This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa
File: 54F6A0BECB7911F09243C583C4F9AE02.roa (raw, json)
Hash identifier: hAYQ1VPnOOWMnSVdZSl4wQs6i5z65CER8V7if68F6QQ=
Subject key identifier: 43:0C:C3:F7:00:EB:1E:29:21:03:26:96:58:C4:B3:17:02:AC:96:DF
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2035
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa
Signing time: Thu 27 Nov 2025 10:10:43 +0000
ROA not before: Thu 27 Nov 2025 10:10:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154391
IP address blocks: 144.79.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 12:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8245 (0x2035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Nov 27 10:10:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=692823a2-68c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:33:09:d8:34:53:9b:09:cd:e2:e0:ca:e0:
38:96:61:a0:f5:f4:fe:5f:ee:e2:c4:6b:81:f1:e0:
6b:32:70:a4:94:bb:cc:f5:ea:38:3d:25:5a:39:c1:
36:c4:28:7a:a2:f1:55:e1:36:2a:23:50:28:91:8f:
98:d5:1c:ad:2e:c0:4b:ac:49:f6:cc:8e:c7:68:44:
b7:4f:37:74:2b:05:9d:9e:db:5c:e4:8a:36:19:6c:
3e:cf:67:38:f3:ac:e9:c6:16:a5:b6:35:4a:08:f5:
7b:c0:9a:99:62:4c:93:52:6c:bf:dd:a6:7b:fa:5a:
53:97:e9:7d:b3:8d:c6:0f:29:f3:76:08:61:1d:34:
f1:d0:2a:e6:a6:9f:2c:67:ee:20:c6:5f:f1:65:65:
bc:be:c7:72:27:30:50:b9:60:97:ac:cc:c1:17:db:
13:ef:83:dc:5c:40:d6:4d:eb:6f:d0:94:a8:35:3c:
d9:12:d6:14:0a:1d:70:2b:10:ec:fd:24:8a:a5:2b:
96:69:11:51:e4:9e:92:c3:48:8d:03:68:71:5c:73:
40:a2:e6:4d:b4:54:53:22:d8:40:8d:c3:8e:de:f0:
92:b6:b8:18:91:c2:22:6d:44:54:69:22:bc:6f:43:
92:d6:71:ca:02:93:f7:cb:c6:81:00:ac:27:83:39:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:C3:F7:00:EB:1E:29:21:03:26:96:58:C4:B3:17:02:AC:96:DF
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.32.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:33:47:bd:36:0f:22:54:a7:4e:ec:1e:37:d9:d2:31:18:0f:
20:6d:a1:25:01:bf:b7:56:cb:f3:22:79:06:de:9d:b7:f7:12:
29:25:e1:91:68:5f:47:a6:77:97:a9:0a:fb:cd:3e:5d:83:22:
1a:0d:51:b6:38:f8:7a:c9:d2:36:aa:57:e1:a4:62:5e:90:93:
77:4e:49:1a:a6:2f:e5:0c:0c:e1:62:16:ef:4c:2f:0e:0b:54:
af:ac:6f:7d:f4:03:56:47:b9:d0:db:f2:c6:67:b6:56:bc:32:
94:a0:23:c3:78:d7:04:a8:0a:07:15:de:ae:eb:bb:c8:ef:02:
24:de:23:37:d5:e0:04:e5:8e:96:ea:ac:36:1e:95:25:98:aa:
ba:43:fa:be:85:79:73:a0:bb:c6:0a:f1:9a:34:b2:e2:22:3d:
93:6d:14:51:a7:97:3b:7f:9a:6c:68:23:ae:f2:e3:39:90:d4:
f9:5d:62:84:25:76:8b:af:ef:9e:3d:95:0f:3d:a3:be:3b:d0:
6b:c8:66:3f:b6:a9:a1:bd:f9:09:43:88:5c:21:3f:c2:57:6b:
4c:7c:86:fd:c3:59:ba:ca:e5:e1:f2:32:fa:ae:9d:d3:b8:84:
85:7f:63:9e:78:3e:d7:4f:29:9d:7c:0a:10:a6:f2:9c:41:35:
e7:e0:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:05:34 2025 by rpki-client