This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/B8C57E86E40511F09F69296D616F56BC.roa
File: B8C57E86E40511F09F69296D616F56BC.roa (raw, json)
Hash identifier: cObjfouAz2/TsES3hmR6MNhl426gs6di7MnI+fpvu6s=
Subject key identifier: E1:7C:E6:46:EB:AE:5C:E2:EE:28:2A:94:1C:B8:17:6E:BC:CE:34:9C
Certificate issuer: /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E
Certificate serial: 04
Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/B8C57E86E40511F09F69296D616F56BC.roa
Signing time: Sun 28 Dec 2025 15:56:45 +0000
ROA not before: Sun 28 Dec 2025 15:56:44 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154461
IP address blocks: 144.79.210.0/23 maxlen: 23
144.79.210.0/24 maxlen: 24
144.79.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl
rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 07:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E
Validity
Not Before: Dec 28 15:56:44 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6951533c-7dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:ff:02:bb:b0:13:60:14:ed:44:57:26:ec:
24:da:04:03:55:a1:d1:da:43:48:db:d4:13:7f:96:
02:f7:9e:4a:63:4f:35:11:20:0a:fc:3d:a9:6f:70:
9f:6d:e7:d1:ae:5c:09:f7:c5:87:d0:47:d2:b5:71:
0f:0a:45:f1:33:d5:9c:8f:98:cf:8e:bc:0e:46:38:
d5:0d:c4:6b:f4:20:6f:c6:bc:5f:3d:f6:bc:b8:98:
d6:b1:9a:20:70:5f:fd:b5:75:f7:8f:ae:49:ac:29:
dd:a0:c0:e1:01:d8:02:c9:14:f7:b3:98:db:99:dd:
ff:3f:b8:fa:22:85:7b:1d:0e:af:fd:45:5a:81:c1:
91:04:ef:34:38:3d:41:2a:d5:9e:59:68:f6:5e:7a:
c4:de:cb:0f:f3:8b:a5:85:81:14:51:ef:e1:72:30:
83:70:b5:d6:d3:c1:c1:63:f3:a1:8a:dd:29:4d:75:
ad:80:2e:22:a9:1d:1e:2e:e3:e8:f7:94:f4:cf:bc:
74:5b:70:2e:15:f5:2b:17:c7:e8:1a:e0:85:d6:15:
71:69:87:2f:0a:e8:3c:94:b0:08:d2:d4:37:d3:01:
a2:e5:e6:1c:25:ac:9d:d0:77:c7:cb:f8:32:4d:2b:
cb:67:54:fa:05:1d:d7:e0:44:d9:68:c5:e2:f1:3b:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:E6:46:EB:AE:5C:E2:EE:28:2A:94:1C:B8:17:6E:BC:CE:34:9C
X509v3 Authority Key Identifier:
keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/B8C57E86E40511F09F69296D616F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.210.0/23
Signature Algorithm: sha256WithRSAEncryption
23:ec:e9:46:68:6b:83:95:af:44:67:ea:5c:00:38:28:af:95:
d6:9e:f3:41:01:bb:ef:2e:3b:66:4d:9c:c6:2b:02:60:80:51:
6a:1c:57:ce:62:75:2e:2d:c9:52:04:67:ae:43:d4:ff:83:79:
d0:3e:c1:a8:07:9e:c8:c0:73:12:be:1e:0c:bd:3f:1d:31:ec:
8b:78:48:aa:63:8b:d8:3f:21:72:25:a0:21:25:9f:6d:4d:e3:
41:7f:f2:41:5d:87:6b:d8:9c:72:19:bb:39:83:2f:50:95:53:
93:85:2a:c1:cd:95:e1:6e:d9:7e:23:f8:18:c3:d4:37:8a:0b:
4c:0a:ee:8f:eb:7e:eb:ce:c4:2f:52:ae:21:61:0c:02:41:19:
af:48:39:2c:3a:72:9f:6d:d7:79:15:23:79:1d:e3:e5:07:ea:
d5:3c:92:a0:d0:23:e3:77:30:23:5d:04:8a:eb:00:ec:4e:60:
9b:35:f7:fe:ea:19:c9:49:36:1b:e9:7b:d9:04:85:c7:46:3a:
fa:0b:e6:03:1a:35:5f:c9:94:e9:86:6d:99:ec:6c:6e:94:80:
aa:e7:65:37:aa:46:34:3f:aa:78:c6:c2:96:78:18:4c:67:b5:
64:92:b5:b7:3f:c7:8a:30:63:e2:31:fb:1b:45:9f:09:c4:d7:
b8:c8:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 20:53:17 2026 by rpki-client