This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/AB138380985F11EEBA5D186DC4F9AE02.roa
File: AB138380985F11EEBA5D186DC4F9AE02.roa (raw, json)
Hash identifier: AHx+rcesmSJ02RarPyYkZVOe2l/xINiEbEhHNsgsus8=
Subject key identifier: 90:48:AE:79:19:C9:0A:9F:E0:9E:25:36:8E:DB:A0:5E:FC:A5:90:E1
Certificate issuer: /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial: 0C63
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/AB138380985F11EEBA5D186DC4F9AE02.roa
Signing time: Sun 02 Nov 2025 17:35:29 +0000
ROA not before: Sun 02 Nov 2025 17:35:29 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 20473
IP address blocks: 141.164.32.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Dec 2025 16:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3171 (0xc63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Validity
Not Before: Nov 2 17:35:29 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69079660-bd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:3a:b9:26:35:4a:32:c1:c3:b9:2c:b1:23:
2e:61:59:27:89:ab:8e:9f:ec:8e:5d:f2:5e:f2:8b:
e0:52:5e:12:4f:04:08:df:a2:d4:ba:d6:b7:27:68:
af:d2:a0:b7:15:2b:ca:2f:d1:65:f1:92:6e:2a:77:
59:e1:3b:c1:7a:d2:bd:5f:0a:84:3c:01:dc:67:fb:
79:61:ca:33:28:49:a4:13:b4:8e:9d:f6:0f:aa:20:
00:86:90:1f:83:0d:88:f6:45:b7:8c:5a:06:90:4b:
f0:a9:12:e1:29:21:f8:60:13:b7:b8:94:2b:44:bb:
32:5b:bb:9b:eb:c6:1b:81:8c:7c:5b:f9:77:cd:80:
42:aa:e2:75:17:86:cf:d0:f8:c9:d5:c5:ea:47:ff:
ef:c5:05:92:ec:32:58:fe:07:fe:f3:6c:08:25:ea:
2e:c0:50:4c:d7:a0:7d:42:44:3a:83:2f:1c:c3:34:
d2:82:f8:15:40:b1:cf:a3:4c:df:4f:21:2a:b0:9f:
89:ea:ab:72:b2:ee:a4:ef:5b:24:f6:95:ee:11:1c:
df:47:10:ee:52:59:4e:a5:dd:49:0a:d1:c9:62:8e:
fd:77:86:e8:f1:5e:28:96:78:5f:b7:dc:82:09:d2:
a9:24:20:81:28:b0:43:71:ff:6b:58:80:56:7c:68:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:48:AE:79:19:C9:0A:9F:E0:9E:25:36:8E:DB:A0:5E:FC:A5:90:E1
X509v3 Authority Key Identifier:
keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/AB138380985F11EEBA5D186DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
141.164.32.0/19
Signature Algorithm: sha256WithRSAEncryption
31:61:9f:39:ff:2c:d3:0b:c0:fc:90:0a:56:ab:c6:14:2f:f9:
53:2f:90:56:a2:86:36:6a:64:c4:7e:7e:75:e9:84:4f:d0:17:
58:7f:6c:67:37:18:bf:51:a5:f3:78:d0:33:08:44:ca:8f:8f:
72:e3:89:30:2f:17:8e:e0:1a:2c:91:cf:00:98:c5:b5:e5:3a:
c3:2a:a9:7d:89:d8:94:b7:11:86:6e:8d:72:e7:02:4e:7f:99:
93:d1:36:04:07:fa:31:d2:e8:c7:bb:a2:bc:f5:fc:a5:2d:14:
76:90:3f:9f:03:e9:6f:30:6e:25:6b:f1:32:b4:54:85:63:6b:
f8:42:d5:6e:de:f6:10:1f:3e:6e:52:2f:e3:3d:83:63:c5:ea:
17:39:b9:d7:90:07:55:00:34:0e:df:15:a7:39:a4:5a:6e:66:
a1:fa:98:c0:fb:4f:82:9c:4d:50:2e:7b:a5:7c:84:c2:7e:89:
f2:65:2b:aa:4a:e4:49:2d:81:5e:d1:14:b7:cf:dc:19:e2:01:
7c:8c:7a:95:e8:1b:d8:93:70:62:80:61:13:47:ef:f0:aa:69:
fd:81:ca:10:94:a9:46:89:33:73:fe:fd:70:26:7f:b8:3e:79:
43:3b:8c:3c:8f:b4:35:b7:dc:b1:f4:ef:b3:de:6b:9e:85:6e:
d5:37:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 05:03:24 2025 by rpki-client