This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa
File: 658A332E5C0311E999AF9478C4F9AE02.roa (raw, json)
Hash identifier: spf63m8gNRJTwv/m/x8ucVicuse/s8q/g6w05x87Vv0=
Subject key identifier: D6:65:6B:D8:27:7D:CB:53:F5:4F:0E:31:56:23:16:8B:02:2F:C4:F2
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 10F7
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa
Signing time: Wed 26 Nov 2025 17:06:31 +0000
ROA not before: Wed 26 Nov 2025 17:06:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4773
IP address blocks: 129.126.208.0/24 maxlen: 24
129.126.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4343 (0x10f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Validity
Not Before: Nov 26 17:06:30 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69273396-98a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:ef:30:32:af:87:c0:61:31:36:25:e1:63:
b7:04:ca:87:7f:88:be:43:c1:51:e7:86:60:70:6d:
b2:1c:31:9d:0f:ea:aa:a6:31:b5:ff:48:a8:07:ec:
cf:c6:d4:2a:eb:b8:4a:de:72:96:63:2f:0a:0c:55:
b4:76:4a:83:a3:6f:99:05:2d:1e:08:c6:f6:da:2f:
7b:7f:45:89:25:ba:87:8f:b1:73:3a:4b:ad:f0:01:
b5:03:3b:a0:72:a2:cf:d5:8d:f2:35:19:89:95:db:
4a:70:e2:88:ac:50:6e:aa:7b:5b:85:62:fd:c9:0e:
0d:8a:13:3f:d1:d5:01:38:2f:1b:13:17:93:13:a3:
87:a4:f5:38:ef:4a:af:6a:a9:7d:d4:db:4d:29:e7:
19:3a:c0:11:97:73:71:c1:e1:7c:b3:ca:ae:45:96:
2f:c5:f9:f3:df:28:79:54:51:32:72:db:27:e7:5b:
b8:53:e8:fe:8e:4a:a3:45:5b:c3:5b:0a:ce:a8:e0:
58:72:07:6e:4d:2d:a4:19:05:73:8e:97:9b:d0:62:
6e:77:34:a3:bf:bb:8c:32:68:3e:9f:ed:17:ee:22:
5b:d8:0e:21:aa:78:74:21:02:e5:54:12:cb:25:77:
47:a7:07:34:66:e6:aa:41:90:93:5b:35:31:55:fe:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:65:6B:D8:27:7D:CB:53:F5:4F:0E:31:56:23:16:8B:02:2F:C4:F2
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.126.208.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:f8:86:d5:a5:11:75:22:a7:17:af:e2:c1:d6:f5:19:fb:32:
1e:8b:a8:f5:91:18:61:64:d6:c8:93:30:f0:80:a2:cb:e5:e4:
51:da:24:e4:cc:ea:6c:e1:8e:c4:6f:a5:75:ea:2c:32:9b:f7:
2b:11:0c:01:5a:27:e7:e9:68:46:f0:5f:ee:fa:ad:2a:51:fc:
ec:fe:b5:aa:e9:56:3f:f5:52:5d:88:91:37:84:4d:11:6c:e4:
08:e9:5c:1f:fa:06:62:fc:d6:b8:95:9b:a6:dd:80:26:f7:cc:
5c:bd:4d:55:c6:2c:ac:ff:56:b9:f8:6a:4f:35:f2:52:c5:3c:
d9:ac:ce:ac:eb:ca:33:c2:10:b5:5b:60:d7:00:98:85:27:67:
bb:3a:e0:9f:72:ba:61:48:e8:33:77:22:31:82:b7:16:7c:6f:
ef:6a:ba:e1:3a:8e:1c:82:df:9b:b9:e6:a3:ed:13:40:aa:7c:
ad:3d:63:79:a9:52:7a:74:d7:4e:a4:50:1c:b2:7e:13:e2:21:
2d:19:dd:7d:2c:5e:89:b7:74:1e:1b:36:1f:09:d2:18:76:ef:
d1:54:ef:ac:c5:76:c5:0b:fd:68:ed:57:53:1a:3f:28:f4:f5:
e4:22:af:16:b3:4a:53:b9:07:19:c2:40:9f:19:f2:9d:97:19:
ca:ba:8d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:58:36 2025 by rpki-client