This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/B64F4796C6A411F08CECEE7AC4F9AE02.roa
File: B64F4796C6A411F08CECEE7AC4F9AE02.roa (raw, json)
Hash identifier: HEnYinVJ0YuQuiQYgcVOfHCEpP2bF8dC8G+j/AGSIK4=
Subject key identifier: ED:86:19:0E:93:3D:F5:FB:22:E5:A7:35:BA:5E:BE:9E:DF:4E:41:37
Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial: 357B
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/B64F4796C6A411F08CECEE7AC4F9AE02.roa
Signing time: Fri 21 Nov 2025 06:38:38 +0000
ROA not before: Fri 21 Nov 2025 06:38:38 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152727
IP address blocks: 203.156.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13691 (0x357b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Validity
Not Before: Nov 21 06:38:38 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=692008ee-5946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:c9:a9:f0:04:a5:0c:94:c3:19:4f:a7:8f:
c1:0b:06:76:42:62:4a:9d:27:d6:e4:d0:24:7a:5c:
b4:16:99:ab:7a:96:5b:95:5d:07:4a:21:2e:2f:34:
be:61:77:7d:94:f5:82:6c:4d:7b:7e:9f:68:97:ee:
f4:45:0b:ee:a0:9d:ed:ff:05:43:aa:96:dd:c3:b1:
1b:d4:ee:73:06:89:b9:70:bf:c7:cc:82:02:b8:5c:
53:a7:6c:50:95:2d:82:ff:e9:68:2b:d0:1e:ba:52:
4d:3a:51:93:11:08:98:b9:e3:24:fe:8e:af:cb:d3:
fd:11:03:4c:89:e8:8f:f9:50:d3:00:7b:c8:b2:c6:
06:ea:a5:aa:b8:d2:16:9e:bb:a2:0d:5c:03:38:d8:
4c:22:5d:51:46:1f:4e:41:0c:e3:ab:a2:6e:6c:f3:
56:e0:00:e0:6e:c8:c5:63:9b:75:ee:a0:e0:e5:dd:
5b:31:92:c8:67:ef:be:e0:6d:55:dc:c9:45:58:b4:
b1:d5:b9:e3:5f:7d:da:38:d5:54:a3:b7:c1:6c:14:
e6:a1:8d:fe:7f:ab:c1:6f:e7:af:6f:ae:a7:52:75:
6a:82:e2:af:64:a2:ff:e3:0b:14:93:e8:f4:49:d1:
45:16:f3:0a:22:9e:bd:1a:fc:b2:2a:98:ea:46:85:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:86:19:0E:93:3D:F5:FB:22:E5:A7:35:BA:5E:BE:9E:DF:4E:41:37
X509v3 Authority Key Identifier:
keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/B64F4796C6A411F08CECEE7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.156.32.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:29:7c:6e:59:7f:23:ea:61:4c:61:52:fe:9a:ee:f1:d6:95:
92:09:ea:c6:28:58:16:07:71:c8:65:d6:af:0b:9a:11:70:49:
d2:81:b9:35:b6:26:f0:24:16:ce:9e:3d:d5:d5:62:04:a7:75:
ff:4c:49:9a:d8:71:6f:96:1e:26:42:b1:4d:29:da:f4:ae:52:
cb:9b:40:38:82:65:37:8f:6c:19:31:9e:7e:86:ed:8c:74:ff:
e7:b3:c5:9d:ea:fc:6b:2e:ed:81:10:1c:08:d9:77:b3:d6:5a:
bc:79:0a:c3:f1:f9:dc:05:a6:8b:5e:9b:3c:ba:36:1a:8d:3b:
fb:c4:c4:75:fe:9f:23:97:56:ae:67:85:d7:3f:ad:32:42:57:
29:12:93:b3:ec:77:81:e3:83:a2:4b:cd:02:17:ec:68:6b:70:
66:a6:13:7d:4b:67:cc:82:f6:18:16:02:1f:ce:db:6d:c6:c9:
31:a3:ab:01:02:c2:bc:a6:52:94:31:99:70:a5:f9:29:91:86:
6a:d3:a0:bf:1e:83:32:5a:89:57:7c:45:57:9b:1b:eb:bd:63:
1b:ac:e3:b8:05:28:48:b8:65:ef:73:c4:03:b8:35:4b:17:d7:
e3:61:bf:8f:82:9d:b2:4f:df:31:dc:6d:f3:87:23:16:2c:01:
79:d4:df:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 22:46:11 2025 by rpki-client