This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/1F49DF36691311EF82B0FC62C4F9AE02.roa
File: 1F49DF36691311EF82B0FC62C4F9AE02.roa (raw, json)
Hash identifier: Yx63u4z9hDR8keVLNdP1xC6pEQSE/UG9aZLw+X4LwRo=
Subject key identifier: 49:F3:94:50:83:7D:E5:F7:67:6F:04:A8:B2:13:8F:84:8B:FD:F5:AC
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 03C9
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/1F49DF36691311EF82B0FC62C4F9AE02.roa
Signing time: Tue 02 Dec 2025 23:58:52 +0000
ROA not before: Tue 02 Dec 2025 23:58:52 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132821
IP address blocks: 223.27.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 969 (0x3c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Dec 2 23:58:52 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f7d3c-20fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:bd:a7:03:ce:f4:dc:59:2e:64:e0:83:eb:
ad:54:2c:6e:8c:98:b1:c1:ba:a0:6d:3b:f1:4d:55:
f1:c3:09:75:51:8f:46:e2:cb:66:63:81:a0:27:b9:
7a:d8:6d:78:11:80:8c:2d:28:b0:cc:5d:cd:42:a3:
87:32:92:ee:84:98:2e:05:71:46:4e:6e:07:30:d2:
b0:b6:61:52:77:6d:c2:2a:61:bf:6e:13:c7:86:80:
73:28:f3:37:c9:21:73:00:c9:17:9e:b4:c5:12:92:
61:4c:7d:3b:34:03:b2:e1:a7:b8:00:d3:76:d8:3b:
26:6b:2c:ed:16:be:f8:61:07:fd:dd:b2:20:62:c9:
8b:cf:5c:7c:0e:06:86:b5:b2:51:d5:86:fe:71:30:
01:98:d2:52:1e:19:2b:52:52:7c:57:e2:ce:04:89:
e9:d0:3e:eb:65:dc:dc:fa:50:2a:d2:a3:16:4d:ae:
02:d6:84:16:dc:03:38:c1:01:89:cf:c1:f6:e3:f6:
c4:52:6d:f0:e1:d2:76:f7:33:e1:60:46:25:0a:b0:
3d:1b:a7:66:60:53:cb:80:ec:8a:18:bc:df:4f:57:
e2:bd:12:9c:69:71:c7:8c:c8:f9:89:33:8d:f9:17:
eb:4c:96:38:6b:a4:1e:b4:c2:cf:73:79:cb:f5:4b:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F3:94:50:83:7D:E5:F7:67:6F:04:A8:B2:13:8F:84:8B:FD:F5:AC
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/1F49DF36691311EF82B0FC62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.227.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c2:35:72:18:df:e2:3d:2c:bb:ea:2b:98:1f:51:59:4e:b7:
23:bf:ac:9f:89:f8:b5:3f:75:82:30:b1:6d:49:c1:bb:45:59:
4d:9c:6f:df:03:a8:bb:34:e8:86:3a:c6:23:85:e1:91:72:6e:
92:1f:7c:ef:b7:2f:3d:e7:39:e4:49:e3:b9:a1:df:66:7a:dc:
46:2a:39:f4:f6:ce:52:60:c3:20:46:8b:05:b3:0b:b1:fb:99:
31:b7:4a:46:36:4f:e8:54:e3:03:48:e9:54:c5:9c:09:d6:16:
2f:ed:60:eb:a1:6f:18:38:f3:44:fe:1d:aa:45:a5:7e:4b:7b:
8d:e4:04:fd:82:18:cc:56:2d:b5:0f:7b:2a:8e:1c:3e:68:f3:
7c:44:1e:c1:48:19:f2:5e:36:d5:a9:8e:df:21:7c:1d:71:14:
db:f2:1e:e5:fb:d2:e6:72:b0:af:f7:e5:6f:19:99:6d:b5:a1:
07:de:2a:f8:9e:86:b5:79:64:ae:03:3b:9b:e4:00:43:80:fa:
b9:4c:51:31:26:ba:20:30:b0:5d:06:b9:75:08:58:0e:77:bc:
74:bd:2f:98:05:bf:db:ce:07:77:64:9d:1a:35:cc:68:54:3f:
0d:02:99:8b:a8:bc:4e:6f:d3:d1:d4:a3:6a:eb:06:8e:df:14:
6e:37:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:11:59 2025 by rpki-client