This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa
File: 3E122AE0876011ED84335D46C4F9AE02.roa (raw, json)
Hash identifier: kAqnoDuT1FRw+qJcWxPVKBShBLWYG7bNoS5ZqNm5qoA=
Subject key identifier: E7:5F:A5:AE:8C:2D:25:16:C0:EC:60:11:F2:3B:96:96:89:82:D7:0D
Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Certificate serial: 0239
Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa
Signing time: Fri 09 Jan 2026 01:21:25 +0000
ROA not before: Fri 09 Jan 2026 01:21:25 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 1221
IP address blocks: 203.24.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl
rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129F1D, serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED
Validity
Not Before: Jan 9 01:21:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69605815-1ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:ff:8c:d9:85:2e:89:3a:f7:57:9a:b7:2e:
e9:e7:e2:70:62:05:a2:5d:28:f0:66:23:20:82:2d:
50:67:5c:0a:27:b3:9f:9d:49:69:94:c6:62:97:aa:
4a:65:e8:25:45:cc:a0:50:aa:0f:9a:a8:21:28:46:
ca:d5:78:27:9a:3f:f1:aa:a0:98:51:76:98:7d:1e:
c0:31:78:5f:02:bc:3c:9c:6b:7f:f8:2d:cf:ca:e2:
d0:48:e4:3c:67:fc:0f:08:70:59:2a:96:a6:cf:85:
0a:06:a4:73:05:0f:1f:b0:d2:6f:d6:28:81:15:3b:
45:cb:da:62:d4:87:00:fc:f8:8b:c0:9a:ca:6f:7b:
7a:cb:cb:d5:7f:48:e2:c3:62:ce:d9:20:c0:95:e1:
b7:3e:4c:39:59:b6:2b:1b:7a:58:d8:29:77:bc:e3:
35:80:fc:07:c8:3b:0a:df:ef:e4:59:00:cf:96:de:
43:51:d7:c5:90:1a:aa:5a:bd:12:63:19:ad:7d:e0:
e9:ca:11:e6:02:08:87:ad:30:8c:f6:0e:a7:5d:d7:
f8:af:5e:fb:48:2c:3b:3e:a4:a5:db:1c:eb:84:e9:
23:d2:cf:21:ea:c3:eb:d5:46:13:39:54:0e:f5:7a:
a8:97:69:4b:2f:e8:37:16:fd:58:ca:df:46:11:e3:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:A5:AE:8C:2D:25:16:C0:EC:60:11:F2:3B:96:96:89:82:D7:0D
X509v3 Authority Key Identifier:
keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.24.210.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c0:6b:f5:6b:f5:69:ce:08:88:73:56:f4:42:cb:cb:b1:9b:
9c:c2:cc:ff:25:97:eb:ef:26:da:b4:9d:0b:fb:d6:13:55:55:
d1:c4:1e:73:23:8d:ae:cc:a3:1d:2d:c3:10:8d:c9:a0:ca:bc:
b3:e3:8e:40:cb:31:38:13:29:c9:52:16:45:02:08:d2:5f:47:
21:ed:fe:04:ae:5a:27:2e:b5:3a:03:86:79:92:31:81:ba:1b:
c7:8c:63:49:2f:08:8c:ec:cb:d8:f6:04:a7:5c:56:a9:23:97:
7c:bf:c3:a1:6b:dc:22:25:d0:e3:96:37:b9:47:79:27:cb:50:
81:63:c4:09:64:65:04:ea:2a:a7:0f:67:6d:e3:42:1f:1e:c8:
59:c4:c1:4c:87:ab:90:90:41:13:dc:e3:0c:9a:26:c9:f0:ea:
7b:f2:cb:17:e6:ea:a8:0e:f1:6a:ff:71:fa:7b:52:06:65:5c:
8c:00:d0:e8:78:a5:48:31:d0:37:a7:a9:00:ae:4d:15:36:be:
54:e6:69:b0:c9:c6:f6:1f:51:80:3a:d4:e7:18:27:f0:48:be:
d2:4b:03:0b:7f:37:54:35:7a:25:29:8e:f2:07:d1:4c:03:52:
5f:4e:5f:e3:eb:aa:ed:cf:e2:45:7b:93:59:35:25:84:8e:cc:
a1:1e:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:04 2026 by rpki-client