This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa
File: 0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa (raw, json)
Hash identifier: Id7suSsBB7TTPuhlLWbghNG7hbdjnTVpkz27ylBkiVg=
Subject key identifier: D7:87:A6:23:CD:FF:40:75:0C:43:20:53:BA:B3:9F:7B:0A:4F:67:00
Certificate issuer: /CN=A9124096/serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
Certificate serial: 11
Authority key identifier: BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa
Signing time: Sat 29 Nov 2025 06:04:27 +0000
ROA not before: Sat 29 Nov 2025 06:04:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135556
IP address blocks: 115.187.26.0/23 maxlen: 23
115.187.26.0/24 maxlen: 24
115.187.27.0/24 maxlen: 24
2401:4ee0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl
rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124096, serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
Validity
Not Before: Nov 29 06:04:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692a8ceb-80f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:81:57:d6:82:29:39:11:9a:07:e2:51:90:
78:86:15:b3:0f:42:c8:2e:04:ac:ce:cd:f1:0b:85:
b7:5b:6d:0e:89:0e:c5:32:f6:ec:75:a7:68:9c:36:
ef:31:7f:45:cd:3d:14:be:6b:4f:45:b8:cc:eb:5d:
37:b1:a8:d8:73:1f:e2:01:66:91:05:14:6b:4b:20:
86:ba:e4:87:86:d3:05:ee:8a:db:fd:a4:65:9b:96:
5a:11:b9:72:15:3c:45:b4:3a:c4:c2:52:87:f7:3f:
a3:2e:b7:6b:02:73:c2:41:8d:ea:82:d2:4f:41:dc:
af:8f:95:51:f4:20:7c:cb:4e:28:0b:e7:b2:38:c3:
b1:33:a3:b0:a4:77:3e:2f:3d:5e:87:6e:62:aa:82:
fd:6b:80:64:65:99:2d:af:9b:25:e7:13:81:fc:41:
68:51:d7:be:1d:97:c7:37:9f:67:68:ad:bc:41:e0:
87:1f:3c:3b:e8:9f:5c:06:fa:aa:9b:a4:6b:45:e0:
b9:c7:19:40:fa:c6:1a:eb:4d:48:0a:e5:16:83:1d:
04:ce:04:ba:a6:a9:59:ac:45:c6:c2:c0:9f:51:0a:
46:a8:ca:16:d3:86:f4:a5:c5:3f:d7:f4:97:9d:cc:
58:bb:33:19:37:90:62:13:1d:d2:bf:91:a7:19:c8:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:87:A6:23:CD:FF:40:75:0C:43:20:53:BA:B3:9F:7B:0A:4F:67:00
X509v3 Authority Key Identifier:
keyid:BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.187.26.0/23
IPv6:
2401:4ee0::/32
Signature Algorithm: sha256WithRSAEncryption
13:c1:c7:3a:6b:00:57:f5:94:a1:ab:69:e3:67:24:65:a8:1b:
2a:13:97:0e:8d:c1:67:8e:db:30:78:4a:3c:3a:6a:fe:d2:9e:
7b:da:65:6f:29:06:c4:65:51:8d:bc:0b:b4:c8:9c:07:cc:71:
eb:30:98:2f:2d:c1:e2:c0:3d:26:e0:bb:81:19:c7:ad:33:7d:
a2:ea:a5:91:5b:50:de:a6:42:16:67:73:82:6a:8e:d8:20:d1:
c7:14:a8:88:4c:56:dc:e6:41:5c:dd:a0:78:a3:d5:1e:4e:d7:
24:58:12:01:aa:96:a5:b4:e6:85:7b:df:4c:d4:16:76:92:a5:
03:71:98:e2:11:0a:3b:4e:72:de:da:53:33:b2:28:7c:89:e5:
88:bc:78:b2:64:50:cc:05:11:81:f3:e8:22:3d:77:a7:4e:4a:
42:b9:73:f9:61:5a:69:af:67:27:29:a1:3d:f2:d9:78:90:41:
02:df:64:80:9d:64:ff:1c:9c:5b:ff:b7:74:de:a2:81:8e:64:
f1:0c:ff:f1:33:01:cc:2a:a3:c7:07:6f:90:33:c3:6b:64:a2:
c0:5e:f2:3a:6e:2d:66:86:d5:2a:37:bf:e9:34:f7:7b:db:ec:
09:7e:94:66:27:a5:a6:bb:eb:7c:58:9b:9e:fa:54:e9:dd:03:
43:69:bb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:10:08 2025 by rpki-client