This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
File: 4699D9EADB0B11F0B7B5790A82D3641D.roa (raw, json)
Hash identifier: hA2nmqeI4Xeh7Xzy4bd0FAlgC6xD0j8RLqT895g4ZsI=
Subject key identifier: DF:5E:7F:6E:E0:21:6B:A9:0E:07:BB:AB:38:F7:25:25:63:26:5E:5A
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: 0191
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
Signing time: Mon 29 Dec 2025 04:23:41 +0000
ROA not before: Mon 29 Dec 2025 04:23:41 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 6453
IP address blocks: 124.4.120.0/23 maxlen: 24
124.4.122.0/23 maxlen: 24
182.94.236.0/23 maxlen: 24
182.94.238.0/23 maxlen: 24
182.94.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Validity
Not Before: Dec 29 04:23:41 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6952024d-bcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:35:ae:9e:9a:ba:d0:c7:ad:df:63:7d:08:
7e:75:20:42:d1:a1:72:1a:9d:8d:25:8e:13:9d:24:
ba:31:fa:4e:35:d5:c5:92:2d:f4:5e:49:e3:ca:28:
67:c7:58:60:cc:2a:4b:f8:51:1e:0a:89:b6:7d:3e:
d5:0d:82:54:82:a5:04:5e:81:ce:6f:08:a5:62:55:
08:6b:a8:05:4b:54:7d:f2:7b:9e:f7:a7:54:3b:a8:
86:5f:67:95:ca:51:8f:71:22:39:1a:90:0e:dc:65:
d9:73:30:96:00:21:8d:a6:1b:8b:51:15:f0:e0:6d:
9b:da:a1:09:17:1d:aa:f1:57:f4:85:42:17:f2:4d:
27:90:06:0f:7f:a3:42:43:65:15:90:40:fa:94:c5:
4e:89:bb:63:b4:24:9d:c6:dd:86:0c:20:8d:2c:8e:
56:37:5d:e7:d8:a7:d0:b2:f9:c2:b2:95:93:f3:d1:
f0:6a:9b:e4:5b:55:e4:79:8b:fc:06:d8:2d:b6:c2:
b8:25:0f:0d:35:8d:51:fd:42:4a:08:16:8e:04:40:
55:72:97:d4:c3:6d:0b:3f:1a:90:0e:f3:21:81:76:
0e:34:eb:dd:de:df:81:3b:b4:16:22:81:8a:18:42:
5e:c6:d4:f2:fb:62:35:9b:a1:db:55:7b:67:7d:30:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:7F:6E:E0:21:6B:A9:0E:07:BB:AB:38:F7:25:25:63:26:5E:5A
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/4699D9EADB0B11F0B7B5790A82D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.4.120.0/22
182.94.236.0-182.94.240.255
Signature Algorithm: sha256WithRSAEncryption
67:2c:d8:8c:b4:fc:62:da:47:46:c5:f1:ce:a7:f7:78:eb:34:
bd:97:68:cc:93:97:aa:6a:8a:4a:d5:7f:6d:50:ed:90:74:df:
b6:6c:5c:30:55:5c:67:d5:80:2f:68:29:d0:e2:a6:01:c4:2a:
d4:82:8b:d4:5c:74:ee:4e:27:d5:ee:66:1b:05:b9:c2:eb:71:
5c:84:47:ad:f9:28:15:2a:98:09:28:30:95:60:39:3a:29:08:
f0:1e:9d:bf:97:e1:62:88:a3:87:de:73:6d:1c:06:2b:4b:07:
ef:32:e2:e0:78:77:f5:a2:ed:61:43:c5:2e:21:bd:e1:8f:d2:
b2:00:7b:72:71:b4:ec:fa:a5:24:53:3a:4e:f9:a5:71:82:2e:
00:d2:9c:58:cd:33:b0:20:66:7f:26:48:48:bd:af:bb:47:5f:
9e:67:8f:c6:e0:b3:d4:c4:b9:31:8f:16:a8:0b:05:88:ef:3b:
8b:86:23:f2:d9:f2:95:f9:5e:24:5e:7e:af:8e:69:7c:b8:fa:
aa:d6:0d:6c:c9:fe:4b:cc:4c:30:b0:ae:75:83:a3:5b:d5:14:
19:7b:7b:f0:ae:0d:db:a3:18:d5:d3:5b:65:1a:95:9e:98:38:
32:b3:a6:74:f2:20:cd:82:4c:18:97:00:3b:98:a0:89:14:0c:
04:f3:8b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:37:44 2026 by rpki-client