This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/72CF780C819311EB8964C17EC4F9AE02.roa
File: 72CF780C819311EB8964C17EC4F9AE02.roa (raw, json)
Hash identifier: O8pf/JsmCFd15kL2jrOJdQ8+KzjXz0a4Yu14ll5Qa4k=
Subject key identifier: 9A:73:02:55:32:7A:C4:F9:65:6B:8C:D5:7F:87:3F:50:1F:4B:5C:BD
Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial: 0BE5
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/72CF780C819311EB8964C17EC4F9AE02.roa
Signing time: Wed 24 Dec 2025 19:16:04 +0000
ROA not before: Wed 24 Dec 2025 19:16:04 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4589
IP address blocks: 59.191.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3045 (0xbe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Validity
Not Before: Dec 24 19:16:04 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=694c3bf4-a2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:29:14:77:b2:9f:28:5c:eb:92:a2:9c:24:
6a:f1:29:c3:50:9e:eb:ee:c3:1f:ce:54:1e:1a:da:
1d:00:93:62:33:ce:18:5b:16:53:87:15:e4:2b:37:
cc:5d:84:a6:8a:47:a3:bc:85:51:a8:c4:7a:cd:6d:
f3:b1:ba:09:ec:40:ef:28:5c:0d:5d:b6:29:da:ea:
fd:8e:a1:03:4c:a1:76:74:44:43:4b:d4:83:29:91:
14:0e:a7:ec:00:11:58:10:4a:6e:b4:21:53:d0:b8:
41:4d:7e:e4:dc:8e:be:8c:66:00:c9:11:7c:a3:56:
cb:a8:bd:ea:8a:8e:de:23:7d:9c:26:59:a5:79:d9:
11:5e:5e:7d:b8:c0:fb:04:cf:09:89:f9:c6:78:ee:
57:3d:72:b5:9e:b3:6d:47:3b:e9:e3:b4:66:9f:3b:
45:39:ef:88:44:f0:20:68:94:c3:93:a4:6b:14:d6:
af:50:a3:eb:19:4b:bf:ea:14:78:82:61:3d:66:c4:
81:72:3a:76:a6:af:0f:4f:69:db:19:42:10:90:34:
b7:f3:15:04:92:ef:c0:01:51:e4:63:81:0b:48:11:
ee:99:af:bf:ff:62:fb:57:27:42:71:39:6f:cc:fc:
03:4c:2e:ec:97:70:25:22:f5:ec:a9:4b:3e:5d:de:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:02:55:32:7A:C4:F9:65:6B:8C:D5:7F:87:3F:50:1F:4B:5C:BD
X509v3 Authority Key Identifier:
keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/72CF780C819311EB8964C17EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.191.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:b3:48:04:14:06:19:76:69:64:0b:5d:eb:cf:27:ce:ee:c2:
1e:7f:68:a8:ae:e6:36:95:96:9f:07:bb:45:3e:63:7b:49:04:
8e:bc:26:71:c2:1c:52:bd:40:bd:10:f4:5b:cc:a5:30:c4:0c:
c7:92:97:cd:53:9f:11:04:cd:6e:e9:a7:60:65:5a:db:19:d5:
6f:e1:d9:0a:2b:0b:d4:20:02:d8:15:74:b0:f3:3c:96:22:38:
f7:82:66:0f:1a:16:c8:09:c1:ba:cc:11:0f:d8:2c:b8:32:50:
60:2b:cb:47:9b:14:25:e6:15:53:86:26:24:c6:9d:40:4d:93:
f0:a3:1c:3d:2a:7b:e3:6b:e2:de:30:32:f9:43:79:42:ca:a3:
ad:6e:a2:64:37:9a:c6:07:af:2b:b3:aa:74:9c:cf:05:91:35:
ce:35:2b:79:60:49:fb:b4:4d:34:d7:fc:b5:8c:1a:3d:03:4b:
51:39:28:90:0b:6e:38:33:41:8d:4f:1f:0a:a7:04:6b:87:17:
e7:3f:10:52:16:e1:72:7e:0b:6e:ea:24:4d:34:97:e5:fd:0b:
d3:25:16:d0:25:b1:43:c5:cb:de:2d:76:b0:fd:d6:e6:c3:92:
2f:f3:24:d2:c6:76:16:d3:3d:8a:0c:04:2d:23:f3:17:a0:e2:
63:9b:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:25:03 2026 by rpki-client