This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/596C54DCE83F11EE81772A87C4F9AE02.roa
File: 596C54DCE83F11EE81772A87C4F9AE02.roa (raw, json)
Hash identifier: h9KlnX5iKfau8qxu9XcKByc0GSoNDAl5oQ47MzffEdM=
Subject key identifier: 53:85:95:78:90:EC:9D:0A:F3:AA:3A:BC:11:19:8C:99:DD:9C:31:A1
Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial: 1A28
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/596C54DCE83F11EE81772A87C4F9AE02.roa
Signing time: Thu 08 Jan 2026 17:13:48 +0000
ROA not before: Thu 08 Jan 2026 17:13:48 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 17639
IP address blocks: 118.215.72.0/21 maxlen: 21
122.252.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6696 (0x1a28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Validity
Not Before: Jan 8 17:13:48 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=695fe5cc-cdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:a6:5e:2a:03:c4:58:d9:c4:4b:17:df:4c:
1c:11:3b:ba:f1:6c:49:1e:7b:88:3c:db:1a:7d:1e:
f9:18:a4:e6:19:70:9c:4e:f7:b3:b9:b2:8c:3b:18:
a2:65:85:0d:35:93:8e:02:7b:55:7a:07:b8:ed:4b:
09:e9:c9:7a:7a:3c:74:0e:3d:c7:f4:31:20:76:c8:
ef:b4:fa:e5:62:35:02:0b:81:e3:d1:77:0b:14:93:
c0:6e:51:1e:76:2a:46:88:83:79:13:9d:47:68:89:
7b:ac:a4:00:55:06:40:57:14:ac:a8:ca:11:76:16:
14:3d:d5:a9:52:07:0a:c2:98:bb:d1:d1:5c:31:cf:
50:94:8a:bc:5b:97:30:08:9c:4a:73:a8:ee:93:60:
90:1d:ad:2e:5d:f7:da:f3:f2:c1:a6:f1:10:5e:0e:
e7:57:fb:d4:90:5f:89:fb:35:11:19:d0:1d:65:af:
bb:bd:a1:b7:05:05:7d:6c:fd:02:b7:8b:cf:8f:a4:
e3:49:ab:ee:52:92:7d:79:08:5f:9b:b3:5d:15:c2:
ec:69:75:9c:39:91:43:fa:86:05:5e:57:6b:be:21:
ee:60:30:d4:b0:d3:19:17:66:62:a8:ae:61:21:34:
06:88:83:4e:73:26:78:06:2c:09:0a:fb:4d:77:ba:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:85:95:78:90:EC:9D:0A:F3:AA:3A:BC:11:19:8C:99:DD:9C:31:A1
X509v3 Authority Key Identifier:
keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/596C54DCE83F11EE81772A87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.215.72.0/21
122.252.128.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:7a:7e:01:a8:40:fb:31:89:ad:48:20:f4:79:18:1b:3c:43:
7f:d8:9e:e0:d3:28:69:73:8a:74:a0:0a:13:99:95:1e:07:fc:
78:38:19:11:76:b6:23:ad:0f:60:3c:14:f8:3b:b2:14:05:0c:
99:7d:9e:00:ed:24:db:eb:c0:75:77:29:91:19:d8:fa:7e:71:
ea:a0:28:35:7f:a1:4a:ee:d3:db:8c:46:c5:1b:8b:c4:7f:7f:
ff:91:9f:62:76:45:9a:5b:4a:c9:e3:4a:54:b2:c4:da:ba:d2:
b4:d5:83:e7:92:e1:d5:90:0e:1a:76:f8:1f:b3:6d:aa:3f:71:
4c:6e:10:72:c6:45:a3:e1:9c:7e:1f:c3:ad:0e:a8:f1:96:55:
12:c2:6c:0a:78:21:96:2c:06:f1:a8:b1:ee:40:ed:49:af:c7:
a0:ec:ca:ba:ef:a0:66:3b:df:4f:49:fb:62:3b:71:0c:e9:19:
44:bd:f4:a3:a7:61:14:84:1b:97:9b:19:95:b1:88:b5:75:6e:
88:88:9e:36:a6:1a:54:34:0b:8b:74:df:ed:83:11:4b:aa:cd:
f0:74:51:eb:b8:79:42:3f:6b:4d:84:08:b0:41:f2:8d:c0:32:
4b:ff:ae:a5:1c:8c:ec:71:f0:dd:02:42:3d:1c:9f:5f:ee:b1:
f8:29:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:09:22 2026 by rpki-client