This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/D835294EC68F11F0AE9F096DC4F9AE02.roa
File: D835294EC68F11F0AE9F096DC4F9AE02.roa (raw, json)
Hash identifier: geqWTDV3zO8R+8hc3hK4Yha0O+IwomnkXW9VrxlDCwo=
Subject key identifier: 9F:16:8C:2C:B0:98:9D:79:6C:74:70:26:6B:8F:86:BE:BF:1B:23:DE
Certificate issuer: /CN=A913BE1E/serialNumber=17393F20D13130F9544FE8EC1BB0F7E8805E824E
Certificate serial: 03
Authority key identifier: 17:39:3F:20:D1:31:30:F9:54:4F:E8:EC:1B:B0:F7:E8:80:5E:82:4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/D835294EC68F11F0AE9F096DC4F9AE02.roa
Signing time: Fri 21 Nov 2025 04:09:16 +0000
ROA not before: Fri 21 Nov 2025 04:09:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139330
IP address blocks: 144.79.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.crl
rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BE1E, serialNumber=17393F20D13130F9544FE8EC1BB0F7E8805E824E
Validity
Not Before: Nov 21 04:09:16 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=691fe5ec-c255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:e6:78:10:f9:a5:11:9a:a1:f9:f5:79:7f:
ed:e4:9e:20:1b:b6:fa:3a:a8:61:eb:99:fd:a9:8a:
e1:f2:40:f0:b6:ff:6b:e9:ac:6f:4d:e1:d4:cb:10:
55:c1:21:05:e3:7a:7b:05:fa:c4:43:97:24:a0:30:
be:47:e0:ee:04:07:fa:c5:4b:70:a2:e2:19:77:93:
61:62:a2:f3:f2:b3:91:38:64:9f:12:e0:85:87:4d:
36:b8:96:08:69:b7:87:7c:77:ce:09:9d:a7:9e:98:
83:04:70:db:14:88:23:ea:70:6a:a1:39:98:79:e5:
2d:0f:ad:35:ed:23:eb:6f:85:9d:82:0a:b3:cf:4d:
80:88:e8:18:e5:02:bb:33:0a:81:d4:c8:56:af:2b:
66:ec:e2:42:5a:28:ec:05:3f:d5:85:d0:8f:74:26:
51:35:40:df:8b:6c:6b:d8:f2:c0:77:1f:3e:3d:e9:
c3:b6:73:ee:56:23:a9:f0:29:2c:56:7d:6b:39:f1:
33:fd:48:76:8c:8b:59:f9:98:5a:93:6b:70:87:28:
47:cb:47:ce:bd:d7:5f:8d:5a:f7:ef:29:d7:4c:a9:
2e:bc:20:b4:3c:64:09:88:cd:6f:20:15:a6:ce:30:
68:b0:ad:51:44:cc:ba:6f:41:1f:32:0d:ce:71:f6:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:8C:2C:B0:98:9D:79:6C:74:70:26:6B:8F:86:BE:BF:1B:23:DE
X509v3 Authority Key Identifier:
keyid:17:39:3F:20:D1:31:30:F9:54:4F:E8:EC:1B:B0:F7:E8:80:5E:82:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/Fzk_INExMPlUT-jsG7D36IBegk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fzk_INExMPlUT-jsG7D36IBegk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BE1E/81A7668CC66C11F09F555C72C4F9AE02/D835294EC68F11F0AE9F096DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.0.0/23
Signature Algorithm: sha256WithRSAEncryption
