This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/20519AFE346111EFB91EA738C4F9AE02.roa
File: 20519AFE346111EFB91EA738C4F9AE02.roa (raw, json)
Hash identifier: 7dMYBh5Kias3dynE3RyF2gF6pXmk7AknkGd9fyD3NyM=
Subject key identifier: 4E:FE:D9:98:90:9F:26:C7:E9:F7:7C:DB:E9:BF:8B:9D:50:DB:63:7B
Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial: 04AE
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/20519AFE346111EFB91EA738C4F9AE02.roa
Signing time: Fri 28 Nov 2025 22:55:25 +0000
ROA not before: Fri 28 Nov 2025 22:55:25 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 134972
IP address blocks: 2400:8a20:161::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Validity
Not Before: Nov 28 22:55:25 2025 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=692a285c-39b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:13:92:08:36:83:ce:10:22:28:0f:95:4c:
da:b5:33:cf:dd:9d:79:44:72:1d:06:d7:bd:88:47:
e3:e0:0f:59:be:c8:a2:bd:6d:7a:2d:8c:cb:31:35:
e8:ef:fb:af:33:e0:ee:ee:45:71:ea:d2:b3:19:14:
3f:47:2c:d1:de:5f:c7:46:62:17:45:c7:3e:84:dc:
e1:d2:10:e0:e5:7f:44:a5:43:28:ad:1c:d3:fb:45:
1d:95:4a:f9:18:06:01:e5:3f:dc:44:35:49:ba:83:
11:34:07:8d:b6:b9:61:17:c6:aa:68:3c:4f:12:25:
20:b8:7e:e3:bd:95:39:cd:7a:8b:aa:27:c2:b2:12:
91:02:2a:13:4e:d1:cf:c2:1b:a7:68:a6:6f:a1:28:
53:a0:9c:75:c2:f9:53:88:d0:a3:c9:87:ac:e8:69:
4a:f7:ee:c4:69:5d:73:de:23:34:30:51:e4:7f:3d:
40:55:0e:b2:69:11:6c:65:6e:85:5d:9f:18:50:92:
2c:8d:44:21:fe:9a:9e:fd:0b:1b:6a:a1:d8:b9:e4:
03:27:5a:a9:5d:9f:e8:a3:7f:5a:04:9e:ca:73:f0:
45:4a:bb:4b:9e:fa:57:53:ea:80:2d:b6:f9:28:36:
9d:73:76:bc:f5:2b:f8:ef:ce:8f:2e:b6:e2:3e:8b:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:D9:98:90:9F:26:C7:E9:F7:7C:DB:E9:BF:8B:9D:50:DB:63:7B
X509v3 Authority Key Identifier:
keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/20519AFE346111EFB91EA738C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:8a20:161::/48
Signature Algorithm: sha256WithRSAEncryption
49:60:aa:2a:f8:a6:55:47:fa:da:15:69:b3:0f:aa:db:49:95:
72:a9:16:d3:e6:81:40:b7:ee:dc:8a:40:58:dd:2c:73:7f:03:
f6:45:ad:60:0c:57:6c:a5:86:2f:bd:9f:3a:5b:39:d1:d9:24:
f8:c3:ee:57:5f:cc:f2:22:11:9a:26:9d:6e:cd:9d:10:db:6a:
78:af:27:12:d3:6c:67:12:3b:07:8c:0d:91:ec:81:a4:88:43:
5f:c5:a1:21:f5:1c:7a:7b:60:c9:8b:ae:b8:4a:9d:a6:0f:6c:
aa:78:6e:c4:0d:5d:2c:c5:e6:77:b8:3c:95:ac:36:ed:00:d4:
5f:fa:53:e7:8e:64:06:d1:41:69:de:8c:72:34:90:1a:32:69:
bd:79:65:21:62:f3:36:83:cf:b0:34:35:57:db:e7:28:c3:60:
09:00:5c:53:41:96:1f:a0:a3:80:56:ee:1a:d2:73:61:ff:a7:
67:7e:4f:b3:89:6b:f7:04:fc:6d:ee:81:25:49:11:8e:60:e3:
21:af:77:34:d1:94:6f:85:cd:c2:0e:4a:c1:7c:79:45:e1:bf:
e0:b3:28:b8:ce:7a:9f:b6:d2:84:62:1b:79:e2:90:16:60:ab:
fd:e2:76:87:3f:75:30:0d:53:00:74:fb:1d:46:ba:2d:01:72:
e7:26:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:23 2025 by rpki-client