This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
File: 2C4F5466E47A11F08671F3E23F6F56BC.roa (raw, json)
Hash identifier: TuO9+5pXcuLpHMKBYcmaCFTYvye6Er5hRqXH0bP/+Jo=
Subject key identifier: 4D:24:9A:43:58:F8:15:A6:F8:0F:3D:91:23:34:7E:DD:E5:90:C5:CA
Certificate issuer: /CN=A9193C07/serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Certificate serial: 0D
Authority key identifier: ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
Signing time: Mon 29 Dec 2025 05:49:43 +0000
ROA not before: Mon 29 Dec 2025 05:49:43 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154462
IP address blocks: 144.79.220.0/23 maxlen: 23
144.79.220.0/24 maxlen: 24
144.79.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 07:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193C07, serialNumber=ED3C1BDEA37EFDC4EACB554EB88B10C15402E83A
Validity
Not Before: Dec 29 05:49:43 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69521677-77a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:d5:0f:0b:b4:6b:8a:61:06:40:ac:06:bc:
36:bd:34:c3:20:f4:bc:73:64:4f:d6:3c:b1:a2:f8:
38:77:9d:69:99:a7:5f:6b:f8:aa:d8:38:13:a9:6b:
e5:4d:60:55:7c:ac:7e:8d:c0:43:be:d3:e8:3e:dc:
70:46:63:eb:32:53:f1:7e:31:0c:39:f2:fb:ff:a0:
65:c8:d8:30:f9:78:25:10:00:fd:77:26:ac:c8:ed:
65:56:82:ba:cd:83:58:3c:cc:3b:d1:59:09:96:42:
1a:a9:56:c0:c2:6f:01:a4:0e:ed:db:35:3a:1a:17:
ca:b1:82:39:d2:dd:05:fd:3f:cc:0a:dd:e1:76:40:
5c:cb:06:66:55:84:1c:fd:50:28:3c:11:6e:79:db:
c9:20:4a:e3:a0:b3:e6:12:eb:57:ff:a3:03:64:fe:
5e:91:60:73:bf:67:be:fc:6f:ed:46:4d:62:18:ca:
19:1f:f9:93:c0:d7:8c:06:fc:fd:7d:dc:7e:ff:69:
11:c1:5b:e1:20:0a:1f:69:f7:40:bf:ad:89:ed:b5:
eb:fe:9f:8f:c3:f2:ce:27:c1:a8:5d:3f:9c:1a:58:
ca:54:f3:dd:ed:6d:02:60:e7:97:87:2d:85:d1:23:
1c:db:42:87:57:09:f3:14:b2:12:52:21:4a:bb:f1:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:24:9A:43:58:F8:15:A6:F8:0F:3D:91:23:34:7E:DD:E5:90:C5:CA
X509v3 Authority Key Identifier:
keyid:ED:3C:1B:DE:A3:7E:FD:C4:EA:CB:55:4E:B8:8B:10:C1:54:02:E8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/7Twb3qN-_cTqy1VOuIsQwVQC6Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7Twb3qN-_cTqy1VOuIsQwVQC6Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C07/E03E95E0E47511F0BD6001353F6F56BC/2C4F5466E47A11F08671F3E23F6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.220.0/23
Signature Algorithm: sha256WithRSAEncryption
93:60:bf:1f:6a:64:32:1e:af:1c:e5:e7:f7:72:4c:84:8c:38:
81:03:50:3d:a8:c0:c7:d9:3a:bc:1b:7c:25:ac:b4:f0:68:42:
62:62:ae:4b:ab:ae:dc:87:50:f5:3b:3c:68:25:7b:dc:1d:d8:
c2:f0:a4:3f:e3:5c:49:df:04:e0:e6:3c:66:18:ba:55:de:92:
5b:cf:7f:d3:b5:ff:20:8a:e7:b8:ad:14:07:d9:0a:13:fe:27:
1a:5d:43:5b:50:8c:7b:26:63:1d:e1:11:9b:f9:37:b6:11:1c:
04:c8:22:4c:61:48:57:31:25:45:56:6a:a6:22:9f:c4:26:46:
dc:7d:89:99:c3:07:2d:10:96:25:cd:76:b3:a3:30:a6:ff:4d:
a0:83:67:01:b1:b5:4c:c4:2a:f7:f6:25:8b:40:ed:f6:ba:e0:
f3:dc:8b:64:49:5f:0b:72:6f:d9:2e:7a:c0:e8:3f:b8:f4:36:
c6:c2:9d:c7:2a:d2:98:a9:81:1c:eb:76:12:43:24:48:3a:c7:
ff:e7:21:38:7a:ba:c3:36:6c:a0:24:0a:81:4a:c9:da:15:3a:
61:c1:c6:bf:07:98:d9:99:dc:bc:d7:0b:da:7f:b4:ce:85:6d:
5a:c8:5b:c4:12:eb:e6:bb:5d:82:78:58:bf:de:89:d2:97:5b:
94:3d:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 17:55:33 2026 by rpki-client