This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/E22BD636AC5011EBA37CCA28C4F9AE02.roa
File: E22BD636AC5011EBA37CCA28C4F9AE02.roa (raw, json)
Hash identifier: iFAnpg9Uk3YvcSYo82SRcaRxg3HTL5JDRkjecGHGHEs=
Subject key identifier: 12:5B:AE:57:C4:64:9B:0E:43:20:89:39:A2:69:47:BB:34:40:49:3B
Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
Certificate serial: 065F
Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/E22BD636AC5011EBA37CCA28C4F9AE02.roa
Signing time: Sat 06 Dec 2025 21:35:13 +0000
ROA not before: Sat 06 Dec 2025 21:35:13 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 55885
IP address blocks: 49.156.48.0/22 maxlen: 22
49.156.48.0/24 maxlen: 24
49.156.49.0/24 maxlen: 24
49.156.50.0/24 maxlen: 24
49.156.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl
rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1631 (0x65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
Validity
Not Before: Dec 6 21:35:13 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6934a191-2e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:5d:c8:09:67:a8:16:68:20:f2:2a:c9:00:
44:3c:8e:22:30:f2:d3:cb:4e:c6:b7:47:85:68:bf:
05:cf:2a:86:3f:e5:75:7a:5b:c5:66:6a:7c:64:f5:
f3:e6:76:10:cb:80:1d:43:ce:fe:60:06:57:db:da:
73:3b:f1:8e:05:bf:a1:dd:7e:18:07:4d:d1:35:b6:
4a:95:50:34:b5:8a:15:15:4f:29:81:14:f1:aa:87:
73:e2:fb:a9:a7:2c:75:11:af:39:91:54:b0:00:63:
c3:a2:f9:be:7c:40:20:5c:f7:fd:26:30:05:19:e4:
c1:6d:3f:ac:05:4c:c5:f6:ac:41:f6:12:52:55:53:
41:4b:40:fe:b5:44:08:24:60:2f:76:f8:71:0e:b7:
69:7b:db:4e:ef:f1:f4:cd:a7:cc:71:dc:45:e9:1b:
e4:40:fa:ed:92:3a:b6:ba:d1:31:51:fe:83:0d:dc:
2f:d6:1a:a1:90:7d:ac:10:42:d4:d2:b3:c7:7f:26:
a0:ea:99:be:b6:72:05:d0:5a:bc:44:cf:99:cc:c6:
8d:21:1a:71:c4:b8:e4:15:bd:6d:4a:a8:c2:b1:f9:
f1:5d:90:27:12:f6:91:69:47:66:ad:2f:82:ac:94:
6a:50:2e:1e:42:56:69:f5:e9:87:88:18:7f:d0:1f:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:AE:57:C4:64:9B:0E:43:20:89:39:A2:69:47:BB:34:40:49:3B
X509v3 Authority Key Identifier:
keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/E22BD636AC5011EBA37CCA28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.156.48.0/22
Signature Algorithm: sha256WithRSAEncryption
88:f9:b7:b3:ab:8b:a2:64:f1:12:7d:df:8d:7f:f5:c2:4f:64:
ba:d0:02:a0:4f:dc:22:14:25:94:16:23:13:78:7c:f7:15:30:
5b:5b:d4:08:2b:2a:4f:00:1e:fe:ab:c0:d0:5f:7e:f6:14:31:
c4:00:36:a4:6f:64:a2:f7:8e:f9:48:27:fb:74:5d:6c:ff:37:
e4:fe:7b:2c:4e:3e:2f:d2:6f:b8:39:46:e8:f5:e2:ee:db:ca:
85:0c:bf:7e:c3:b7:de:a8:b9:cb:fc:27:42:d5:d6:4e:11:28:
3d:89:2e:d6:e8:d4:14:46:56:35:1c:af:e0:74:b6:eb:fc:8a:
67:17:dc:06:a5:5b:37:07:6e:b4:cf:69:f3:48:3d:1d:4c:c2:
66:9d:fd:b2:b1:78:8f:5b:3c:1a:05:5c:66:25:81:ae:3c:fe:
99:98:65:30:4b:2b:de:de:a5:18:13:7f:2f:97:3c:24:8a:21:
2e:96:99:55:6d:d5:37:38:de:dc:85:e9:72:92:5b:f2:31:14:
f7:c8:b7:cc:f4:bf:93:6b:69:04:96:f7:09:d1:b5:30:d3:81:
9c:ef:5b:57:e8:28:fe:20:44:9c:56:69:2f:a9:d9:de:4a:c2:
90:63:57:ba:6c:c0:ab:12:7d:bf:69:7f:ad:4e:01:a1:ff:6d:
58:e7:f7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:12:20 2025 by rpki-client