This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/6D66CE8017BA11F094861F7DC4F9AE02.roa
File: 6D66CE8017BA11F094861F7DC4F9AE02.roa (raw, json)
Hash identifier: h3Oxx5N9hnP5kzs3FjufA/TMLG+2ZY4lW89dn+znNCo=
Subject key identifier: 65:6B:A7:9E:2B:CA:10:5C:D6:45:5F:22:E0:00:BD:22:53:9C:A8:D7
Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Certificate serial: B8
Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/6D66CE8017BA11F094861F7DC4F9AE02.roa
Signing time: Wed 07 Jan 2026 05:24:29 +0000
ROA not before: Wed 07 Jan 2026 05:24:29 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 131274
IP address blocks: 43.249.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Validity
Not Before: Jan 7 05:24:29 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=695dee0c-2489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:ca:bb:be:43:70:9c:66:de:5a:46:5a:57:
7f:f5:91:44:1a:d4:4d:71:39:c2:82:b1:0a:61:10:
74:de:81:82:0d:1f:d7:a8:02:c9:74:25:5f:67:82:
bc:5c:c5:47:78:6b:a5:a5:c5:41:5e:db:a6:d7:99:
cb:29:58:72:a4:67:48:fb:42:31:26:fe:06:f9:7e:
4a:0f:27:11:57:8f:d3:ff:02:bc:05:e7:41:cc:b9:
5b:b0:6f:e6:72:2b:c9:78:9a:7d:9a:4f:67:5d:54:
79:e4:a7:5c:99:e3:00:b3:a1:47:f1:ba:06:e0:e5:
25:7e:cf:a9:4f:38:af:ea:ec:dd:d1:3e:0d:6f:c1:
70:f8:45:36:f9:30:e5:7d:bb:62:37:96:b2:3f:7d:
d3:b7:de:a8:06:5e:9e:a7:46:ac:d2:63:89:37:ce:
a9:44:a0:aa:f0:80:ce:c1:1a:8b:7d:1e:b7:23:9a:
da:93:c1:de:92:f6:b0:43:c0:aa:dd:22:65:06:45:
c4:dc:94:b8:c6:ef:07:f6:78:21:50:f3:0c:a2:5b:
6b:11:ae:7f:97:88:39:14:73:27:85:af:f0:59:02:
dc:6b:4a:17:5e:bb:56:58:04:ce:63:f1:62:ec:7a:
ce:06:4d:ce:a5:c5:f8:ee:85:15:1a:aa:0d:96:ca:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6B:A7:9E:2B:CA:10:5C:D6:45:5F:22:E0:00:BD:22:53:9C:A8:D7
X509v3 Authority Key Identifier:
keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/6D66CE8017BA11F094861F7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.99.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f4:4a:cc:f9:ed:3d:12:11:bb:e2:ce:1d:f5:ec:db:44:46:
e0:3b:e7:dd:56:2a:13:f4:2b:5d:91:ac:fc:b4:ce:5b:ee:2a:
4d:e8:71:af:71:ed:cf:02:7f:5c:c2:c7:8b:3a:4e:28:d1:bd:
29:e7:ed:7f:e1:60:9d:ff:51:87:60:23:e0:a5:f2:f1:67:67:
22:fc:36:d3:b6:33:e3:30:b1:5a:77:cb:e3:fc:de:9a:9e:80:
ad:4b:ad:86:09:b5:37:36:81:67:fd:5a:6a:3d:2b:1d:2a:40:
2b:be:f7:e6:a0:98:39:2f:4d:cb:06:f9:38:25:8c:a7:83:97:
7e:60:38:17:07:4a:aa:ae:09:16:ae:6d:d2:ad:6b:22:26:17:
84:b5:7c:06:91:65:f8:13:37:a2:88:26:86:24:bf:f7:9f:aa:
c0:c2:2f:24:a9:05:0b:63:41:a7:65:5f:bd:75:d0:45:a6:ce:
95:f3:a9:25:23:09:85:f1:5b:ca:f1:01:21:f2:81:9e:b9:a2:
a6:44:87:e0:dd:b8:ad:17:2f:4a:44:1c:cf:b4:6a:49:44:d1:
99:73:94:b7:8f:ab:81:3d:b1:26:96:a9:69:1b:cd:45:cc:42:
a6:aa:9f:0a:1f:ff:7c:88:0f:8f:22:04:d1:a0:0c:c1:c7:80:
9b:97:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:04 2026 by rpki-client