:ce:19:96:d2:5d:bc:cb:c6:47:04:
b1:cd:2f:02:62:63:be:ad:bc:fd:84:46:6f:50:57:aa:09:dd:
89:1e:60:be:79:cd:75:86:49:b2:18:95:b1:58:98:cb:8e:e2:
13:43:aa:7d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MjY2NzExMC8GA1UEBRMoRDBGNjM4QzVCOThBRThBRkNENkNFRTA1MDM4MjQxOTc0
MDlDM0U5MzAeFw0yNTExMDkyMjQ5MTNaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MTExYTY5LTNiODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbHIi35Bl+rRA402F4fMlkZ8vkJfqXDlioIvYR6tRpFBfL5YHCYIyvFwwh8m7O
YozR6OLWKV/bpr1yO0cBrOx622tpOFDAH8tMRoYMCErB1sOUo/pok6tCOXIWMPy3
e9m8u0p1PqeGr9Uv8taYBr0Euxi4JWY7guxq+HEh0quXEz2mc4ex6gCZmguMgTxt
UHTl5CcxA2n58Xjop1R0tWzDFZ4PJeWX+cHIhjh0Yi0PudL8jFqeLFHZQsDo4/D4
Ls7+cZz9H9jhxFGmUrKCCqokL89p6H8b1ZAmDHchFd1tSOwIEQ3XY1RwPQrSKc9Q
Jb1fv5R/U54/gnbznLA7RfgFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOSbN41Jo
xV1gJrFQta+poK9U5wkwHwYDVR0jBBgwFoAU0PY4xbmK6K/NbO4FA4JBl0CcPpMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNjY3LzkxNTkyQjRBQkI5
QzExRjBBNUEzRDgxNUM0RjlBRTAyLzBQWTR4Ym1LNktfTmJPNEZBNEpCbDBDY1Bw
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMFBZNHhibUs2S19OYk80RkE0SkJsMENjUHBNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjY2Ny85MTU5MkI0QUJCOUMxMUYwQTVBM0Q4MTVDNEY5QUUwMi80RkZCMjdFMkJE
QkUxMUYwOTk5QzQxN0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcorUDANBgkqhkiG9w0BAQsFAAOCAQEAngO++6XBFQ+afs5T
GOPUwhBJekPwrloWDXjwEVNDfiRwJeVGRGoZLP19QoNWVzZc6bYmm37+6I387pDQ
OhTXlkhXFxUoD1Ge164Wtouzg8JjDU1rfg75au6buZIHalXIvU/6ihCgHnG8lZap
7jfH48eE7t+NXgq6PkL7kqoIvwim0fxw4EgfsmsJoFe5Xje7DB4MJKjHZxXnrVnH
LF8TptuaoVu5Hi9w2qhJuVKyzNi41mx5zFVYAl3gVvsOgiSE/iMo+8gtE5mtWVdq
isfOGZbSXbzLxkcEsc0vAmJjvq28/YRGb1BXqgndiR5gvnnNdYZJshiVsViYy47i
E0OqfQ==
-----END CERTIFICATE-----
Generated at Wed Dec 10 02:08:26 2025 by rpki-client