This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E61E258895F611EC88E42C7EC4F9AE02.roa
File: E61E258895F611EC88E42C7EC4F9AE02.roa (raw, json)
Hash identifier: TEe1vP6DRB8YT8k0USYkc2bmS+7dNHehlpCLdcwXNpM=
Subject key identifier: B3:A7:73:E7:25:77:A8:6E:3B:84:CF:CF:BC:A5:BA:C1:F8:A8:86:FD
Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Certificate serial: 0420
Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E61E258895F611EC88E42C7EC4F9AE02.roa
Signing time: Mon 24 Nov 2025 23:15:55 +0000
ROA not before: Mon 24 Nov 2025 23:15:55 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4775
IP address blocks: 103.146.59.0/24 maxlen: 24
202.0.116.0/24 maxlen: 24
2001:df2:4d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Validity
Not Before: Nov 24 23:15:55 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6924e72a-c157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:f5:b7:08:a9:09:c6:fb:20:40:85:c2:39:
20:23:78:9d:ec:7c:2b:9c:98:ac:f2:89:dc:3a:71:
0b:27:ec:c8:d7:f8:b2:b2:96:8d:ab:47:ff:6f:6a:
29:12:55:14:7c:59:0b:04:c0:be:b8:9f:c7:3e:4e:
fa:9b:66:16:ed:2d:be:79:70:08:c4:95:51:de:c7:
b9:7e:89:50:f4:56:05:f7:06:0b:81:fd:99:fe:c6:
0f:88:a4:30:1a:9a:c5:76:0b:c2:f5:b2:e4:28:59:
49:0f:ce:cd:fa:7e:93:8f:0b:25:f8:4b:87:cf:4c:
a9:5b:07:ed:bb:71:eb:ac:14:9d:7e:81:f2:f7:09:
54:b1:6f:e5:d4:18:58:1e:e5:29:1b:60:5b:71:b9:
00:45:4d:e8:eb:e1:32:cb:49:87:ea:37:2d:f9:8f:
af:f0:7d:84:89:55:50:9d:5b:a2:38:b9:8b:b6:b6:
c9:f9:d0:f1:c3:40:49:71:1f:19:82:ff:d4:aa:af:
b5:78:0d:4e:6c:29:0b:28:82:67:01:51:ea:ca:7f:
50:05:88:e2:9c:18:54:cf:4b:70:d5:1f:a1:36:f6:
05:81:17:1a:bb:cd:e1:d8:7b:9d:ed:d7:84:e1:af:
9a:02:1f:44:f0:cf:7f:21:e3:21:de:6b:5b:88:cc:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A7:73:E7:25:77:A8:6E:3B:84:CF:CF:BC:A5:BA:C1:F8:A8:86:FD
X509v3 Authority Key Identifier:
keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/E61E258895F611EC88E42C7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.59.0/24
202.0.116.0/24
IPv6:
2001:df2:4d80::/48
Signature Algorithm: sha256WithRSAEncryption
c2:e7:74:f0:13:61:6b:f3:db:3a:3b:04:c7:ff:25:0e:0c:c1:
52:f7:c1:1b:49:d3:6c:8c:78:5c:36:f6:da:23:9c:29:74:bb:
7c:aa:15:6d:89:6f:37:76:2d:6d:e1:09:9f:f9:30:1c:da:e0:
96:b5:8e:89:b0:87:43:06:c6:10:32:8e:fb:f9:4e:b5:5e:f7:
92:f8:6b:0d:b0:5c:3b:05:1d:dd:70:f6:09:32:4b:a5:b2:c7:
1d:46:73:26:80:df:7c:c7:91:11:79:b1:83:bc:a1:0c:0c:4d:
dc:b1:f7:eb:cf:08:88:f6:1d:2a:96:19:df:72:94:a8:03:bc:
2e:f8:0a:a5:67:e4:67:97:90:47:84:2c:df:20:1c:2a:f5:bb:
7e:ec:af:3a:37:21:43:e4:b0:c8:46:a9:82:6d:b4:32:cd:43:
a8:07:23:11:9c:84:7f:8c:27:3f:4a:21:c7:5d:94:05:e3:51:
e4:15:2f:9c:9c:d7:c5:2c:9a:cf:f5:c8:11:1e:75:fd:95:37:
67:32:34:f5:86:c1:8f:e9:95:24:d7:e4:8b:20:a8:c6:02:8e:
6a:a7:fd:60:3b:b3:a1:5a:b3:2b:58:b2:01:05:bd:8e:8b:d3:
26:29:8c:c3:f9:74:b9:2f:b4:49:06:8d:06:3a:44:8a:58:db:
3a:96:92:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:14 2025 by rpki-client