This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/4792C69CCB5011F08BC97C80C4F9AE02.roa
File: 4792C69CCB5011F08BC97C80C4F9AE02.roa (raw, json)
Hash identifier: ZpwyPiCXkjRXO4ZSTXQ+QaUgc/jpAAvEAS4GzmeP7h8=
Subject key identifier: 3F:E2:A8:4C:FA:0C:D3:A5:88:02:FD:A9:A6:05:7E:9B:88:72:16:28
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 080D
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/4792C69CCB5011F08BC97C80C4F9AE02.roa
Signing time: Thu 27 Nov 2025 05:26:15 +0000
ROA not before: Thu 27 Nov 2025 05:26:15 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138915
IP address blocks: 139.135.120.0/24 maxlen: 24
139.135.121.0/24 maxlen: 24
139.135.124.0/23 maxlen: 24
139.135.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Nov 27 05:26:15 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6927e0f7-943e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:0d:9d:ad:a0:14:20:de:15:76:45:71:3c:
e7:61:87:7e:e0:33:98:5e:fe:ad:7b:46:f4:f6:c7:
1d:0a:08:ab:37:38:df:be:99:4e:5a:48:89:0d:c6:
fa:a3:14:74:41:4a:74:47:fa:c3:d7:34:4e:19:61:
cd:fa:be:77:41:c3:9d:a8:c7:45:93:3c:30:a5:f7:
f9:91:cc:82:bc:1a:22:a6:d6:5a:44:e5:ad:ec:c0:
6d:0a:aa:5d:c0:c7:4c:73:9f:59:5e:c4:d5:8a:ac:
a0:5e:3c:44:d1:e8:f5:8c:61:a9:e5:d1:35:68:8f:
ff:48:b2:ee:d8:2f:ca:60:a7:a5:4f:e6:89:ae:12:
b8:0d:56:03:4e:9e:7a:e6:60:f9:61:12:44:48:e2:
e3:ee:5f:db:03:e0:5a:ec:a7:82:03:19:ea:da:2c:
64:bb:4c:77:e3:86:19:15:77:13:a3:22:8f:64:91:
5d:72:5f:6e:d8:65:a3:0d:f4:24:e0:8d:b3:27:01:
a9:43:16:49:61:80:6a:98:50:d9:03:d1:b7:09:c2:
53:52:69:a8:ca:97:ae:b8:9f:81:e8:cc:a2:fc:cd:
06:9c:6e:84:05:ec:5c:f5:f8:8b:94:3f:b0:62:e3:
ef:b1:46:02:f2:47:df:35:e6:e0:d8:2a:51:46:b9:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E2:A8:4C:FA:0C:D3:A5:88:02:FD:A9:A6:05:7E:9B:88:72:16:28
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/4792C69CCB5011F08BC97C80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.135.120.0/23
139.135.124.0/23
139.135.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fc:4f:00:8d:fe:11:77:f7:8a:71:dd:e3:88:d6:04:aa:09:
77:d9:5d:fb:48:90:c7:04:b0:b9:13:f3:fd:00:90:07:d0:96:
a0:ea:d0:bd:a4:44:51:cd:07:b1:4b:ad:4b:67:0b:58:3a:5c:
fa:de:61:aa:3d:e4:f9:dc:70:3a:16:22:25:23:07:bc:32:04:
85:28:80:f0:54:bc:cc:a4:70:b2:13:59:25:75:ca:c3:10:8c:
c5:31:6c:18:ce:40:9f:74:51:a4:31:18:c8:63:8b:8f:44:0c:
10:bc:39:fd:97:ae:9b:95:99:df:2c:c8:de:07:80:b8:2a:d7:
41:14:ed:b3:c5:b5:e3:ac:e9:97:9e:a3:e5:ad:e9:a1:b0:6b:
52:d7:fe:b5:35:e0:c9:1f:c4:28:d9:7a:ab:36:de:f8:48:af:
36:f9:62:f5:65:d7:fc:c6:01:21:8c:d4:de:f5:9d:05:2d:5b:
3e:ba:fa:a1:31:9b:32:2d:c8:dc:06:9e:80:08:20:26:9b:c2:
4a:5c:ef:ad:4c:05:55:85:66:e5:4d:8c:47:09:87:6a:71:ef:
ff:ed:76:9f:db:b8:83:4e:7d:75:06:b2:36:b5:85:33:b7:b0:
76:fb:42:db:57:b1:90:0d:33:f3:60:59:b9:33:61:0c:2b:55:
86:86:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 01:45:32 2025 by rpki-client