This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/9E3540C2C41311F0ADD84872C4F9AE02.roa
File: 9E3540C2C41311F0ADD84872C4F9AE02.roa (raw, json)
Hash identifier: HO2uIzfxAfoPWxfU892wMpOqa/oj9WPQVlDPIvb5NMQ=
Subject key identifier: CB:D6:AD:00:A8:B7:E6:04:99:17:B5:22:87:DE:87:76:4A:E3:63:A5
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 3561
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/9E3540C2C41311F0ADD84872C4F9AE02.roa
Signing time: Tue 18 Nov 2025 00:14:59 +0000
ROA not before: Tue 18 Nov 2025 00:14:59 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 1237
IP address blocks: 134.75.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Nov 18 00:14:59 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=691bba82-2d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:41:05:1b:05:0a:b8:3f:71:c0:79:b8:f0:
a0:a7:cf:95:bb:0b:3a:e0:6a:90:b6:d9:28:bc:4c:
46:bb:bd:87:63:d8:f3:d3:e7:01:07:47:4e:ac:07:
72:d5:78:60:c6:c5:18:fc:de:31:8b:42:84:d1:19:
d6:a5:ee:4d:72:7b:85:50:30:67:c6:fd:19:29:0f:
8a:7e:f6:83:6c:cb:bc:0e:77:3a:f7:88:34:77:a1:
05:ac:69:c3:a0:01:03:58:e2:68:89:47:9a:bc:ce:
a6:1d:84:ba:5c:44:86:39:ce:77:7d:5b:c9:bb:c0:
8a:53:12:25:1e:95:2d:6c:9f:80:b5:58:8f:4c:8e:
68:f8:26:98:c3:ec:9d:fc:60:e3:9a:93:29:36:aa:
87:1d:28:e2:61:fb:2a:1b:66:28:86:f0:bb:e1:d6:
e2:f4:6f:5c:b8:53:05:4c:30:3c:26:fd:a8:48:40:
c0:3d:50:5b:4a:48:b1:43:00:a3:22:7a:43:f4:90:
5c:f0:0d:cd:7f:8f:79:b5:6b:2b:84:10:40:27:7a:
47:f1:81:95:8d:16:eb:c4:27:35:07:e0:55:df:65:
f4:5c:c3:c9:aa:8c:f8:2a:90:1c:a6:ac:47:ce:c8:
f9:58:e0:7a:95:e0:07:d7:db:e4:33:bc:61:39:57:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:AD:00:A8:B7:E6:04:99:17:B5:22:87:DE:87:76:4A:E3:63:A5
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/9E3540C2C41311F0ADD84872C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:fc:4d:23:08:71:d4:a0:b0:d1:d3:d2:27:00:74:2e:07:d5:
d3:b3:79:5a:9f:fb:fa:8b:30:f7:f6:63:d1:7e:be:45:10:e8:
b6:d6:cb:d0:e1:51:ce:0e:86:36:e3:97:5e:35:8f:98:5d:f8:
08:6b:ec:49:0d:41:ff:5c:d2:32:12:6b:d2:40:a4:e8:0b:c4:
3e:d3:47:33:b8:ce:b6:22:b0:4e:80:78:95:30:dd:82:0c:cc:
fb:de:b5:65:73:4d:64:8b:68:13:17:a5:1b:44:52:18:76:68:
0f:95:88:51:8f:43:47:74:cc:d6:a8:c2:9e:5c:5e:5f:32:5d:
a9:b6:e5:ed:73:23:b4:8e:47:c1:6a:fe:8e:84:9f:7f:61:8a:
85:e3:9a:4c:ad:74:4c:0f:02:8a:b2:5d:56:29:0a:3a:21:14:
e0:03:21:d9:53:0f:d5:d4:bb:a3:9f:59:42:52:96:01:34:33:
98:5e:49:d1:dd:df:6d:81:04:eb:04:01:cf:49:b5:17:0d:02:
6c:a5:f1:ec:c7:63:7e:56:8a:09:fb:98:f3:cd:45:5c:dc:6c:
1e:dd:bc:17:09:50:62:c7:9b:70:7f:01:e7:2a:c4:7a:89:7d:
c8:9d:08:35:7f:da:a3:5a:80:e3:88:4b:d5:49:54:ec:1c:50:
e7:1d:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:13:40 2025 by rpki-client