This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/90195128FAC411EEB1CDF882C4F9AE02.roa
File: 90195128FAC411EEB1CDF882C4F9AE02.roa (raw, json)
Hash identifier: j6g0qkyBnbC6ObzWJzLVBlWvAyU9t4dwcYlCD4aOUWY=
Subject key identifier: F6:FE:F5:31:9D:D7:D7:3A:10:74:86:5C:BC:FC:BA:16:DB:5E:B1:9C
Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Certificate serial: 0138
Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/90195128FAC411EEB1CDF882C4F9AE02.roa
Signing time: Fri 05 Dec 2025 02:42:53 +0000
ROA not before: Fri 05 Dec 2025 02:42:53 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137199
IP address blocks: 203.32.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:42:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Validity
Not Before: Dec 5 02:42:53 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=693246ad-717e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:a2:73:bd:0c:62:cb:c9:42:8f:4a:72:22:
a0:70:3a:4b:09:5c:e8:9f:50:07:bd:55:59:a4:6d:
b6:2f:ed:77:e6:54:ed:b3:30:30:8f:1d:b5:0d:18:
f5:88:cc:26:8a:2c:89:ae:85:82:74:c1:2a:8a:5c:
e7:45:67:de:88:9b:67:77:78:5b:63:5f:fe:86:6d:
2a:96:e1:33:bd:b0:dd:58:bf:31:d0:8f:3d:af:6d:
54:d0:66:0e:cc:45:58:5b:b8:50:c2:30:7c:61:e7:
1f:70:8f:a8:09:9a:cb:39:a4:c7:b2:50:21:8b:ab:
1a:7a:0f:5b:f9:05:2c:b0:11:a1:29:04:5b:c0:f3:
a0:5f:1f:57:3d:0a:c9:15:7a:09:8b:96:e4:f0:65:
dd:d8:63:35:5d:7c:e9:5b:6b:05:62:50:f8:54:85:
a2:f4:4a:e4:43:ee:9b:33:c2:9e:4d:a4:cc:b0:3e:
f7:0a:33:62:d6:6b:48:41:05:b9:9a:87:45:b4:a3:
4d:92:3b:69:26:2e:32:2b:e2:33:c5:b9:9c:ac:4e:
d7:01:6f:e9:f9:45:fc:5d:7a:0c:75:e5:b8:c1:17:
42:5b:6c:50:0d:11:b5:88:70:fb:e4:ec:fa:b4:2e:
3e:83:c8:cd:1a:73:07:3b:20:31:b8:15:ee:51:61:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FE:F5:31:9D:D7:D7:3A:10:74:86:5C:BC:FC:BA:16:DB:5E:B1:9C
X509v3 Authority Key Identifier:
keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/90195128FAC411EEB1CDF882C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.66.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a4:54:24:22:78:30:9d:01:33:77:4a:2f:a6:2a:3d:b4:53:
83:cc:fd:4d:46:ab:47:f8:21:5d:c8:fe:f8:94:df:d2:4d:97:
3e:95:fc:95:1f:ad:de:1a:1e:2b:7b:7f:bc:92:dc:25:f5:80:
0b:7a:b5:8b:0d:ed:a0:68:48:83:a9:66:65:41:fd:c9:e3:af:
be:44:c2:f3:94:df:c6:cf:28:67:2e:3f:06:86:b0:ed:19:f9:
16:dd:6f:34:b6:27:eb:d3:29:52:6a:80:a6:c2:f5:e8:6a:3f:
c0:5f:2d:13:d8:18:80:25:2d:ea:00:da:98:54:42:40:3e:e4:
a8:2c:9b:00:6f:67:9a:5e:7b:1c:6b:78:7f:69:73:6f:5d:e9:
36:36:b3:5b:c2:12:07:c2:44:b9:a6:95:c1:2c:88:53:f4:32:
26:13:d7:a8:eb:4c:2b:a6:7f:9f:5b:18:1b:7e:5f:59:7f:83:
a9:07:28:fa:e3:44:2a:97:23:71:cc:13:8e:58:6a:02:95:23:
f1:fd:db:cd:8c:f5:29:e8:d6:99:f8:3a:8f:8a:1e:c2:c2:a7:
98:81:dc:1b:0c:e0:f3:49:9a:57:bf:39:67:15:ae:02:24:12:
ca:f9:be:1a:6f:a1:fe:cc:f8:84:c0:c8:bf:cc:e9:bd:22:ed:
55:cf:a1:ec
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF
RTcyMDM5NTUwHhcNMjUxMjA1MDI0MjUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMyNDZhZC03MTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Uyic70MYsvJQo9KciKgcDpLCVzon1AHvVVZpG22L+135lTtszAwjx21DRj1
iMwmiiyJroWCdMEqilznRWfeiJtnd3hbY1/+hm0qluEzvbDdWL8x0I89r21U0GYO
zEVYW7hQwjB8YecfcI+oCZrLOaTHslAhi6saeg9b+QUssBGhKQRbwPOgXx9XPQrJ
FXoJi5bk8GXd2GM1XXzpW2sFYlD4VIWi9ErkQ+6bM8KeTaTMsD73CjNi1mtIQQW5
modFtKNNkjtpJi4yK+IzxbmcrE7XAW/p+UX8XXoMdeW4wRdCW2xQDRG1iHD75Oz6
tC4+g8jNGnMHOyAxuBXuUWG7UQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPb+9TGd
19c6EHSGXLz8uhbbXrGcMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3
MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP
VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzNBMjcvRTI2NjQ2RTRGNzAzMTFFRUEzMUY1RDdBQzRGOUFFMDIvOTAxOTUxMjhG
QUM0MTFFRUIxQ0RGODgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLIEIwDQYJKoZIhvcNAQELBQADggEBAJukVCQieDCdATN3
Si+mKj20U4PM/U1Gq0f4IV3I/viU39JNlz6V/JUfrd4aHit7f7yS3CX1gAt6tYsN
7aBoSIOpZmVB/cnjr75EwvOU38bPKGcuPwaGsO0Z+RbdbzS2J+vTKVJqgKbC9ehq
P8BfLRPYGIAlLeoA2phUQkA+5KgsmwBvZ5peexxreH9pc29d6TY2s1vCEgfCRLmm
lcEsiFP0MiYT16jrTCumf59bGBt+X1l/g6kHKPrjRCqXI3HME45YagKVI/H9282M
9Sno1pn4Oo+KHsLCp5iB3BsM4PNJmle/OWcVrgIkEsr5vhpvof7M+ITAyL/M6b0i
7VXPoew=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:30 2025 by rpki-client