This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa
File: C2D9F4BCD24311EF92066413C4F9AE02.roa (raw, json)
Hash identifier: ytUICka7R3sUiUv+nGbD8m7xL4LEtJjOERqtgUBd29c=
Subject key identifier: 78:F4:A3:03:08:E3:6F:67:D5:8D:16:61:B6:98:40:01:9B:A0:85:96
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 0849
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa
Signing time: Thu 04 Sep 2025 21:31:57 +0000
ROA not before: Thu 04 Sep 2025 21:31:57 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 147040
IP address blocks: 61.4.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Sep 4 21:31:57 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68ba054c-2fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:9b:74:28:bb:f0:7b:d7:d3:cb:50:6d:b1:
79:68:03:e7:eb:b4:d3:d5:75:b6:de:44:4a:3c:c7:
be:c0:22:26:a5:fa:49:ac:bf:85:14:86:a0:88:02:
5f:4e:44:41:56:f9:b4:30:32:bb:8d:ab:fc:b5:5e:
40:ba:73:2c:e3:54:74:85:93:8c:6b:2b:56:59:9e:
11:e4:ff:dc:25:a2:35:11:6f:5e:4e:ec:43:4e:09:
6f:54:35:57:88:85:1e:c0:8d:11:be:5a:77:3d:b0:
b7:f8:bb:54:c6:46:f6:c8:56:be:35:83:62:49:04:
aa:a8:dd:c8:a1:eb:31:d7:4b:4f:f0:09:54:aa:97:
04:4a:87:85:88:63:31:00:18:21:99:79:9c:bf:a0:
1e:67:a2:93:ff:2b:f1:07:fe:3e:d4:d4:e0:d1:fa:
e0:36:e4:e3:b1:83:f8:ae:59:48:0e:e0:9e:23:40:
91:3e:a8:7e:b6:49:fb:98:1e:8e:2a:d6:af:c4:bb:
49:ef:a7:f5:c0:57:c3:5c:c1:d8:be:89:b7:3c:f0:
d8:5d:f1:bd:d6:c1:ce:31:67:ef:08:ba:6c:d7:3b:
0b:5b:d9:99:a4:ee:ba:74:7b:30:e3:4a:c4:65:14:
a2:46:9c:b1:bb:c2:f8:7d:01:6f:71:b4:07:61:2e:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:A3:03:08:E3:6F:67:D5:8D:16:61:B6:98:40:01:9B:A0:85:96
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.4.108.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2d:ad:6b:f7:1d:86:66:00:c3:e6:25:f6:13:ce:f2:ef:5b:
25:bf:3d:c5:37:41:a3:4a:29:f5:a3:1b:e3:33:c4:e4:c2:03:
71:33:7c:6f:31:a8:8e:ef:48:21:56:77:20:88:90:39:1f:f2:
22:ed:06:3f:89:d6:b0:72:60:84:a3:ed:18:6b:13:15:50:b5:
38:1b:3f:c6:02:0d:2c:2b:c1:48:3b:c9:45:af:72:b3:90:56:
c8:d3:25:ec:c9:ba:94:7d:71:01:fd:c2:4f:52:89:be:d0:25:
fe:37:10:18:2f:a0:26:ee:b3:40:8a:06:05:97:80:8d:2c:62:
cf:68:e9:c4:bc:4f:b7:61:da:e9:4e:c6:b3:09:ff:b7:b9:e0:
d8:8a:3a:79:8b:85:09:06:8f:7c:24:9f:43:e4:48:c8:cb:48:
b9:80:4c:fe:0d:d4:6e:7a:f3:c5:12:c1:8a:c9:9e:ff:a0:49:
13:fd:0f:9f:74:54:61:72:02:6d:07:cc:41:8d:54:63:22:76:
9f:81:6e:ff:d9:65:8d:00:14:71:30:30:68:82:63:70:7d:1e:
b6:d0:c0:3f:5a:0e:bc:48:52:ae:64:ea:fc:17:44:6c:f8:ea:
f5:75:15:e6:ec:f3:54:96:bc:f7:2c:b5:05:28:10:b3:a5:92:
b6:b5:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:04:01 2025 by rpki-client