This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/7013EE7A73F811F0B8A9582CC4F9AE02.roa
File: 7013EE7A73F811F0B8A9582CC4F9AE02.roa (raw, json)
Hash identifier: gsI9bZIEgenwvA+Pmylv8BqkOrAikmMP6MwW5zxivFo=
Subject key identifier: 11:E6:1D:41:20:6E:5A:4E:44:EE:26:B0:6A:3C:02:8E:19:CB:D1:9A
Certificate issuer: /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial: 3F
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/7013EE7A73F811F0B8A9582CC4F9AE02.roa
Signing time: Wed 19 Nov 2025 05:53:46 +0000
ROA not before: Wed 19 Nov 2025 05:53:46 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 3491
IP address blocks: 155.69.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Validity
Not Before: Nov 19 05:53:46 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=691d5b6a-73f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:7f:7c:0e:d5:29:26:f2:54:b2:ee:ad:ed:
30:91:ca:40:b4:4d:63:e1:06:7f:20:07:5c:e0:b6:
a6:6a:51:54:1c:04:4c:9e:ea:cc:c9:d5:7d:fe:80:
e9:c2:f8:b5:60:6d:2d:19:91:79:a5:49:56:bd:62:
bf:43:5e:f3:a4:20:2d:b9:3f:f5:cd:b0:8e:b3:fa:
2f:0f:9a:d8:d8:64:45:4a:42:1e:4f:76:82:9b:2a:
7f:42:4a:81:48:88:b7:ce:83:c9:69:07:cf:9e:4f:
9e:a6:e4:62:06:82:37:65:bb:92:3a:c9:37:e8:61:
4e:9e:46:91:ee:1a:70:f9:37:74:f1:03:2f:78:79:
d8:8c:59:c0:22:2a:31:a8:11:38:69:2a:fc:8c:84:
58:a1:a4:05:a9:17:8c:74:72:b5:4d:40:ba:aa:f8:
bd:45:51:00:58:96:e5:92:cf:f0:48:08:c8:56:15:
26:53:03:44:f0:b0:0f:7f:5c:c9:3c:7d:15:95:46:
be:37:fa:59:fd:fb:c2:7b:14:1c:24:86:5c:c5:05:
bc:bd:02:73:82:f0:9b:c9:ce:1a:7f:b0:7c:8b:8a:
ab:b9:a5:d7:19:0a:68:6d:ed:0e:3f:9f:e2:2b:81:
07:69:7b:52:75:fd:d9:13:6c:8e:3b:dd:40:19:c0:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E6:1D:41:20:6E:5A:4E:44:EE:26:B0:6A:3C:02:8E:19:CB:D1:9A
X509v3 Authority Key Identifier:
keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/7013EE7A73F811F0B8A9582CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:24:fc:d2:8a:4a:5e:7e:e3:d2:91:f8:dd:61:91:88:08:54:
8b:e3:80:81:3c:4c:61:0f:be:00:b2:52:e6:7d:53:41:b9:db:
9d:2b:f0:ea:7d:40:a6:4b:c2:08:64:98:78:46:7c:73:15:65:
2c:13:9e:d3:19:20:44:9a:78:02:51:85:40:af:70:aa:e4:f1:
6c:b2:74:71:75:0c:f6:25:d6:67:7a:b9:99:b7:c4:6b:3c:14:
95:a1:d0:11:4b:af:e2:61:f5:8d:fb:33:fd:3f:ce:07:9b:b6:
58:36:94:9b:eb:3d:6d:bc:93:02:ba:2e:05:5b:38:51:2d:2a:
4c:df:13:6b:20:2e:c0:38:b4:c9:cd:4e:b8:c0:30:ee:79:5f:
e0:1e:fa:22:ff:8c:b8:21:f8:e5:c3:b1:68:52:e1:21:b8:2e:
3f:f5:ee:de:83:90:97:8c:1a:0c:d4:70:49:b5:07:d1:5a:bd:
cb:97:f6:54:9d:84:47:d4:76:ce:f1:c0:1b:4c:cc:fc:3c:8e:
24:07:27:38:e6:c6:2c:7a:56:44:80:c7:e3:c4:18:24:6f:c7:
fc:49:4f:ac:06:12:e4:00:a6:bc:e7:f8:eb:5e:c5:66:ae:63:
82:0d:6d:5b:02:8b:bb:7e:36:f2:f8:59:57:d4:5e:79:8f:fd:
8e:fe:49:25
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
N0MzRjExMC8GA1UEBRMoRTUyMTA3RjRDMURFMDY0NTNFQkQ2RTY5QjRCRjgyNDQ3
MzE2QUExRDAeFw0yNTExMTkwNTUzNDZaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MWQ1YjZhLTczZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBJn98DtUpJvJUsu6t7TCRykC0TWPhBn8gB1zgtqZqUVQcBEye6szJ1X3+gOnC
+LVgbS0ZkXmlSVa9Yr9DXvOkIC25P/XNsI6z+i8PmtjYZEVKQh5PdoKbKn9CSoFI
iLfOg8lpB8+eT56m5GIGgjdlu5I6yTfoYU6eRpHuGnD5N3TxAy94ediMWcAiKjGo
EThpKvyMhFihpAWpF4x0crVNQLqq+L1FUQBYluWSz/BICMhWFSZTA0TwsA9/XMk8
fRWVRr43+ln9+8J7FBwkhlzFBby9AnOC8JvJzhp/sHyLiqu5pdcZCmht7Q4/n+Ir
gQdpe1J1/dkTbI473UAZwJUzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUEeYdQSBu
Wk5E7iawajwCjhnL0ZowHwYDVR0jBBgwFoAU5SEH9MHeBkU+vW5ptL+CRHMWqh0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0NEQjM2QTNBNzMz
MzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtVLXZXNXB0TC1DUkhNV3Fo
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNVNFSDlNSGVCa1Utdlc1cHRMLUNSSE1XcWgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
N0MzRi9DREIzNkEzQTczMzMxMUYwODM5Q0RDODNDNEY5QUUwMi83MDEzRUU3QTcz
RjgxMUYwQjhBOTU4MkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJtFATANBgkqhkiG9w0BAQsFAAOCAQEALCT80opKXn7j0pH4
3WGRiAhUi+OAgTxMYQ++ALJS5n1TQbnbnSvw6n1ApkvCCGSYeEZ8cxVlLBOe0xkg
RJp4AlGFQK9wquTxbLJ0cXUM9iXWZ3q5mbfEazwUlaHQEUuv4mH1jfsz/T/OB5u2
WDaUm+s9bbyTArouBVs4US0qTN8TayAuwDi0yc1OuMAw7nlf4B76Iv+MuCH45cOx
aFLhIbguP/Xu3oOQl4waDNRwSbUH0Vq9y5f2VJ2ER9R2zvHAG0zM/DyOJAcnOObG
LHpWRIDH48QYJG/H/ElPrAYS5ACmvOf4617FZq5jgg1tWwKLu3428vhZV9ReeY/9
jv5JJQ==
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:52 2025 by rpki-client