This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/E7C4738EF69011F0944A82D5396F56BC.roa
File: E7C4738EF69011F0944A82D5396F56BC.roa (raw, json)
Hash identifier: KSPiVBkmIZWbrBH//x1q8uAZ25ZrEheoZYLBG+IoVdg=
Subject key identifier: 97:79:9B:83:64:E3:54:6E:31:A1:9E:31:9E:AF:DF:1C:A1:CE:9C:44
Certificate issuer: /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Certificate serial: 19
Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/E7C4738EF69011F0944A82D5396F56BC.roa
Signing time: Wed 21 Jan 2026 06:20:47 +0000
ROA not before: Wed 21 Jan 2026 06:20:47 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 45432
IP address blocks: 119.151.124.0/23 maxlen: 24
119.151.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Validity
Not Before: Jan 21 06:20:47 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6970703f-3700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:31:e6:11:65:cb:53:11:cc:d8:9f:34:e6:
3b:b9:96:23:6e:ee:7f:22:69:f8:d3:7f:14:1e:29:
b3:50:d2:b4:5e:0b:80:58:32:0c:4a:9f:1d:f6:f3:
9d:19:a2:46:28:36:ea:a5:7d:0e:41:31:ca:c3:0d:
c4:83:40:7c:9f:f8:0f:9d:16:03:62:4c:19:44:cc:
a9:ed:49:85:ad:9b:10:8a:91:a7:6f:de:a8:e7:1d:
78:7b:51:80:99:d4:f7:40:d8:51:26:59:d7:72:05:
0c:62:f7:91:ce:7c:60:28:84:2f:04:93:3d:52:dd:
c2:dc:6f:1d:7c:32:af:b1:de:98:45:ac:c9:53:44:
c8:63:92:b2:68:89:34:87:8d:4a:a4:0b:58:aa:da:
7b:93:ab:57:1a:cc:28:3f:ea:46:b1:92:98:d2:98:
f5:26:ec:a7:3d:cb:6e:9f:92:b5:ed:28:2d:af:42:
b7:20:c9:4b:83:08:14:0b:37:2a:9d:6a:5f:55:96:
35:49:6b:89:e0:89:fe:d6:b4:b8:35:56:3e:26:6f:
22:40:48:bc:bd:8e:ab:be:0b:f9:1f:a7:0c:b5:a6:
49:e1:46:62:88:06:ab:68:38:2c:6d:2d:70:99:2a:
46:7c:f8:15:b9:f3:94:98:c2:d4:44:39:1f:e1:a2:
d1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:9B:83:64:E3:54:6E:31:A1:9E:31:9E:AF:DF:1C:A1:CE:9C:44
X509v3 Authority Key Identifier:
keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/E7C4738EF69011F0944A82D5396F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.151.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:ce:a0:3b:b1:c5:91:b4:14:03:df:6c:b9:64:64:76:f9:2b:
62:6d:4e:6d:48:44:e5:b9:56:13:df:00:96:a6:05:92:1e:4b:
66:cf:6a:55:36:d3:b2:35:6e:ae:6c:55:d3:45:f1:1f:76:7e:
c3:e2:ae:a7:62:70:e6:8d:c2:ab:a1:58:65:e6:46:25:36:fb:
b9:b6:cb:13:b4:61:82:8e:e6:46:bf:b4:c8:02:68:7e:24:67:
b5:cf:1a:86:f7:30:0b:a8:fd:e2:bf:0b:84:06:00:25:d4:79:
3a:f3:cb:06:b3:fc:06:a2:e6:56:24:9c:38:a9:67:fd:e5:1e:
fc:f4:36:10:c3:e8:40:84:2d:2f:f2:1d:8b:24:18:22:ab:89:
8c:7c:f8:56:f0:5c:2c:75:2a:4c:d7:51:47:c0:d8:85:ed:8c:
06:b6:7e:ee:30:8a:3e:98:76:a1:b6:4c:4a:5d:cc:bc:94:0b:
ba:41:25:91:9a:1e:79:27:e9:4b:8e:08:f8:c0:79:43:71:4b:
b8:c3:8f:4d:55:15:4c:7b:27:e5:6e:20:57:c0:e6:ff:d3:a1:
ce:26:ab:aa:c8:43:e5:40:9c:95:13:4b:e8:40:ef:9f:59:96:
e9:6c:14:d7:93:28:e8:22:c9:f9:f7:38:73:99:77:a1:c2:a1:
e7:7d:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:42:07 2026 by rpki-client