This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/4E4A18B0D52211F08B0A0834C4F9AE02.roa
File: 4E4A18B0D52211F08B0A0834C4F9AE02.roa (raw, json)
Hash identifier: oZqRBzW1NqDFUlR9NaAyV5sfWERm6KyWOzH8vmoZ6LU=
Subject key identifier: 7E:FA:B6:19:2B:03:52:41:79:78:68:32:54:4D:CB:F6:9F:74:A9:64
Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial: EF
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/4E4A18B0D52211F08B0A0834C4F9AE02.roa
Signing time: Tue 09 Dec 2025 17:12:57 +0000
ROA not before: Tue 09 Dec 2025 17:12:57 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 153791
IP address blocks: 160.191.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 17:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Validity
Not Before: Dec 9 17:12:57 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69385899-e0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:05:0c:a7:a9:0e:4c:e0:1e:56:f0:53:b9:
c0:1b:c5:91:62:98:b1:7a:12:94:5d:26:9c:b0:97:
78:66:fa:59:8d:24:56:69:65:e6:1c:25:6c:c0:36:
9d:fc:31:0a:47:3f:f5:c2:6f:f8:73:38:eb:aa:65:
f8:a2:ed:aa:63:8c:b5:c1:45:0c:18:b7:6f:6b:4e:
38:f2:a5:bf:6a:89:41:6f:76:cf:73:34:98:79:e7:
1b:9d:0a:3a:df:09:65:58:5a:6e:ff:a1:bf:43:6a:
c0:e3:21:31:80:74:4a:a7:1c:24:05:ac:e3:1c:ee:
c4:c7:1b:1a:25:94:0d:1f:54:b9:a0:0f:2a:b4:e0:
de:6f:c8:81:6c:bd:b7:3e:6d:ee:96:ea:e4:81:b5:
7f:58:eb:ef:6a:57:da:7d:16:f5:07:98:35:76:15:
1a:65:aa:65:fa:b3:eb:1e:5b:e7:f4:bf:43:5e:6b:
de:d9:33:3d:ca:a1:ac:9f:db:42:19:95:36:47:5a:
1d:b0:cd:fc:0a:44:fe:a8:e2:a7:63:30:c2:db:0f:
7b:37:04:5c:ee:81:92:f5:d0:14:e6:d8:9b:d0:a4:
f4:34:c6:0d:d4:13:a9:ba:21:43:20:ee:8b:3c:2c:
8f:de:fa:09:51:b5:68:3c:56:55:1f:5e:73:86:c7:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FA:B6:19:2B:03:52:41:79:78:68:32:54:4D:CB:F6:9F:74:A9:64
X509v3 Authority Key Identifier:
keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/4E4A18B0D52211F08B0A0834C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.184.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:ea:3c:72:d5:68:f2:25:40:d2:0b:57:6a:94:35:90:cd:61:
54:86:d8:83:f4:6e:c6:d0:bc:c2:42:a5:10:85:f2:5e:54:6d:
d7:23:22:12:bf:25:4a:09:06:f9:55:ba:97:61:3a:b8:e0:2e:
2d:fa:ed:02:39:17:c8:98:8f:a8:95:ff:98:aa:d7:92:77:95:
d5:38:3b:b9:e6:c6:62:f3:7a:30:60:08:b9:b4:af:7f:b2:95:
8a:35:78:a8:1e:74:33:fe:3f:98:b7:ee:40:24:e7:56:0e:0e:
e4:5e:f7:1c:2c:b0:1d:e9:43:8e:c4:21:be:e4:78:39:6a:dd:
72:87:15:01:60:0d:76:4b:b7:73:bf:4a:e4:42:68:da:f0:ee:
6e:77:23:47:dd:d0:7a:58:2b:56:87:4d:94:c3:64:2f:8c:7f:
1b:ea:9b:96:8a:30:f1:a0:4b:9b:9c:04:c8:93:bb:58:eb:26:
86:2f:06:f2:be:40:5c:c8:9d:7d:37:8b:a9:2e:40:fe:e3:ef:
ed:68:ee:52:85:02:44:09:1b:ee:d5:d8:3e:d1:2a:c3:bb:bf:
31:0b:b1:6a:3a:84:13:7f:25:2c:f5:76:5b:71:4d:53:da:04:
a1:03:df:f5:f1:4e:e2:7b:10:92:96:ad:4b:ae:c5:33:2d:85:
d8:05:47:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 04:56:50 2025 by rpki-client