This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
File: 68894B22402811EB91B49250C4F9AE02.roa (raw, json)
Hash identifier: aKEDn4gwBFOr0qHCa0D/ICyIq2qd6Iu46+DUIcfdySk=
Subject key identifier: 6A:7D:2D:33:58:3C:FC:61:D4:1F:BE:8D:57:C6:CF:DE:47:1F:6F:F3
Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial: 077B
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
Signing time: Sat 06 Dec 2025 21:03:19 +0000
ROA not before: Sat 06 Dec 2025 21:03:19 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24068
IP address blocks: 202.133.81.0/24 maxlen: 24
202.133.82.0/24 maxlen: 24
202.133.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Validity
Not Before: Dec 6 21:03:19 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69349a17-9b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:7d:f7:19:93:88:67:50:89:16:97:61:aa:
c5:8c:dd:4b:9c:f4:6f:e3:19:ce:e0:a1:71:3d:95:
38:d6:4c:b1:eb:a1:9e:42:94:bc:2b:a1:7a:aa:08:
b1:f9:ff:82:6e:78:9c:cc:91:2b:6c:4f:9f:aa:62:
ce:d9:5d:f4:7d:6c:6e:dd:cb:45:cf:b9:da:1f:c0:
4c:d0:ea:e2:77:fb:0c:ed:c6:3f:85:dc:fa:0b:f1:
43:f8:2d:a1:b3:13:3b:33:60:3a:86:08:6c:61:94:
6a:4d:e3:c8:ee:08:a7:4d:70:7e:88:75:63:9f:40:
42:38:07:01:f1:ab:89:37:57:1e:90:78:ff:4d:3e:
08:ea:39:fe:2c:33:63:01:9d:b8:8b:4e:86:9a:54:
39:49:fe:0d:d7:a0:b5:68:e9:5a:26:68:01:e0:81:
6b:ad:ec:a9:b1:d4:0d:fc:6d:da:a3:93:00:f0:f4:
67:01:64:cd:45:26:45:89:db:2b:ce:14:22:14:cd:
50:12:6a:99:fe:f0:fd:31:ce:0c:97:91:cf:d5:78:
cb:49:cf:e4:e6:41:98:a3:d1:86:20:05:31:fc:a0:
45:37:e8:2b:24:99:fe:19:07:2c:11:43:a3:11:15:
e5:0c:02:2d:71:ac:86:f7:54:58:c6:96:74:65:09:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7D:2D:33:58:3C:FC:61:D4:1F:BE:8D:57:C6:CF:DE:47:1F:6F:F3
X509v3 Authority Key Identifier:
keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.133.81.0-202.133.83.255
Signature Algorithm: sha256WithRSAEncryption
b1:99:40:f4:ed:24:2e:8a:64:2c:c9:67:1c:8e:cb:6e:bb:c0:
60:6c:ac:dc:3b:6c:2f:96:49:51:46:93:e7:ec:b1:4f:8c:13:
44:41:3e:88:fd:f7:b6:ce:07:48:67:79:6d:59:30:32:91:c6:
da:9d:e0:5e:30:9a:8e:8a:72:c4:31:5e:01:28:7b:9e:5a:28:
4e:f4:b5:8c:40:f2:01:4d:c6:43:df:a4:14:3b:a8:7a:ee:8b:
2e:f1:80:3b:4d:fb:82:c8:74:64:86:42:4e:fe:17:61:ef:98:
2b:b0:99:a7:c3:05:33:1d:90:51:ef:d5:cc:8f:4d:8a:8c:28:
d1:e8:d9:b7:47:a7:2e:a2:f7:20:1b:71:a4:88:ef:14:f8:41:
db:e6:4c:1d:94:c4:32:04:d8:3e:dd:48:40:63:97:07:1a:be:
69:21:71:9b:8e:8d:50:e3:18:e5:7f:03:ba:cd:3c:02:42:a8:
d0:18:cc:ab:d1:5a:9f:ed:f6:6f:ff:c5:c0:c0:97:65:ed:77:
a7:ea:d0:b6:c8:1e:38:5a:de:20:3d:e9:da:9a:dc:58:73:55:
d6:9e:04:40:68:8d:34:c6:e7:5f:3d:32:e8:71:fd:a5:75:98:
22:94:5a:6c:3e:ae:c3:15:7e:9e:4f:b3:e0:ad:6c:55:d7:44:
da:05:bf:6c
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMzNTYxMTAvBgNVBAUTKDZBREUwRUQ3NDJEOEM1QUZBMTMzM0I5MDM1OEMwNkIz
RkU4NzY4ODMwHhcNMjUxMjA2MjEwMzE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTM0OWExNy05YjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvzF99xmTiGdQiRaXYarFjN1LnPRv4xnO4KFxPZU41kyx66GeQpS8K6F6qgix
+f+CbniczJErbE+fqmLO2V30fWxu3ctFz7naH8BM0Orid/sM7cY/hdz6C/FD+C2h
sxM7M2A6hghsYZRqTePI7ginTXB+iHVjn0BCOAcB8auJN1cekHj/TT4I6jn+LDNj
AZ24i06GmlQ5Sf4N16C1aOlaJmgB4IFrreypsdQN/G3ao5MA8PRnAWTNRSZFidsr
zhQiFM1QEmqZ/vD9Mc4Ml5HP1XjLSc/k5kGYo9GGIAUx/KBFN+grJJn+GQcsEUOj
ERXlDAItcayG91RYxpZ0ZQnlFQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFGp9LTNY
PPxh1B++jVfGz95HH2/zMB8GA1UdIwQYMBaAFGreDtdC2MWvoTM7kDWMBrP+h2iD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM1Ni82NzFCN0RBNjQw
MUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhhLWhNenVRTll3R3NfNkhh
SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F0NE8xMExZeGEtaE16dVFOWXdHc182SGFJTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMzNTYvNjcxQjdEQTY0MDFEMTFFQjhFMENDQjVFQzRGOUFFMDIvNjg4OTRCMjI0
MDI4MTFFQjkxQjQ5MjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAMqFUQMEAsqFUDANBgkqhkiG9w0BAQsFAAOCAQEAsZlA
9O0kLopkLMlnHI7LbrvAYGys3DtsL5ZJUUaT5+yxT4wTREE+iP33ts4HSGd5bVkw
MpHG2p3gXjCajopyxDFeASh7nlooTvS1jEDyAU3GQ9+kFDuoeu6LLvGAO037gsh0
ZIZCTv4XYe+YK7CZp8MFMx2QUe/VzI9Niowo0ejZt0enLqL3IBtxpIjvFPhB2+ZM
HZTEMgTYPt1IQGOXBxq+aSFxm46NUOMY5X8Dus08AkKo0BjMq9Fan+32b//FwMCX
Ze13p+rQtsgeOFreID3p2prcWHNV1p4EQGiNNMbnXz0y6HH9pXWYIpRabD6uwxV+
nk+z4K1sVddE2gW/bA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:51 2025 by rpki-client