This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/F69648C2ECF211EABBFDDD24C4F9AE02.roa
File: F69648C2ECF211EABBFDDD24C4F9AE02.roa (raw, json)
Hash identifier: TYm31Puc+7qP3ESOq+28JglT3+/8P4SqMfkflbKZG8o=
Subject key identifier: 69:44:AE:60:F6:E8:7F:A2:9A:F1:E6:7C:0E:82:A1:63:E7:8C:1D:AF
Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Certificate serial: 0864
Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/F69648C2ECF211EABBFDDD24C4F9AE02.roa
Signing time: Fri 16 Jan 2026 20:17:14 +0000
ROA not before: Fri 16 Jan 2026 20:17:14 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4818
IP address blocks: 210.48.192.0/20 maxlen: 21
2402:1980::/32 maxlen: 33
2402:1980:c200::/39 maxlen: 39
2402:1980:c400::/39 maxlen: 39
2402:1980:e200::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Validity
Not Before: Jan 16 20:17:14 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=696a9cca-978a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:12:a9:96:ad:40:af:ca:b2:54:33:06:7b:
a2:cb:20:4c:ae:c4:5e:91:07:78:a7:0c:67:bd:ad:
a1:43:4c:7c:ad:4b:64:07:db:ea:17:2f:51:e4:7e:
45:3c:ea:82:94:d2:d5:55:ac:4c:24:ca:d8:3e:30:
34:e0:4a:ce:25:bd:76:0f:35:3f:62:1b:28:59:6b:
56:55:a0:37:f0:59:da:99:c1:ab:25:e8:11:31:94:
ce:a4:cb:c4:7a:31:c6:18:3a:e8:6e:31:69:12:0e:
c3:d5:ec:85:10:47:8a:1a:d7:5a:db:81:fa:f5:26:
9d:7d:6f:e3:97:60:45:9d:e5:13:97:05:43:89:04:
8d:de:2f:e2:3d:42:d1:96:63:df:23:29:3e:d7:cc:
6f:f0:0c:8a:88:a2:d2:ed:a1:0e:b6:8c:e9:d1:b3:
40:5c:30:ed:f3:e3:0d:01:ea:f0:80:4c:35:eb:68:
42:b7:85:b7:90:3e:a4:cf:7f:d1:54:22:a6:dc:ec:
0a:b4:48:a7:8b:cd:82:06:3f:17:c6:dd:85:c9:48:
d5:eb:7f:cd:bf:17:c8:42:08:45:e4:ad:e2:6e:39:
7d:ca:f3:ac:a9:a9:ee:36:77:bc:51:c3:e7:ca:6a:
e1:d6:96:6d:95:15:ab:14:a7:6a:e9:d8:08:c9:c1:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:44:AE:60:F6:E8:7F:A2:9A:F1:E6:7C:0E:82:A1:63:E7:8C:1D:AF
X509v3 Authority Key Identifier:
keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/F69648C2ECF211EABBFDDD24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.48.192.0/20
IPv6:
2402:1980::/32
Signature Algorithm: sha256WithRSAEncryption
89:fa:88:6f:6b:2b:ea:71:bc:04:02:47:f4:8b:9e:4b:ea:e0:
82:90:12:0b:e6:d4:37:04:8d:1c:ef:56:09:86:60:18:2e:1f:
a2:13:8a:ad:7c:84:3d:15:f5:cf:ae:58:87:12:fe:8b:eb:54:
48:ab:50:5f:62:bf:bb:c9:c7:90:17:67:51:7a:94:f1:2e:c0:
68:4e:8a:08:04:88:be:87:23:03:63:0b:69:4e:30:0b:f3:e6:
0f:25:df:0f:87:4d:79:2d:d5:d2:81:0c:fc:05:48:6e:04:b2:
7f:88:63:4a:9d:62:98:58:c4:69:69:3f:20:b4:52:0d:36:10:
e5:f5:9d:ad:d7:c2:62:74:72:24:34:d4:c9:ed:b9:2c:e1:28:
97:07:e9:f0:51:36:2d:b8:b6:d2:80:7d:ae:43:29:51:f4:c3:
cb:e8:76:78:8b:a1:07:75:ec:e1:1e:c5:ac:e7:cc:a9:64:38:
ed:87:74:74:53:0e:f7:c0:c9:f8:ae:38:98:6e:4d:3f:01:87:
e9:1f:81:a0:47:f6:c2:38:b6:d8:af:2c:5b:03:67:02:67:5b:
a2:4d:0e:16:dc:3b:f0:a9:e5:87:9b:14:01:4f:29:18:c6:5f:
c9:92:90:35:2b:38:ba:69:ad:e5:8b:5f:88:b1:90:33:d0:c2:
21:fa:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:47 2026 by rpki-client