This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/AC3A00D268F611EFBDC1C345C4F9AE02.roa
File: AC3A00D268F611EFBDC1C345C4F9AE02.roa (raw, json)
Hash identifier: WhQNM40PbhQEu35UK4su17rbvUJWY/mG7qX+ZTgU+w4=
Subject key identifier: B5:AA:30:DB:B6:4E:83:20:5A:A0:15:6F:73:4E:82:00:A9:0D:84:FA
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 03E3
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/AC3A00D268F611EFBDC1C345C4F9AE02.roa
Signing time: Tue 02 Dec 2025 23:59:18 +0000
ROA not before: Tue 02 Dec 2025 23:59:18 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 55325
IP address blocks: 115.31.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 995 (0x3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Dec 2 23:59:18 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f7d55-a60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:36:eb:89:89:41:ea:05:4c:ae:dd:57:7f:
6c:08:e3:42:f2:e1:25:81:58:9f:33:a4:c2:43:90:
98:7c:94:df:f9:0a:d2:52:fe:3b:b5:76:e0:25:d0:
80:8c:98:9c:91:de:86:76:49:d5:2d:8d:cd:53:3c:
36:dd:01:2f:7d:21:2f:3e:fa:ac:3e:e0:2b:c6:c0:
a3:3b:1b:bc:03:74:d8:d2:c4:db:30:e9:8a:e0:42:
79:0d:93:33:a4:70:e0:59:57:7e:b9:d7:68:6e:f5:
58:66:f8:f4:4d:42:d6:49:e0:a1:73:e1:2b:ef:ea:
50:02:01:f9:f3:4d:60:36:7a:4a:fa:06:59:5d:17:
d8:38:3a:b9:4d:58:94:82:3c:9f:29:79:76:63:cf:
f7:76:43:89:d0:0a:e4:1a:5d:ec:8d:30:ef:70:9f:
93:dd:47:bc:ca:62:7f:e8:83:68:da:40:a6:af:74:
00:60:2a:35:83:73:f0:39:69:de:a4:40:6e:c0:54:
75:f0:2e:19:8b:04:28:1d:1c:75:71:60:5b:4c:c6:
b3:c6:b0:15:e8:50:3d:fb:f3:59:82:f4:80:0f:23:
20:be:c5:a5:a1:d7:dd:af:16:0c:8a:8f:20:6d:a9:
46:ce:6a:c9:35:04:94:29:a5:db:5a:20:02:c1:30:
f8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AA:30:DB:B6:4E:83:20:5A:A0:15:6F:73:4E:82:00:A9:0D:84:FA
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/AC3A00D268F611EFBDC1C345C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.31.130.0/24
Signature Algorithm: sha256WithRSAEncryption
20:29:9d:8c:3e:e4:8a:01:a1:ba:73:27:e3:ac:c1:6f:5b:45:
dc:e7:ae:9f:68:c5:ca:44:bd:fd:e2:e4:a2:bc:07:cf:11:9e:
f6:30:f9:20:b4:71:d0:bf:67:be:63:a4:84:9b:04:78:32:81:
06:95:d5:7d:17:17:78:be:84:8d:80:d6:ff:49:83:a5:6d:8c:
5e:45:26:82:41:da:13:97:82:c3:7c:fb:3a:d9:f5:f3:0a:4c:
0b:89:cb:4b:85:9c:32:f9:d9:58:96:df:4b:95:7f:cc:3c:71:
58:99:c3:c5:db:f8:79:e2:a2:62:8d:7e:b9:64:db:6e:18:73:
ca:b8:18:d1:66:b1:de:4b:80:42:3c:6f:1c:de:51:1b:14:d1:
3f:48:69:18:44:33:f3:80:46:15:72:45:3f:b7:3c:7a:ba:7a:
dd:1c:59:e0:d7:b0:c7:db:2d:f8:15:e5:2c:88:84:b0:5a:d3:
3a:a3:49:2e:21:7f:1b:5c:96:85:b1:e2:87:3b:17:70:3c:e9:
0c:70:6a:04:29:1a:e2:7b:9f:1d:03:eb:cc:b4:8b:85:61:b5:
88:4d:6e:09:5b:a0:5a:ce:3d:0a:06:6c:12:33:8e:0c:1a:29:
b8:64:c4:0c:66:5c:e2:d5:98:61:0c:da:62:a7:3a:fe:cf:b1:
c8:d9:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:27 2025 by rpki-client