This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/57680C9CCA9911F0A4E15D65C4F9AE02.roa
File: 57680C9CCA9911F0A4E15D65C4F9AE02.roa (raw, json)
Hash identifier: Z9LTiur1herT8zSPtiHbMjkBlisQeIO9j0t2u6mg3io=
Subject key identifier: 3E:60:2D:A8:59:5B:9D:E0:1E:8C:F4:23:29:63:EA:36:F4:23:DE:FB
Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Certificate serial: BB
Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/57680C9CCA9911F0A4E15D65C4F9AE02.roa
Signing time: Wed 26 Nov 2025 07:27:20 +0000
ROA not before: Wed 26 Nov 2025 07:27:20 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 18383
IP address blocks: 202.10.96.0/20 maxlen: 24
2403:1800::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 04:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Validity
Not Before: Nov 26 07:27:20 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6926abd7-76f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:9f:93:43:61:a4:90:09:22:07:2d:78:17:
b2:af:33:dc:54:2b:cc:dc:67:e4:1e:01:da:8d:0b:
35:87:95:ea:ea:55:59:f1:98:f9:75:83:12:bf:73:
dd:28:39:ab:51:b6:8b:78:aa:4f:5b:2f:99:5b:58:
f7:33:9c:b9:72:cf:ff:61:68:95:cf:cc:22:0b:95:
0b:8a:79:44:70:85:8a:31:e0:bc:6c:58:cf:bd:9b:
02:d1:f7:ce:43:6f:28:ef:b3:58:c8:88:90:9b:f7:
a6:79:80:6a:b6:20:46:c5:2e:90:3b:ee:78:f4:73:
9b:40:75:1b:e2:79:4f:5a:0e:a8:36:92:35:49:42:
37:43:cc:72:3a:db:2a:ce:e8:c1:bb:c5:39:a6:4d:
2b:97:9a:18:ce:99:64:0d:fe:5d:58:c7:4b:04:3e:
11:b2:2d:11:c9:d8:14:fa:eb:db:ad:1c:43:2a:8a:
70:2e:48:2a:47:e9:42:22:be:da:fc:a4:66:4d:52:
47:18:95:92:f4:30:ac:bd:35:1c:08:51:a5:b5:75:
40:93:93:51:f9:ff:5d:02:25:f8:58:6f:18:2b:d7:
6a:5e:94:5f:e5:81:fd:ca:73:c6:e1:da:66:39:ab:
b1:18:91:c3:49:66:92:e0:98:39:61:3f:41:f1:d8:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:2D:A8:59:5B:9D:E0:1E:8C:F4:23:29:63:EA:36:F4:23:DE:FB
X509v3 Authority Key Identifier:
keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/57680C9CCA9911F0A4E15D65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.10.96.0/20
IPv6:
2403:1800::/32
Signature Algorithm: sha256WithRSAEncryption
71:29:16:38:a7:09:72:e8:21:5a:33:07:48:d0:04:49:9a:35:
80:c4:b1:7c:9b:37:67:b5:1b:42:a5:a6:7a:91:5f:b6:6c:ee:
b8:ed:c2:c2:14:9e:23:cf:65:78:de:a8:5a:47:f5:8c:f6:91:
1b:8a:89:0d:d7:3f:9f:5b:d4:1c:b4:84:12:82:02:85:2f:62:
1d:c1:94:1e:1c:7c:bd:82:3a:3a:ed:fe:33:03:8f:78:8f:8e:
55:36:d4:39:dc:18:bb:e2:49:3a:6b:27:33:74:d1:84:37:67:
7a:82:12:31:60:15:68:c5:80:62:e8:49:b2:5f:d4:8d:e7:2b:
45:4b:0f:fe:4b:a2:ef:9d:36:86:92:f5:64:ab:a1:01:1e:7d:
b9:6e:40:3b:13:8b:a2:c5:27:19:71:27:7b:c9:84:9f:be:fa:
5c:1c:12:bf:a5:b0:04:18:b2:f1:7d:52:46:61:06:d1:d7:ed:
5f:64:7a:dc:a3:23:bc:5d:9e:b7:cb:06:c0:54:e0:7d:3c:ea:
08:26:14:b8:76:15:95:37:d4:ce:c5:b2:c0:f6:a4:42:e5:bf:
e4:bd:06:41:28:14:58:fa:91:50:9d:35:25:07:32:b3:3d:1e:
47:e2:2e:df:2d:22:ee:49:68:44:91:da:07:f6:cc:e2:73:54:
0c:b0:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:45:01 2025 by rpki-client