This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235332e302f32342d3234203d3e20313533393239.roa
File: 31342e3133372e3235332e302f32342d3234203d3e20313533393239.roa (raw, json)
Hash identifier: LfUIgUYiQxTJwSybYNLnkYvAWP+55CgFrfvjTRFRLBs=
Subject key identifier: 58:8A:E0:34:1F:81:C9:1F:40:80:DD:03:F4:C9:F7:45:CC:1E:A2:73
Certificate issuer: /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial: 4EE6F02ACEA3FB25690224E1C6844ED2B32A39B3
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235332e302f32342d3234203d3e20313533393239.roa
Signing time: Mon 09 Feb 2026 13:36:09 +0000
ROA not before: Mon 09 Feb 2026 13:31:09 +0000
ROA not after: Mon 08 Feb 2027 13:36:09 +0000
asID: 153929
IP address blocks: 14.137.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Feb 2026 04:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e6:f0:2a:ce:a3:fb:25:69:02:24:e1:c6:84:4e:d2:b3:2a:39:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Validity
Not Before: Feb 9 13:31:09 2026 GMT
Not After : Feb 8 13:36:09 2027 GMT
Subject: CN=588AE0341F81C91F4080DD03F4C9F745CC1EA273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:a9:4e:e7:ca:5c:d0:fc:0a:6d:54:0e:36:
46:df:cc:a7:c3:54:c1:64:98:88:f2:35:c8:7c:63:
e0:8e:4f:87:65:2d:5a:60:4a:ea:9a:1a:7a:6b:21:
34:bc:b5:28:1d:85:d8:84:a2:1a:65:52:22:e9:10:
d3:53:3c:fe:cb:3d:b9:77:d2:64:57:16:66:b5:96:
da:51:c0:d4:55:1b:12:76:09:78:aa:37:a8:7f:7a:
e9:27:71:f0:20:17:83:26:7f:32:51:af:27:1b:64:
c1:ca:e7:d6:d7:e3:bc:d1:0f:a4:7e:2d:28:f1:6e:
93:78:38:04:78:53:59:55:0a:bf:b4:37:cd:de:4f:
2e:b7:2c:12:b3:bd:5e:11:52:29:b4:50:2f:50:5e:
c8:a6:89:8e:16:9d:be:5e:83:65:c8:b2:57:7f:0e:
3c:9d:90:b1:26:7e:6a:9c:22:aa:7e:6e:fd:d0:f4:
08:ca:7f:45:26:62:93:e3:9f:31:1d:6b:d3:2a:50:
22:56:00:9a:b7:df:91:db:84:3c:18:b5:09:d7:cc:
e3:a6:11:83:70:7c:c5:bc:c9:05:21:f6:9e:82:7c:
12:6d:bd:39:00:ad:15:5c:ee:14:a1:7d:0b:8e:47:
0f:ff:ea:19:81:ab:9a:45:00:0f:2e:9f:54:ed:d1:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:E0:34:1F:81:C9:1F:40:80:DD:03:F4:C9:F7:45:CC:1E:A2:73
X509v3 Authority Key Identifier:
keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235332e302f32342d3234203d3e20313533393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.137.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1f:f6:7d:72:93:73:0e:f8:c7:bb:65:6c:e1:69:b9:7f:30:
72:46:76:93:52:fc:b7:fd:c2:51:15:38:ba:e0:91:24:ce:14:
d0:b5:5c:44:db:97:64:a9:60:59:29:9a:a8:c5:c5:d3:8f:ac:
e0:8c:61:66:c4:61:f3:91:94:2f:52:54:57:d0:79:18:95:c7:
92:fd:e6:78:16:0a:48:df:7f:fb:6f:32:1b:05:fe:1c:7c:4a:
50:a4:21:e4:87:55:6f:6b:ec:5e:79:26:ee:21:c9:19:5a:8a:
7b:f4:bf:9b:7b:ed:27:38:ef:69:bd:3f:33:33:29:38:87:18:
c4:4e:55:69:32:4d:88:8e:b1:65:8d:11:c8:92:ac:80:b1:e3:
98:bb:f6:53:84:e8:32:f9:2b:80:fd:75:66:e0:d6:4c:ec:97:
5b:13:d1:d3:c8:ca:61:d9:bd:d0:b6:59:b8:81:09:c0:59:2b:
1d:8b:3f:ba:9a:21:54:5c:a5:a9:b1:9f:61:69:c5:8e:b6:02:
87:1b:3a:3b:38:43:38:ea:f3:a1:49:57:25:1e:f7:14:56:a1:
9d:3f:c9:df:70:b9:6f:72:ec:1e:a2:0b:2b:7b:07:50:bb:78:
9a:ec:22:ac:b6:d9:3a:a0:b6:1d:a6:5b:a2:97:73:1c:ae:ad:
9c:0c:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:52:15 2026 by rpki-client