This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4B1D585250EA11EC8FF55B24C4F9AE02.roa
File: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (raw, json)
Hash identifier: j4swnApm+9qnd1JxhNqpHgqCfq33TfBVlK6hEwOceBY=
Subject key identifier: A0:AB:D7:FC:C5:5A:A1:B7:77:68:19:EF:11:1D:37:37:59:DC:F9:02
Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial: 04C3
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4B1D585250EA11EC8FF55B24C4F9AE02.roa
Signing time: Tue 18 Nov 2025 20:11:22 +0000
ROA not before: Tue 18 Nov 2025 20:11:22 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9744
IP address blocks: 52.128.224.0/19 maxlen: 24
148.66.0.0/19 maxlen: 24
216.118.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 20:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Validity
Not Before: Nov 18 20:11:22 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691cd2ea-26ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:7a:79:54:0d:27:3e:c6:ab:45:e5:0d:e2:
08:41:a5:07:57:11:f6:79:04:be:34:d5:c1:ec:42:
d7:86:f9:79:d0:b0:6b:0c:81:9f:71:c9:40:e2:0f:
e1:39:b6:a6:a8:d4:c4:78:ca:2e:d3:56:b6:2e:09:
c3:24:d4:52:86:66:45:6c:11:ea:4d:3f:c4:fe:e5:
92:94:4e:bb:45:d0:24:82:03:a7:b7:4b:92:58:77:
4f:0f:9f:a8:fe:7e:bd:cc:0b:8f:b6:bc:42:91:d1:
f9:10:91:3f:bb:78:7d:f8:bf:95:94:30:e7:c9:97:
57:f1:ee:96:51:c9:2d:86:05:63:68:65:cc:97:86:
d6:73:6f:42:e4:26:e3:a8:18:b8:19:6a:db:83:1d:
e3:a0:c0:1e:bd:84:88:07:9b:86:b2:00:1c:2b:a3:
12:4e:86:a3:13:cf:cd:f1:a9:80:4c:cb:6e:6d:d2:
68:b8:ad:90:3f:96:5c:f7:b9:3c:aa:b0:ed:6f:7a:
8d:5c:6d:32:1a:e2:a1:e9:59:f8:db:12:e0:37:5a:
8f:08:b7:72:f7:af:b3:1e:ac:35:c8:96:6a:ad:d1:
31:4b:75:17:a7:7f:44:4d:5b:b7:bc:ba:48:c8:d0:
4e:c0:f4:da:8c:cc:9e:0e:3c:bc:4f:63:fd:57:9f:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:D7:FC:C5:5A:A1:B7:77:68:19:EF:11:1D:37:37:59:DC:F9:02
X509v3 Authority Key Identifier:
keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4B1D585250EA11EC8FF55B24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
52.128.224.0/19
148.66.0.0/19
216.118.224.0/19
Signature Algorithm: sha256WithRSAEncryption
46:98:15:c1:54:6e:b1:75:68:be:7f:05:dd:64:89:c2:11:41:
91:72:98:3e:ad:dc:36:b5:57:2e:b0:d8:e2:86:04:b5:b0:f1:
e5:95:65:61:71:76:e2:35:10:64:e3:28:0e:2e:db:c8:0a:6a:
7c:6f:c6:ac:1e:92:a6:92:a6:09:21:17:78:9c:2d:4b:84:59:
9f:a7:c0:36:5f:19:aa:66:08:24:71:22:a0:38:b1:f5:56:8c:
36:40:39:54:33:3a:75:0d:2e:a1:49:be:cd:22:99:ea:f1:8f:
43:c4:fd:48:72:c9:d2:0a:05:95:54:dc:ca:14:65:56:ac:7b:
f6:ee:8f:b0:6a:cb:3a:af:c5:e8:53:6b:8d:52:56:22:0c:45:
86:ab:fd:23:c9:69:74:ca:48:6b:31:78:4c:48:a5:bb:4c:39:
ac:66:62:b2:2b:93:8e:01:a0:7b:2f:2f:4a:91:bb:19:db:98:
dc:00:76:a4:dd:d6:69:3f:fb:54:cb:d4:d5:85:7c:87:8a:83:
9d:26:94:13:42:3a:c7:52:da:40:39:d8:af:8c:b5:b9:f1:b6:
10:f3:73:d2:67:f5:d5:02:4a:8a:8f:d1:cd:37:5f:31:ab:cf:
2d:55:11:62:45:c3:dd:f8:de:1d:3d:35:2c:32:4e:98:fc:f1:
3d:27:1c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 05:06:40 2025 by rpki-client