This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B42D2E32421511ECB7A6506EC4F9AE02.roa
File: B42D2E32421511ECB7A6506EC4F9AE02.roa (raw, json)
Hash identifier: 7ewoR2pA2tPclYOacuDzg5yNW72VsiIy57lD3FMtXvI=
Subject key identifier: 2C:EF:16:5B:8F:6B:B2:EF:4D:09:35:8E:F6:1D:B0:4C:51:48:80:03
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2B0C
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B42D2E32421511ECB7A6506EC4F9AE02.roa
Signing time: Fri 02 Jan 2026 16:13:22 +0000
ROA not before: Fri 02 Jan 2026 16:13:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 148984
IP address blocks: 27.254.1.0/24 maxlen: 24
49.231.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11020 (0x2b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:22 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6957eea2-7992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e8:81:4e:00:32:c2:cd:6c:69:c4:7f:1c:9c:
01:f4:7f:5f:a0:d5:65:c0:a2:74:f0:fd:fb:65:97:
48:8e:e4:96:24:55:c3:de:52:0a:5b:ec:c1:f0:8c:
36:2b:ea:f3:c2:42:1c:a5:8b:48:11:32:92:67:b1:
f2:14:be:1f:7f:14:fc:70:dd:a9:e0:b1:49:e3:d3:
48:3e:c8:3b:73:e4:04:d7:3f:42:fa:8e:e3:39:b7:
ee:16:c6:57:f6:af:51:81:34:df:df:1f:98:64:8b:
27:0b:ba:ec:31:4f:29:3a:09:05:99:93:4b:52:0f:
db:d1:d9:a6:fd:99:f2:c5:ea:2a:8c:8f:0a:1d:32:
9d:c9:43:9c:67:b6:dc:ec:13:e4:b8:cb:51:6e:02:
36:4c:c6:0f:13:35:3e:bf:31:02:18:3d:34:da:be:
e1:80:da:b4:75:3e:c5:17:fe:38:bf:fa:47:aa:05:
be:fe:8e:b1:7e:55:fb:0b:11:54:cd:eb:73:72:4f:
ce:1b:fc:81:8b:1f:c8:54:0f:5a:d5:f2:f3:12:a7:
8e:ee:ba:72:ea:1b:0d:80:60:42:d2:43:6d:b5:c2:
8a:fe:b6:ea:e1:67:42:0e:8e:97:41:b5:49:cc:21:
e3:7f:fb:49:73:37:e9:ff:f8:ba:f9:9b:59:42:e6:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EF:16:5B:8F:6B:B2:EF:4D:09:35:8E:F6:1D:B0:4C:51:48:80:03
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B42D2E32421511ECB7A6506EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.254.1.0/24
49.231.43.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:cb:98:0b:79:10:26:d3:26:4d:3b:59:6e:32:17:34:73:61:
44:f7:36:4d:84:69:00:ff:55:e1:5b:05:2c:fa:dd:a3:90:d8:
f7:c8:68:f0:f0:15:42:e0:fd:37:c5:c2:fa:f9:1b:0f:cc:11:
78:3f:6b:6c:6f:87:c3:3e:c7:9c:cb:84:ad:5e:04:68:6b:37:
dc:05:3d:ad:15:92:0d:4c:ad:3c:39:96:e5:3c:a6:65:de:11:
39:2f:cd:32:42:04:b6:c0:34:40:b5:24:84:6c:9c:4e:34:ad:
e0:da:c5:58:e6:fa:30:54:30:cf:79:3e:f6:f5:51:81:e6:93:
7f:b4:57:44:64:af:d0:7b:1d:16:0a:23:46:3f:db:ce:23:0a:
db:a1:4f:9b:33:8e:5e:ae:46:22:bf:ca:26:4a:30:d9:68:77:
83:45:5e:51:59:cc:f5:6c:21:da:2d:87:8d:4d:ba:3d:01:22:
d9:24:ff:2f:0d:e5:2c:e5:c4:02:b4:a3:5f:5a:b3:8f:2b:fd:
8e:83:0a:0d:8a:05:e9:d8:8f:77:a8:b0:4b:82:f1:45:b9:fe:
c3:23:c4:76:bc:97:f0:75:59:69:7d:48:79:e6:24:7c:2f:f3:
fe:5d:c2:f5:e9:c4:5e:8f:26:e0:64:57:bc:5b:80:ed:57:90:
90:95:19:41
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICKwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTU3ZWVhMi03OTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9+iBTgAyws1sacR/HJwB9H9foNVlwKJ08P37ZZdIjuSWJFXD3lIKW+zB8Iw2
K+rzwkIcpYtIETKSZ7HyFL4ffxT8cN2p4LFJ49NIPsg7c+QE1z9C+o7jObfuFsZX
9q9RgTTf3x+YZIsnC7rsMU8pOgkFmZNLUg/b0dmm/ZnyxeoqjI8KHTKdyUOcZ7bc
7BPkuMtRbgI2TMYPEzU+vzECGD002r7hgNq0dT7FF/44v/pHqgW+/o6xflX7CxFU
zetzck/OG/yBix/IVA9a1fLzEqeO7rpy6hsNgGBC0kNttcKK/rbq4WdCDo6XQbVJ
zCHjf/tJczfp//i6+ZtZQua09QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCzvFluP
a7LvTQk1jvYdsExRSIADMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQjQyRDJFMzI0
MjE1MTFFQ0I3QTY1MDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAAb/gEDBAAx5yswDQYJKoZIhvcNAQELBQADggEBAMHLmAt5
ECbTJk07WW4yFzRzYUT3Nk2EaQD/VeFbBSz63aOQ2PfIaPDwFULg/TfFwvr5Gw/M
EXg/a2xvh8M+x5zLhK1eBGhrN9wFPa0Vkg1MrTw5luU8pmXeETkvzTJCBLbANEC1
JIRsnE40reDaxVjm+jBUMM95Pvb1UYHmk3+0V0Rkr9B7HRYKI0Y/284jCtuhT5sz
jl6uRiK/yiZKMNlod4NFXlFZzPVsIdoth41Nuj0BItkk/y8N5SzlxAK0o19as48r
/Y6DCg2KBenYj3eosEuC8UW5/sMjxHa8l/B1WWl9SHnmJHwv8/5dwvXpxF6PJuBk
V7xbgO1XkJCVGUE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:07 2026 by rpki-client