This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/E830A74E71ED11EF9D592D1AC4F9AE02.roa
File: E830A74E71ED11EF9D592D1AC4F9AE02.roa (raw, json)
Hash identifier: hRALKKZYrXjRAZFH/kodixrgghdkVI/t4Zis6l2iMMA=
Subject key identifier: 85:E8:6F:FD:FA:C8:4E:62:65:0B:FF:F0:CB:E5:46:61:7C:C1:DC:A6
Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137
Certificate serial: 01AB
Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/E830A74E71ED11EF9D592D1AC4F9AE02.roa
Signing time: Tue 23 Dec 2025 03:23:34 +0000
ROA not before: Tue 23 Dec 2025 03:23:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149311
IP address blocks: 2001:df3:2fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl
rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137
Validity
Not Before: Dec 23 03:23:34 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=694a0b36-f61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:17:6f:f2:0a:e6:f4:47:06:1b:8e:39:09:
96:7b:9f:19:4c:9b:ad:e4:19:e8:8b:bf:34:b4:21:
48:98:fb:a7:b4:29:84:6c:d6:b6:32:9e:ac:6e:cd:
f7:86:8c:f0:bb:11:6a:76:c5:c4:94:72:e4:c0:89:
aa:ec:48:20:ce:c0:e3:54:f8:8a:93:d7:6f:79:67:
bf:6e:06:2b:b4:dd:b8:66:f4:6f:67:e9:b0:ae:99:
fa:bf:2c:19:38:1d:28:21:f4:af:3c:09:91:58:a5:
f7:57:20:d3:3b:11:f6:d2:8f:14:eb:cd:92:51:c3:
78:6f:c2:05:cb:1e:ab:78:16:63:ea:91:8e:07:d3:
14:02:71:d7:ba:54:4e:dd:2f:9a:98:92:b5:82:21:
1a:07:0f:f5:f5:0f:77:5f:aa:bd:ab:ab:0c:e7:da:
81:5c:77:f4:6e:95:0f:aa:ee:cd:b1:47:05:ce:93:
a3:1e:1c:bf:03:95:be:56:37:a1:ee:b0:da:3d:60:
de:0c:11:f5:a7:d1:74:d7:9a:a0:00:f7:44:c1:52:
0a:a4:58:5d:d3:11:dd:db:26:e1:e8:e2:5f:70:d6:
38:8d:16:68:c0:43:40:6f:e2:24:64:86:94:94:92:
2a:58:1c:45:23:8c:11:70:2d:77:55:00:b0:48:d4:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:6F:FD:FA:C8:4E:62:65:0B:FF:F0:CB:E5:46:61:7C:C1:DC:A6
X509v3 Authority Key Identifier:
keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/E830A74E71ED11EF9D592D1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:2fc0::/48
Signature Algorithm: sha256WithRSAEncryption
9a:e5:fa:98:68:5d:34:39:03:10:cd:ff:77:16:e5:5c:e8:98:
46:b5:c3:ea:f5:74:bb:61:83:d3:ff:98:b6:f6:b7:57:ff:e6:
74:54:75:6d:f3:7c:14:a3:c3:62:99:a3:36:e2:b1:9b:20:d3:
d4:1a:4a:9b:d6:d0:e7:f6:2a:dc:f0:84:9b:4f:ac:63:32:b7:
d6:78:9a:c6:1e:dc:5a:5b:37:8c:a3:f5:5c:62:54:b8:25:42:
20:2a:81:a1:c6:66:10:f4:39:a9:4f:e4:ea:d5:b0:fb:c6:2a:
17:a8:b3:45:15:dd:d0:ee:a2:2d:bc:5a:9f:af:a3:0d:b2:bf:
43:b3:db:d3:66:93:33:2f:ea:99:21:f1:8f:37:c5:6a:de:a6:
9c:7c:17:a0:0d:e1:fe:32:cc:cd:66:3c:c1:10:be:b9:7f:31:
59:1d:46:b4:8b:ba:2c:9a:c8:d8:21:20:f3:36:de:03:98:0f:
7e:cc:d7:ae:17:a5:07:88:21:22:09:26:df:e2:bd:d9:ee:f8:
03:81:48:d9:22:d6:95:49:17:51:14:08:34:98:9d:48:39:dd:
ba:cc:00:1e:35:20:b7:9d:f1:ac:e2:cc:37:bb:ed:5a:f2:89:
34:c7:5a:45:97:f8:f2:8c:10:c0:a6:48:71:4e:c2:af:34:aa:
5e:b1:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 15:24:56 2025 by rpki-client