This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/A209D9E4BC2311F09A8FB280C4F9AE02.roa
File: A209D9E4BC2311F09A8FB280C4F9AE02.roa (raw, json)
Hash identifier: ROMimlav+Kwv4KL5aZPE3FnW4mOvCmbzzXBU2NVsmwo=
Subject key identifier: 28:30:B2:43:ED:E3:B4:BE:D6:C0:99:11:6F:A6:80:ED:60:7D:26:6D
Certificate issuer: /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
Certificate serial: 6D
Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/A209D9E4BC2311F09A8FB280C4F9AE02.roa
Signing time: Fri 07 Nov 2025 21:49:28 +0000
ROA not before: Fri 07 Nov 2025 21:49:28 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 213549
IP address blocks: 163.227.129.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl
rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
Validity
Not Before: Nov 7 21:49:28 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=690e6967-105e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:76:2c:7d:22:83:28:40:94:94:f6:77:56:
3a:27:b8:8b:8a:71:30:36:83:9d:77:75:3c:9e:cb:
98:1c:13:ad:f9:dd:ef:49:65:a3:ac:e5:b9:b2:0e:
90:5b:0b:b0:b2:02:65:f3:54:40:fb:57:d0:18:39:
77:ce:dc:d6:cc:67:bc:bd:85:7c:81:bc:8a:31:db:
15:b2:75:99:90:af:67:59:85:71:f2:aa:a5:b9:4c:
28:30:29:2f:31:20:eb:e7:8b:ed:11:9c:12:64:98:
34:36:9b:7d:ef:86:90:ff:67:6e:fd:22:2e:65:6b:
51:14:34:75:17:3e:cc:79:14:c3:4d:a2:17:a6:9d:
12:2a:8f:a8:4e:2d:6f:ef:3e:78:13:7c:0f:84:73:
06:a5:6a:c2:31:0d:c6:70:bd:db:72:26:ec:32:e2:
c0:02:54:86:71:63:1a:81:ed:02:34:79:db:60:60:
b5:a8:23:ed:9b:d1:64:1c:c9:5a:61:ab:86:50:e6:
8b:8b:4d:29:7c:6c:4b:c1:0e:e0:41:ea:36:34:e9:
60:fe:9c:d8:77:72:66:8a:7a:2c:43:ba:d5:d1:fa:
fa:58:4c:51:57:c0:7b:9b:63:ab:46:a2:5a:4e:5f:
86:54:36:e1:79:f8:70:3f:74:f3:0d:35:ad:94:30:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:30:B2:43:ED:E3:B4:BE:D6:C0:99:11:6F:A6:80:ED:60:7D:26:6D
X509v3 Authority Key Identifier:
keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/A209D9E4BC2311F09A8FB280C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.227.129.0/24
Signature Algorithm: sha256WithRSAEncryption
12:29:32:92:4d:63:1b:34:43:52:30:e1:55:bf:a8:e7:51:63:
51:58:7a:ac:e1:26:5f:ff:08:6e:59:6f:d6:7e:52:67:95:4c:
ae:60:3c:aa:cd:62:2e:c6:e6:19:48:2a:53:2c:19:c1:c1:04:
04:92:98:25:b8:d6:3a:0a:e5:8e:93:38:6f:d5:b1:c7:3d:c3:
bd:2b:c1:62:88:e0:ad:ca:89:b8:e3:30:0c:82:1b:ac:68:97:
0c:a8:45:75:8f:10:f9:66:56:86:64:c4:ea:c5:b8:7a:05:01:
ea:00:46:a6:05:62:a4:eb:52:c1:f1:9d:94:a3:24:17:aa:7d:
96:80:06:06:65:1a:7b:10:c3:17:b9:c4:fb:48:ef:4e:03:4c:
04:50:d7:e9:2f:d5:a5:59:71:3d:bf:12:55:8a:37:58:f7:1b:
6c:fd:71:d2:45:09:fa:2d:d9:9b:2b:67:d7:6c:18:27:21:bb:
0d:d2:25:55:3a:a7:ce:18:ac:80:b9:99:7c:f0:9e:62:67:4c:
8e:d5:ce:8e:c3:70:8c:12:9f:84:da:0e:f0:00:c9:c0:92:73:
b4:c2:95:4d:e6:a8:72:81:5c:77:a2:78:5e:39:cd:59:c0:88:
a4:dd:93:90:91:e6:f3:a2:6b:37:4f:e5:9c:72:34:a2:79:59:
c8:55:f6:e3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NUVDRjExMC8GA1UEBRMoREYzMUNGMTg1MDkwRTE1NDk2NUVGRkZCQzY2NEJERDcy
MUQ4MDc1RjAeFw0yNTExMDcyMTQ5MjhaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MGU2OTY3LTEwNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxUHYsfSKDKECUlPZ3VjonuIuKcTA2g513dTyey5gcE6353e9JZaOs5bmyDpBb
C7CyAmXzVED7V9AYOXfO3NbMZ7y9hXyBvIox2xWydZmQr2dZhXHyqqW5TCgwKS8x
IOvni+0RnBJkmDQ2m33vhpD/Z279Ii5la1EUNHUXPsx5FMNNohemnRIqj6hOLW/v
PngTfA+EcwalasIxDcZwvdtyJuwy4sACVIZxYxqB7QI0edtgYLWoI+2b0WQcyVph
q4ZQ5ouLTSl8bEvBDuBB6jY06WD+nNh3cmaKeixDutXR+vpYTFFXwHubY6tGolpO
X4ZUNuF5+HA/dPMNNa2UMHgJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKDCyQ+3j
tL7WwJkRb6aA7WB9Jm0wHwYDVR0jBBgwFoAU3zHPGFCQ4VSWXv/7xmS91yHYB18w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1RUNGL0VGNkI5MDVDMjVG
NTExRjA4QkVGREE0OUM0RjlBRTAyLzN6SFBHRkNRNFZTV1h2Xzd4bVM5MXlIWUIx
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM3pIUEdGQ1E0VlNXWHZfN3htUzkxeUhZQjE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NUVDRi9FRjZCOTA1QzI1RjUxMUYwOEJFRkRBNDlDNEY5QUUwMi9BMjA5RDlFNEJD
MjMxMUYwOUE4RkIyODBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKPjgTANBgkqhkiG9w0BAQsFAAOCAQEAEikykk1jGzRDUjDh
Vb+o51FjUVh6rOEmX/8Ibllv1n5SZ5VMrmA8qs1iLsbmGUgqUywZwcEEBJKYJbjW
OgrljpM4b9Wxxz3DvSvBYojgrcqJuOMwDIIbrGiXDKhFdY8Q+WZWhmTE6sW4egUB
6gBGpgVipOtSwfGdlKMkF6p9loAGBmUaexDDF7nE+0jvTgNMBFDX6S/VpVlxPb8S
VYo3WPcbbP1x0kUJ+i3Zmytn12wYJyG7DdIlVTqnzhisgLmZfPCeYmdMjtXOjsNw
jBKfhNoO8ADJwJJztMKVTeaocoFcd6J4XjnNWcCIpN2TkJHm86JrN0/lnHI0onlZ
yFX24w==
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:10:43 2025 by rpki-client