This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa
File: 4B4B1D3EF7F111F0B599D7DF686F56BC.roa (raw, json)
Hash identifier: X4TWuzBk3wMtyFYe6/AUHmaXLuM8WmwXsd98H/JnPjk=
Subject key identifier: 5F:45:DB:83:3C:91:77:2D:CA:2A:F8:BB:34:02:E0:1C:E1:7E:93:0C
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3B76
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa
Signing time: Fri 23 Jan 2026 00:20:17 +0000
ROA not before: Fri 23 Jan 2026 00:20:17 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 9318
IP address blocks: 49.128.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15222 (0x3b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Jan 23 00:20:17 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6972bec1-ec87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:a5:19:09:6d:36:39:9d:19:82:7f:01:f1:
1a:b8:53:73:6b:7b:c3:6d:56:cd:f2:56:ae:8f:ee:
fd:d1:8a:ce:d6:18:38:b6:b3:c0:13:f1:7a:25:24:
6f:48:f1:f5:47:8a:7c:c3:03:36:53:6b:5a:f5:9e:
ea:c8:23:de:a0:f3:00:48:9e:b3:05:3d:79:52:cf:
5c:96:68:b2:4d:4f:f8:e6:ea:31:28:74:60:80:10:
28:cf:74:9a:2d:f7:09:a9:a8:e7:71:53:14:0d:ea:
af:12:7d:36:cc:f5:5c:e9:2f:d4:0e:86:42:f5:61:
d0:af:da:3c:e4:b7:68:8b:c5:7c:c1:f5:19:8c:1c:
a0:cc:d3:a4:36:f5:56:21:a5:82:9f:28:7c:30:de:
0f:70:f6:7a:ff:99:8a:bb:22:c2:a1:e1:86:f5:f6:
78:a7:82:b3:d2:95:0d:db:4b:90:b8:43:97:0d:db:
67:64:51:01:8a:eb:9d:71:8d:21:93:05:dc:82:eb:
8c:ff:00:2b:1a:a4:59:f6:56:67:17:67:34:1d:92:
8b:87:e3:a4:f5:27:67:eb:78:08:c1:45:c2:e7:39:
6d:0e:bd:9a:3e:2f:ca:70:73:75:1d:c2:cb:3a:92:
42:6a:39:d3:fd:1d:d0:63:29:80:c2:55:1c:70:dc:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:45:DB:83:3C:91:77:2D:CA:2A:F8:BB:34:02:E0:1C:E1:7E:93:0C
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.200.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:5c:c0:49:51:3f:ae:74:2a:70:a3:2b:e7:18:7b:eb:9c:46:
44:78:53:3c:ce:d0:54:04:3d:0b:fc:5d:c4:fb:c5:7a:bc:f4:
2c:2f:8d:23:8a:cd:8b:49:90:ba:e1:c2:e8:95:88:05:ae:4c:
46:42:30:d1:74:1b:a4:1e:79:a5:37:fd:6a:4a:48:6a:f2:80:
f9:77:ae:c2:c4:da:41:40:ab:97:41:e8:66:1a:57:4e:b8:78:
05:49:c2:6d:65:d3:1f:7d:71:7d:79:a7:3c:35:a0:2a:15:1f:
22:0e:23:2b:f5:fc:67:da:50:08:7d:c5:c7:11:63:22:d0:4c:
37:75:a5:64:04:e5:95:71:e2:59:f0:f0:6f:c6:f9:dc:c8:1c:
d6:af:54:5a:f0:2e:30:99:60:c5:b9:b5:29:68:25:4a:c6:ff:
13:ee:d8:4e:c3:ef:03:93:e9:d3:c4:86:ae:fb:a2:ec:4f:64:
c5:24:4a:32:4e:c2:15:3d:20:9d:7b:0f:23:c8:5f:5a:10:6e:
cd:9b:88:41:c3:71:0d:3d:bd:65:66:8e:a5:93:1f:e9:18:fc:
81:54:f5:71:96:10:15:98:c3:fe:57:e3:24:81:12:f3:61:4b:
86:91:c2:6a:9b:8a:55:64:47:ee:a9:5f:e3:7e:32:c7:a7:3b:
ce:f4:03:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:20:08 2026 by rpki-client