This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/2CC58A76368D11ED9458DD49C4F9AE02.roa
File: 2CC58A76368D11ED9458DD49C4F9AE02.roa (raw, json)
Hash identifier: auZMy8ivltgIOkU32lVad0olopXUozwAsFaYD8keokA=
Subject key identifier: EE:A7:F5:DE:3A:69:84:8F:CD:83:93:DB:E7:59:0F:0A:B9:3A:7F:67
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2B0A
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/2CC58A76368D11ED9458DD49C4F9AE02.roa
Signing time: Fri 02 Jan 2026 16:13:20 +0000
ROA not before: Fri 02 Jan 2026 16:13:20 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141692
IP address blocks: 202.80.224.0/24 maxlen: 24
2405:9800:c90c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11018 (0x2b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:20 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6957eea0-7eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0b:70:aa:8c:71:13:99:65:ea:01:a2:16:3e:
8f:e3:ce:f4:04:54:3e:34:2b:af:1f:c7:d3:4d:bf:
3f:97:05:f4:23:5a:7a:4b:1d:53:5a:42:f6:5e:73:
76:0d:e5:0c:80:3e:38:f9:81:7d:f7:07:dc:87:a3:
1a:9c:fb:eb:f1:05:53:8a:95:5b:3f:97:ca:01:80:
c5:19:c0:81:6a:80:7f:2e:36:74:c8:3d:6d:73:7b:
95:87:32:99:22:e6:3e:43:5a:30:6f:03:06:d0:d6:
84:09:8a:3d:6d:32:49:15:f4:93:ec:85:b5:06:29:
29:d1:07:7a:90:b0:e2:bc:b8:b4:a9:28:1e:ab:a2:
37:32:2b:86:a0:fe:44:db:e2:ae:6b:d2:96:57:24:
09:4d:12:1b:6a:7f:b0:9e:ec:55:b4:40:e5:ae:21:
fd:68:ed:c5:68:dd:1a:89:e9:cd:ce:f0:93:73:e5:
f9:40:ca:aa:51:1b:47:c5:72:47:ce:2e:5d:11:11:
4f:3b:a2:57:8c:61:eb:ba:27:a6:7b:51:51:92:a1:
02:12:d1:19:04:4c:de:c9:e7:af:02:e4:dd:2a:05:
ae:26:95:ab:9c:91:ff:be:41:2a:60:cb:72:f1:16:
ac:09:c3:d2:ee:18:dc:27:6c:45:96:6c:b5:7a:b4:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:F5:DE:3A:69:84:8F:CD:83:93:DB:E7:59:0F:0A:B9:3A:7F:67
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/2CC58A76368D11ED9458DD49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.80.224.0/24
IPv6:
2405:9800:c90c::/48
Signature Algorithm: sha256WithRSAEncryption
49:72:b7:01:8c:85:a0:03:57:07:92:42:2f:1b:d1:e4:62:17:
57:63:fd:2d:31:e6:3c:a7:ed:69:8d:62:66:4a:80:02:9d:27:
f3:20:cf:cb:dc:8a:33:ea:f3:d8:eb:5a:ea:39:98:6a:d2:83:
22:0c:ae:5f:bf:77:9e:42:7a:7d:37:d7:a3:dd:8e:23:82:5b:
20:36:1e:02:15:c2:47:16:59:88:db:53:5f:23:83:4d:1f:5c:
a7:d4:76:67:a1:03:e0:cf:aa:33:d3:52:ad:9d:39:8e:01:de:
97:e7:9c:c4:92:24:2e:d5:3a:26:cb:ef:9d:e3:d6:ee:0c:2a:
f7:3c:ea:6c:38:77:37:6e:e6:4f:d2:a0:2d:8d:3e:2b:b9:fe:
ac:f0:c1:be:82:6e:13:39:bf:51:20:ce:72:86:15:9b:be:93:
41:9a:cf:43:78:19:4b:43:f1:c3:f8:53:05:18:47:8e:5a:a0:
b7:2c:41:1a:f3:49:b9:ab:a5:45:0f:f2:22:54:8a:b0:8f:00:
e5:a2:e0:09:de:a6:9a:f3:7d:01:f7:c5:0f:bb:d0:45:41:0d:
35:fc:77:57:f4:e2:1e:08:7b:c3:8d:56:3e:b8:27:6b:3e:b2:
a3:1d:9f:75:88:46:0f:4d:e0:e3:d3:44:3f:de:91:05:22:c3:
55:b5:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:20 2026 by rpki-client