This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/178177F0D35C11E69A0BDB79C4F9AE02.roa
File: 178177F0D35C11E69A0BDB79C4F9AE02.roa (raw, json)
Hash identifier: f7zJA/iphpkZ51loIl8XAKHNO9/1kyL5kdajC6MCgiU=
Subject key identifier: 7B:39:94:27:ED:55:AE:B6:22:33:ED:62:73:AD:30:6D:F7:21:08:A4
Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial: 1D61
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/178177F0D35C11E69A0BDB79C4F9AE02.roa
Signing time: Fri 12 Dec 2025 16:14:07 +0000
ROA not before: Fri 12 Dec 2025 16:14:07 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 2647
IP address blocks: 202.167.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7521 (0x1d61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Validity
Not Before: Dec 12 16:14:07 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=693c3f4f-8439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:7f:1d:6e:3a:81:4a:57:f3:fb:b1:eb:f6:
84:b5:7c:10:b0:fc:cc:46:97:03:f3:df:aa:a5:0e:
f2:22:c4:b6:7d:ff:3e:37:c6:be:64:5e:96:1c:6c:
0b:61:af:df:c2:12:36:46:96:bf:d2:42:8d:fa:d3:
bb:93:23:e9:41:41:ed:11:ac:4d:47:f3:94:dd:cd:
6c:58:18:78:4f:ce:87:2a:39:50:ee:fa:15:60:fc:
90:9a:79:8f:5c:be:27:66:a3:db:94:42:1b:4e:8c:
4b:39:eb:f4:03:cd:0b:78:ef:00:0d:a2:ec:bf:19:
43:32:81:1b:df:0e:e9:bc:6b:42:7a:5b:02:25:5d:
07:fb:a1:34:24:4d:af:65:3b:fb:2a:1a:27:17:d0:
22:f7:b7:2e:83:3c:ba:cd:ae:af:e9:63:14:96:fc:
97:a5:79:dc:b7:68:2c:f3:e8:07:cb:b0:85:36:26:
04:64:15:b9:23:29:4d:22:1c:b1:6d:9b:24:a9:d2:
08:00:50:45:47:87:0a:e6:c9:19:2d:f1:d5:ed:94:
ab:85:cf:4b:39:db:0e:5f:ce:b0:6c:52:40:1a:77:
24:7a:bf:f5:2d:02:9e:db:16:a7:77:ad:17:d4:7e:
b7:84:2d:a9:fb:45:e4:7d:22:18:bc:56:53:0c:5d:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:39:94:27:ED:55:AE:B6:22:33:ED:62:73:AD:30:6D:F7:21:08:A4
X509v3 Authority Key Identifier:
keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/178177F0D35C11E69A0BDB79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.167.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:7d:14:e8:76:c2:66:fc:4f:f7:ae:e2:66:42:6d:95:46:a2:
95:27:8b:04:a0:33:e7:c3:af:41:6e:61:8f:93:8f:cc:a7:a7:
22:39:44:45:0d:d6:4d:1b:ff:c5:2c:79:99:e2:9f:2d:d9:49:
6d:46:01:2e:8a:06:9a:39:42:de:85:75:19:b5:35:57:1a:5b:
bd:09:79:aa:1c:12:1a:09:cc:39:91:9c:0d:ac:5a:34:42:ae:
bd:da:30:5b:94:8c:77:10:14:70:8b:06:66:28:c4:a5:ae:31:
64:fe:4e:81:80:75:cf:96:84:fc:ba:b4:03:69:fd:69:1b:13:
d2:77:31:e0:5d:6d:ae:73:1d:f2:1b:1c:e7:58:81:cd:f1:4f:
58:01:59:e6:59:07:b4:91:d7:78:f7:33:36:8d:09:3d:31:7e:
de:cf:37:49:30:e7:bc:52:55:83:92:44:31:fa:79:d6:13:d6:
c8:29:d4:e7:3a:f3:19:6c:20:02:48:25:64:96:ba:68:6b:bd:
95:ba:c1:ad:04:7a:b1:e6:d2:63:99:03:27:1f:67:17:8b:9a:
a2:3e:51:4b:49:08:1b:24:31:39:f8:14:1f:4e:ca:b4:d0:62:
d3:51:75:d2:25:62:ea:2e:22:9f:aa:13:f1:1c:8a:88:d5:2e:
31:12:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:49:45 2025 by rpki-client