This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/FCA046066C8611EFBF35D221C4F9AE02.roa
File: FCA046066C8611EFBF35D221C4F9AE02.roa (raw, json)
Hash identifier: XsjDKoGiG8uLcawuj1At+vgYcLQU6DBdHwNToA0jeFY=
Subject key identifier: 9B:C3:B4:DC:73:D5:E2:4E:25:9D:E5:6C:D6:07:72:7A:8F:E8:D6:8C
Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Certificate serial: 0177
Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/FCA046066C8611EFBF35D221C4F9AE02.roa
Signing time: Tue 23 Dec 2025 03:23:12 +0000
ROA not before: Tue 23 Dec 2025 03:23:12 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45691
IP address blocks: 157.10.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Validity
Not Before: Dec 23 03:23:12 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=694a0b20-45ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bc:d9:e4:88:6b:fa:45:9b:7a:af:8d:44:be:
01:c6:26:4f:12:8d:db:a4:36:6e:cb:25:45:1d:ef:
81:24:eb:92:d1:97:50:e7:c6:48:99:76:2f:a2:d3:
da:fa:bf:e9:54:e4:0e:cb:30:ef:35:c1:55:2e:c3:
e5:96:ce:7a:40:fc:d8:3e:92:51:f5:0d:5b:22:50:
d1:b0:1d:7f:b9:9b:53:fe:67:63:8d:1f:bf:6e:a3:
d4:3f:34:69:5d:cb:91:3b:06:79:e4:8b:1e:aa:f1:
cf:9d:7e:b7:c6:c4:f8:0c:05:ee:76:26:86:91:35:
c6:dc:17:2f:91:60:1c:85:5d:32:69:7a:59:92:69:
ab:25:92:73:3c:3f:14:51:a2:d5:d3:58:7e:2f:a6:
d6:2d:75:e5:0b:13:41:2f:55:31:23:f7:53:84:13:
3b:96:5b:8c:89:8e:f6:28:b8:55:16:17:dc:8b:b7:
47:39:ad:3d:2c:22:6e:46:a9:38:12:b7:d9:c3:d2:
35:f0:f6:33:6e:6e:6f:5c:3a:d5:54:d6:3b:8a:be:
81:ea:6b:bd:66:6a:93:ee:3a:81:c1:4f:33:07:4f:
74:66:c7:41:0d:80:9b:8e:2f:09:49:e0:a5:7d:33:
7a:10:05:59:f9:e2:1f:ab:f6:6b:7c:bb:5e:9a:b1:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C3:B4:DC:73:D5:E2:4E:25:9D:E5:6C:D6:07:72:7A:8F:E8:D6:8C
X509v3 Authority Key Identifier:
keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/FCA046066C8611EFBF35D221C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f8:67:3c:61:ab:3f:b3:6a:45:0e:c6:31:b4:f0:fb:55:78:
88:2f:0a:fd:05:ae:7c:d5:81:4e:ea:53:21:73:7c:ba:3c:de:
52:ed:8d:29:d8:da:ac:4f:2a:19:ff:3b:c8:8f:da:88:6a:e1:
51:31:80:e6:6e:22:4e:22:38:41:3a:da:70:04:6f:92:98:ec:
c9:1c:7d:32:d6:1c:35:7a:55:fc:c8:0f:be:d6:a0:1a:e7:84:
c6:f7:a6:f1:12:56:c3:5e:2b:22:aa:08:e9:25:b9:f1:cb:27:
06:b2:ef:a8:04:8d:38:a8:9b:80:90:aa:0d:be:e2:91:78:dc:
25:67:be:f7:c7:89:5e:2e:4c:48:3f:8e:ea:cf:45:4a:fb:66:
ef:96:a3:ab:37:bf:41:77:25:e6:d0:c0:65:cc:ad:5f:99:95:
7d:6a:01:e5:99:ce:f5:e7:b8:b3:e4:c9:a0:97:c4:25:43:c6:
91:d9:84:02:5e:4d:32:dd:6a:45:35:54:b8:b7:31:ef:85:69:
cc:39:a9:67:b8:c9:75:22:34:f4:96:e4:ef:b6:f8:11:7e:cc:
22:cc:13:ff:e0:b5:42:97:b4:4c:3d:1f:05:62:ac:8e:b9:60:
a5:10:88:30:00:c5:c5:5e:63:6c:22:af:41:3a:ee:2e:32:59:
33:de:43:9a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1
MDRGMjVBQTkwHhcNMjUxMjIzMDMyMzEyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTRhMGIyMC00NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3rzZ5Ihr+kWbeq+NRL4BxiZPEo3bpDZuyyVFHe+BJOuS0ZdQ58ZImXYvotPa
+r/pVOQOyzDvNcFVLsPlls56QPzYPpJR9Q1bIlDRsB1/uZtT/mdjjR+/bqPUPzRp
XcuROwZ55IseqvHPnX63xsT4DAXudiaGkTXG3BcvkWAchV0yaXpZkmmrJZJzPD8U
UaLV01h+L6bWLXXlCxNBL1UxI/dThBM7lluMiY72KLhVFhfci7dHOa09LCJuRqk4
ErfZw9I18PYzbm5vXDrVVNY7ir6B6mu9ZmqT7jqBwU8zB090ZsdBDYCbji8JSeCl
fTN6EAVZ+eIfq/ZrfLtemrG/aQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJvDtNxz
1eJOJZ3lbNYHcnqP6NaMMB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1
QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX
cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkYzODcvRkU0RDc4RTJCNUMxMTFFRTk1QjU4MzQxQzRGOUFFMDIvRkNBMDQ2MDY2
Qzg2MTFFRkJGMzVEMjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACdCtEwDQYJKoZIhvcNAQELBQADggEBAKj4Zzxhqz+zakUO
xjG08PtVeIgvCv0FrnzVgU7qUyFzfLo83lLtjSnY2qxPKhn/O8iP2ohq4VExgOZu
Ik4iOEE62nAEb5KY7MkcfTLWHDV6VfzID77WoBrnhMb3pvESVsNeKyKqCOklufHL
Jway76gEjTiom4CQqg2+4pF43CVnvvfHiV4uTEg/jurPRUr7Zu+Wo6s3v0F3JebQ
wGXMrV+ZlX1qAeWZzvXnuLPkyaCXxCVDxpHZhAJeTTLdakU1VLi3Me+Facw5qWe4
yXUiNPSW5O+2+BF+zCLME//gtUKXtEw9HwVirI65YKUQiDAAxcVeY2wir0E67i4y
WTPeQ5o=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:03 2026 by rpki-client