This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/707ABBBE73F811F0B8A9582CC4F9AE02.roa
File: 707ABBBE73F811F0B8A9582CC4F9AE02.roa (raw, json)
Hash identifier: aeXdNNQNabgrgBCmkQacK1+L1cNE5fkHv7C0sQiLMEA=
Subject key identifier: B9:77:AA:55:FA:EA:C9:94:67:B3:F0:67:C3:34:35:A6:F5:7D:57:84
Certificate issuer: /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial: 40
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/707ABBBE73F811F0B8A9582CC4F9AE02.roa
Signing time: Wed 19 Nov 2025 05:53:47 +0000
ROA not before: Wed 19 Nov 2025 05:53:47 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9419
IP address blocks: 155.69.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Validity
Not Before: Nov 19 05:53:47 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=691d5b6b-7d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:8f:1c:ae:8c:23:b3:a3:82:b6:1a:b1:08:
35:a5:79:25:0b:46:fb:9f:72:58:12:e6:da:ac:e1:
c0:e0:0d:44:7a:a7:7a:74:7e:c9:3a:ed:de:c9:1b:
61:23:a1:a4:54:32:0f:a3:bb:f0:56:1a:eb:b5:68:
3f:c7:ab:65:37:8c:e2:27:4a:34:9e:14:0d:33:86:
b1:f9:dd:c8:33:25:a7:6c:3e:5d:6f:30:48:f5:98:
c8:ef:f0:aa:20:ad:54:5d:0e:15:8b:c9:bb:f2:1f:
b7:49:64:5b:c0:32:b3:d1:70:e5:e4:39:9a:88:11:
5e:ef:80:76:13:d7:e2:04:c5:28:75:7a:ee:03:a2:
fc:69:fd:c0:91:37:99:79:ee:3c:53:f4:a5:f6:20:
7a:9e:14:6d:5d:60:47:4b:05:b8:ff:20:0c:89:3e:
43:b7:2a:46:55:0a:11:62:85:1a:6c:23:da:57:ea:
e6:c5:98:cd:c3:2e:fe:cf:39:ce:8c:19:4f:04:8f:
db:f0:a6:bf:b2:1b:bc:db:08:21:b1:5d:b9:37:db:
5a:9b:7b:9a:15:27:99:8a:51:d8:e2:37:ef:ac:9a:
46:e8:ee:d8:51:1e:cb:ff:57:ba:c3:e8:1b:6e:e0:
34:4b:14:6d:75:95:fb:5d:dc:cc:63:62:fb:23:bf:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:77:AA:55:FA:EA:C9:94:67:B3:F0:67:C3:34:35:A6:F5:7D:57:84
X509v3 Authority Key Identifier:
keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/707ABBBE73F811F0B8A9582CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:8c:aa:d9:83:ee:70:d4:80:c2:42:29:15:fe:98:5c:97:1f:
e4:df:96:91:59:cc:3c:50:3f:5d:56:a9:6b:13:1b:f7:90:40:
e3:9a:a8:1a:dd:6c:d2:5d:c2:a8:d6:4f:d3:7f:df:c1:31:cc:
a2:9e:f7:23:50:f8:68:e6:46:9a:a0:75:85:5f:d7:8f:d5:5c:
f5:9b:46:b3:4c:30:ce:80:60:24:fe:b9:88:07:88:7f:00:05:
fa:b0:f6:f1:41:0c:d3:d8:81:c3:f1:48:65:4c:7d:b9:13:4e:
0d:6f:83:c5:0a:c5:ba:89:f2:9e:73:b1:c3:bc:0b:5c:b1:46:
b4:4c:79:b9:da:40:02:66:3d:d0:d8:c9:fd:a4:b5:c9:9d:40:
1c:f2:82:38:dc:ed:24:3b:ad:40:d5:5a:8d:66:64:0a:83:65:
7a:f3:42:99:c0:96:b4:a9:33:60:ea:23:e1:4e:18:62:36:9c:
71:11:5b:7e:0f:01:20:c5:e8:59:93:ae:c8:d4:06:0b:c1:44:
38:32:c5:03:b4:51:70:35:d2:13:4b:92:0d:9c:d8:0d:e1:fb:
ee:42:5a:dc:c7:f1:f8:90:fd:bf:69:32:3c:f9:dd:9b:40:7b:
7b:52:3e:29:a1:38:dc:42:a4:43:b3:8c:c7:3d:1e:b3:81:1a:
95:71:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:50 2025 by rpki-client