This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/967D3674CB7911F0B5816B84C4F9AE02.roa
File: 967D3674CB7911F0B5816B84C4F9AE02.roa (raw, json)
Hash identifier: BAOg63rbaOIys2g97FtFz7H79eFm+GfNyVf99pFuu0Y=
Subject key identifier: 03:6A:27:8D:BC:20:6A:BA:FF:FF:4F:DB:37:00:16:C3:DF:97:86:81
Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial: 3569
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/967D3674CB7911F0B5816B84C4F9AE02.roa
Signing time: Thu 27 Nov 2025 10:12:32 +0000
ROA not before: Thu 27 Nov 2025 10:12:32 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 9831
IP address blocks: 202.3.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13673 (0x3569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Validity
Not Before: Nov 27 10:12:32 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69282410-ed74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:5b:b3:49:9b:7b:ad:62:2e:ef:22:91:f2:
01:9c:5e:28:99:8d:58:e7:40:1b:61:0f:11:f9:21:
e3:da:f8:2d:d9:bc:fe:f5:ef:f8:6d:73:62:f6:5b:
af:56:d6:e7:e5:fd:69:3d:f2:a0:06:85:65:89:e6:
10:f3:9a:98:94:59:9d:c7:ac:79:b1:93:ee:0c:3f:
c9:fd:5d:48:5e:f7:65:89:f5:3a:dc:64:f8:81:2f:
a5:52:92:43:37:68:ed:59:8c:19:e9:c2:ad:b5:45:
74:7e:d7:b4:ee:45:7e:ec:cb:b0:a7:2a:b8:e5:64:
bd:68:8d:c0:c4:cd:04:a5:8f:f1:7f:97:9d:4a:15:
ef:cb:b1:66:fc:57:a8:18:d3:c0:b7:69:75:7a:50:
39:a0:eb:08:df:49:a6:e9:60:f0:8c:d7:4d:14:e4:
22:b3:66:1f:2b:f8:24:1e:5e:73:91:32:30:88:35:
a3:2f:93:54:04:a1:52:1a:d4:3d:54:20:ca:a8:b1:
57:af:db:6f:3c:c0:f3:fe:6e:47:f4:b2:08:a2:00:
19:b7:0c:be:da:25:b3:21:db:cd:96:49:3a:2e:41:
1b:35:54:ee:eb:29:21:c4:a1:8f:6c:fd:07:7e:0c:
94:ba:30:16:ec:ad:29:b7:b7:7a:24:ea:33:57:b4:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:27:8D:BC:20:6A:BA:FF:FF:4F:DB:37:00:16:C3:DF:97:86:81
X509v3 Authority Key Identifier:
keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/967D3674CB7911F0B5816B84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.3.190.0/23
Signature Algorithm: sha256WithRSAEncryption
40:d8:18:9e:56:0b:bc:df:2f:43:1b:6e:74:cf:6c:fa:e1:1b:
bf:c6:66:78:3e:dd:cc:a2:fb:f3:a9:ef:51:ab:f3:77:19:34:
8e:07:14:d4:93:00:9b:e3:f7:55:e3:28:ba:fa:6f:db:2b:c6:
94:ca:2f:72:2c:be:25:c1:29:d1:1f:e1:1d:86:c2:bd:f9:64:
6c:2f:7a:3c:0e:b7:b3:75:47:25:af:24:aa:85:42:85:01:9f:
cf:b7:d2:8e:40:e7:23:05:e3:a1:4e:23:bd:79:07:2e:3a:9e:
6f:1d:63:be:18:3a:08:20:de:e6:71:16:15:17:7e:41:34:6b:
25:6f:66:bd:3a:b3:80:3b:ec:a0:80:ae:87:b0:59:50:62:7e:
36:f6:e5:b4:97:21:35:d5:7e:dd:fa:2d:7c:f2:ff:36:1d:0c:
4f:b7:3b:35:f8:3c:db:3d:2c:4c:d0:bc:aa:a4:79:03:7d:3f:
f9:e8:be:81:c0:13:19:ff:b3:ee:dd:6a:d5:98:8c:6f:3f:2c:
72:b0:3e:ba:5c:d9:ee:3a:43:66:ac:3a:b2:97:50:48:3b:fa:
aa:2a:6a:ba:47:d3:02:3a:a3:07:c4:12:e7:a7:48:9a:2b:b1:
76:5a:ab:ab:bb:e4:f9:31:7e:2e:fb:41:ad:61:80:9d:d6:40:
38:91:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:32:04 2025 by rpki-client