This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/1D5E8EB6887B11EE8981CE28C4F9AE02.roa
File: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (raw, json)
Hash identifier: 8onb495DsY+6sybfjvn3/yiqLOv+8ormyHYLSFvICB8=
Subject key identifier: C7:48:D3:F1:55:AC:43:19:95:7D:CC:66:35:D3:D1:40:E6:CA:02:9D
Certificate issuer: /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial: 017D
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/1D5E8EB6887B11EE8981CE28C4F9AE02.roa
Signing time: Mon 01 Dec 2025 02:30:30 +0000
ROA not before: Mon 01 Dec 2025 02:30:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132408
IP address blocks: 180.94.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 01:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Validity
Not Before: Dec 1 02:30:30 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692cfdc6-d0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:fe:7a:3c:d5:d5:17:cd:a2:d7:1c:f7:00:
ef:49:dc:f2:fd:44:8c:7f:62:6e:92:01:a2:84:7b:
8d:3a:71:81:05:7f:e2:38:7e:cf:0d:93:13:7c:88:
99:cd:36:59:c6:fc:91:ac:36:4a:ae:b5:2a:61:c3:
91:70:1b:2d:b4:cf:f5:7e:92:35:bd:68:30:20:59:
4d:af:76:12:9b:26:75:ec:e3:7c:d5:28:a5:ab:90:
2f:9b:07:ad:93:46:9a:12:ca:7f:cb:bd:29:14:df:
85:00:e2:b3:eb:41:83:1e:1c:f6:b6:d6:fa:7e:54:
34:90:10:53:25:f8:29:d8:f4:93:69:24:93:ec:9b:
dd:d5:3b:02:52:4b:3e:c1:c4:cd:00:b5:fe:ff:8f:
66:c7:f8:f6:b6:9d:31:68:24:d6:09:8a:49:32:47:
48:d4:22:07:bc:8e:ab:d5:70:15:cb:24:e4:38:b2:
d5:27:84:50:c6:e3:6e:36:10:59:b0:de:61:83:02:
9c:5a:ba:75:6c:4e:df:e4:7e:ac:92:5d:6d:5c:3a:
4d:ad:24:fc:65:c0:2e:35:49:e3:da:54:d1:3c:bf:
15:c6:1a:bc:8a:3f:db:ae:c8:10:97:9c:23:50:a2:
c8:41:ec:71:48:ef:62:9c:9c:e8:c6:42:d2:e1:e3:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:D3:F1:55:AC:43:19:95:7D:CC:66:35:D3:D1:40:E6:CA:02:9D
X509v3 Authority Key Identifier:
keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/1D5E8EB6887B11EE8981CE28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
14:91:c5:f8:ce:63:4a:63:c2:03:8b:31:60:2e:27:b0:48:62:
4f:33:dc:e4:32:15:d0:65:e9:f9:96:75:c3:c4:09:9d:0e:c0:
55:75:3a:f5:1b:e5:67:dd:04:65:a1:e6:ce:9b:28:1f:2e:1f:
18:5f:00:8b:a2:7f:af:ec:de:6d:82:16:f0:a8:4a:3d:2e:19:
c5:0f:6a:ee:11:99:b4:fe:d6:e7:28:ee:28:ef:10:dc:61:31:
45:2e:13:07:03:d8:08:9c:6c:58:eb:4f:01:d1:cc:e0:b6:62:
b3:00:89:5f:7e:d9:bf:ab:23:0e:26:b9:fc:7a:b3:09:e5:3c:
81:21:aa:6e:cc:9c:a0:11:6c:ae:bb:61:54:d0:2d:bd:99:df:
c2:7e:64:1a:84:53:8a:14:4c:b0:2f:64:92:2a:61:a4:cc:39:
51:04:6b:20:b2:ec:cc:29:03:0b:8e:1a:85:50:ef:eb:eb:f1:
d2:db:95:f2:66:80:86:0b:2c:fb:61:83:42:c6:81:7d:04:90:
ee:6b:0e:2a:95:ba:ee:bf:a3:dc:70:20:e6:0e:5e:79:f6:d1:
bf:75:04:62:fc:f8:b6:1f:b3:57:5f:fb:1e:20:b8:c9:cb:6a:
00:34:45:32:7a:d9:bd:e2:29:63:3a:84:c7:01:3f:50:0d:72:
cc:4e:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 17:12:49 2025 by rpki-client