83:06:5c:34:9f:00:7b:11:c7:d0:58:46:08:ab:eb:bc:d4:22:
8c:e5:ee:9a:f9:ba:6d:26:68:da:53:22:3f:cc:d4:56:42:bd:
09:41:e1:22:1a:bf:ed:ed:f5:5e:bd:cb:0d:1e:15:39:13:b2:
73:47:16:85:ce:17:c5:df:6c:bf:2c:dc:d7:06:aa:e0:02:56:
c9:da:6b:8d:03:1f:03:a1:de:78:7f:80:fc:77:c9:07:7d:66:
16:99:75:97:e7:46:00:da:7c:af:1e:e4:07:ff:7d:53:24:90:
5f:e6:28:43:71:e0:fa:d3:a0:50:b4:52:7d:82:5c:5b:56:44:
49:30:c8:93:38:99:eb:ca:50:d8:84:69:f1:f3:ba:54:e5:19:
74:6d:35:5d:d3:ef:c9:04:7d:d6:27:b6:e7:14:25:02:cd:22:
07:32:b6:4a:88:1e:8a:27:39:25:77:db:0e:0d:92:c7:bf:28:
11:69:aa:6f:51:c6:f8:8d:dc:48:22:25:b5:fb:a2:0c:7b:8f:
4c:d6:ff:3f:5d:9b:1d:1c:38:65:d3:84:5c:9a:41:a8:84:a3:
c2:5c:65:f3:47:b4:d8:ca:54:53:c3:70:05:ac:98:53:03:f5:
b0:49:74:6b:33:cc:15:56:c9:ee:37:d7:6c:0d:01:dd:43:c8:
81:9b:bc:e2
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QkUxRTExMC8GA1UEBRMoMTczOTNGMjBEMTMxMzBGOTU0NEZFOEVDMUJCMEY3RTg4
MDVFODI0RTAeFw0yNTExMjEwNDA5MTZaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MWZlNWVjLWMyNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrSeZ4EPmlEZqh+fV5f+3kniAbtvo6qGHrmf2piuHyQPC2/2vprG9N4dTLEFXB
IQXjensF+sRDlySgML5H4O4EB/rFS3Ci4hl3k2FiovPys5E4ZJ8S4IWHTTa4lghp
t4d8d84JnaeemIMEcNsUiCPqcGqhOZh55S0PrTXtI+tvhZ2CCrPPTYCI6BjlArsz
CoHUyFavK2bs4kJaKOwFP9WF0I90JlE1QN+LbGvY8sB3Hz496cO2c+5WI6nwKSxW
fWs58TP9SHaMi1n5mFqTa3CHKEfLR86911+NWvfvKddMqS68ILQ8ZAmIzW8gFabO
MGiwrVFEzLpvQR8yDc5x9hWZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUnxaMLLCY
nXlsdHAma4+Gvr8bI94wHwYDVR0jBBgwFoAUFzk/INExMPlUT+jsG7D36IBegk4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCRTFFLzgxQTc2NjhDQzY2
QzExRjA5RjU1NUM3MkM0RjlBRTAyL0Z6a19JTkV4TVBsVVQtanNHN0QzNklCZWdr
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRnprX0lORXhNUGxVVC1qc0c3RDM2SUJlZ2s0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkUxRS84MUE3NjY4Q0M2NkMxMUYwOUY1NTVDNzJDNEY5QUUwMi9EODM1Mjk0RUM2
OEYxMUYwQUU5RjA5NkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZBPADANBgkqhkiG9w0BAQsFAAOCAQEAgwZcNJ8AexHH0FhG
CKvrvNQijOXumvm6bSZo2lMiP8zUVkK9CUHhIhq/7e31Xr3LDR4VOROyc0cWhc4X
xd9svyzc1waq4AJWydprjQMfA6HeeH+A/HfJB31mFpl1l+dGANp8rx7kB/99UySQ
X+YoQ3Hg+tOgULRSfYJcW1ZESTDIkziZ68pQ2IRp8fO6VOUZdG01XdPvyQR91ie2
5xQlAs0iBzK2Sogeiic5JXfbDg2Sx78oEWmqb1HG+I3cSCIltfuiDHuPTNb/P12b
HRw4ZdOEXJpBqISjwlxl80e02MpUU8NwBayYUwP1sEl0azPMFVbJ7jfXbA0B3UPI
gZu84g==
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:05:06 2025 by rpki-client