This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8D769B548D3C11F0A8123F21C4F9AE02.roa
File: 8D769B548D3C11F0A8123F21C4F9AE02.roa (raw, json)
Hash identifier: F5+F1knUPdcPoNngYv7iiLdP0OUGWuUJHtNfOlwZNpM=
Subject key identifier: 44:FC:AE:54:7F:12:F7:8C:89:47:22:1D:79:5B:DE:F7:79:AF:6A:18
Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial: 34EC
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8D769B548D3C11F0A8123F21C4F9AE02.roa
Signing time: Thu 04 Dec 2025 15:11:36 +0000
ROA not before: Thu 04 Dec 2025 15:11:36 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 16509
IP address blocks: 216.99.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13548 (0x34ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Validity
Not Before: Dec 4 15:11:36 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6931a4a7-2501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:54:88:da:33:b8:62:aa:d7:9a:4b:6d:d9:
86:be:f2:a8:cf:1e:f2:b2:fa:46:a9:97:73:68:b4:
79:a3:47:ab:a4:a7:ca:cb:a3:97:59:fb:8c:72:cd:
0d:4b:51:03:eb:be:65:45:d4:82:c8:4a:84:ad:4c:
0f:60:e0:ef:6c:64:b6:0a:09:43:b7:3c:fd:cd:02:
f5:34:ce:e1:ee:0b:59:e9:08:ca:b9:52:b8:64:3c:
af:4c:95:de:a8:fe:a3:23:2b:25:02:13:47:24:c7:
00:6d:fd:43:ea:99:70:58:21:a8:0e:3c:14:2b:77:
06:87:76:e4:da:ec:08:87:34:42:e5:aa:1f:cb:be:
77:9c:1a:79:27:2b:dd:76:95:e8:5b:f5:82:51:a0:
60:42:5c:fc:03:b0:12:a0:f6:02:e0:29:88:1d:d3:
7b:2c:8b:03:57:3b:42:ea:3e:2f:79:6b:d1:d6:31:
ce:99:98:cf:ff:d8:af:e7:56:3d:56:8d:59:62:73:
3e:e5:f6:0a:36:19:f6:fb:c8:5f:f6:49:88:76:4a:
e3:08:75:e2:da:2b:f4:1b:14:36:c4:6c:8b:aa:5c:
60:86:c3:42:23:f8:3a:41:e2:9b:ff:a2:b1:73:a1:
53:f9:4f:a3:33:f2:22:40:df:96:d6:85:0c:69:90:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FC:AE:54:7F:12:F7:8C:89:47:22:1D:79:5B:DE:F7:79:AF:6A:18
X509v3 Authority Key Identifier:
keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/8D769B548D3C11F0A8123F21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
216.99.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a0:d2:a2:5a:42:93:b4:8e:9e:1e:41:f3:16:b1:c0:99:95:
a3:f6:7f:06:29:76:7f:9c:86:61:bb:9e:78:e9:46:eb:b6:76:
6b:40:d4:98:9d:c9:94:68:ce:a3:5c:fa:64:d7:0e:9a:68:3e:
28:84:73:23:f0:b2:91:3c:14:36:b5:a8:79:59:cd:6b:6a:2b:
62:8f:77:44:cd:76:6f:a7:52:ea:0e:09:c9:18:6b:a1:5a:ac:
18:27:7f:32:ce:7e:66:3b:ec:07:89:57:16:e8:a1:9e:31:91:
b0:5a:35:e3:aa:84:51:57:a0:1c:02:cd:ab:d5:2d:9d:54:63:
02:2a:f7:54:2a:6c:58:9d:41:64:fd:dc:7a:17:4a:38:d8:ed:
24:b3:6b:39:fe:cb:ca:d2:74:09:97:38:f6:1b:ce:e4:56:e9:
8a:82:5c:8f:0b:71:2b:12:0e:86:c6:06:e8:1a:e0:02:70:fc:
92:cd:53:6c:52:ab:b5:aa:3f:5c:0a:51:71:5f:01:ba:30:db:
a0:52:6c:c9:75:78:24:88:ba:05:51:7b:ff:f5:d0:f2:f9:57:
4f:a4:5d:fd:37:78:6f:33:a6:96:4a:ec:8c:31:3d:71:6c:67:
42:9f:66:fd:39:52:bc:43:c2:45:63:cf:21:bd:7e:0d:fa:26:
33:3b:3e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:58 2025 by rpki-client