This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/0B4068BEC55D11F0B9FDE586C4F9AE02.roa
File: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (raw, json)
Hash identifier: d/+adXM53jhzhnOgosOvMBJYAel7wXf5omaL/+hpgK0=
Subject key identifier: 8B:79:2A:F9:05:CF:D3:2C:E4:67:CA:08:7B:E2:A4:89:B5:BF:27:A5
Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial: 60
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/0B4068BEC55D11F0B9FDE586C4F9AE02.roa
Signing time: Wed 19 Nov 2025 15:33:06 +0000
ROA not before: Wed 19 Nov 2025 15:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138985
IP address blocks: 202.63.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Validity
Not Before: Nov 19 15:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=691de332-e2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:93:87:39:d4:cb:cd:fe:0c:59:73:18:95:
13:2f:ea:d0:7c:7e:d4:f4:3b:df:04:e3:bf:c3:41:
61:5e:bf:ab:98:95:7d:16:90:79:f7:78:71:47:ef:
74:b4:98:a0:4d:e9:5c:7b:3c:78:24:21:67:61:33:
6c:db:60:a0:ce:37:df:eb:64:95:d5:80:60:ed:f8:
6b:f8:ac:40:89:85:61:a2:5d:30:36:8b:0a:28:58:
6e:4d:43:52:80:a9:ca:fc:b6:0f:3a:5c:c1:c8:e1:
01:a3:71:7e:3d:29:19:dd:80:53:1b:da:79:c7:61:
ca:69:e1:e3:24:eb:10:c4:44:f9:73:e6:80:b7:70:
61:1e:de:62:88:25:9f:11:dd:ed:b0:43:a9:5e:24:
02:81:45:7e:d2:41:5a:bd:7d:5b:4e:41:de:c8:f6:
ef:4f:7a:14:60:0e:83:2b:b9:2b:df:16:6d:b5:5e:
d6:0d:ee:b4:ad:69:ab:99:0a:c0:0f:f6:77:db:2f:
87:2b:16:b5:bc:87:48:4b:7d:dd:08:6c:b3:3f:33:
89:4e:8a:63:38:aa:4a:7b:cd:8c:1e:8f:86:fb:a0:
f9:17:35:9d:d0:6b:67:37:b7:50:ce:98:25:5c:4d:
ac:d4:e4:fa:23:ae:67:63:a0:7f:71:37:f4:22:15:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:79:2A:F9:05:CF:D3:2C:E4:67:CA:08:7B:E2:A4:89:B5:BF:27:A5
X509v3 Authority Key Identifier:
keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/0B4068BEC55D11F0B9FDE586C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.63.211.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e9:0a:56:1f:9b:c0:cc:0f:55:fd:f5:1a:c3:ec:c8:a3:4f:
a7:2c:55:e8:e4:29:10:f1:dc:dc:b5:6d:10:ad:bc:15:22:e3:
ef:19:e9:62:7b:ec:51:da:b0:9f:3b:eb:84:6f:c4:0c:6a:b9:
f6:c2:f4:94:94:f8:0e:25:e5:44:f5:9d:85:f8:47:a9:8f:28:
fe:b8:f8:34:aa:83:9b:6c:69:6e:3a:79:33:42:0d:af:01:b9:
a5:aa:ca:ff:99:61:4d:5c:bc:3a:85:09:d9:c2:79:9c:5f:fd:
6c:d6:df:1c:97:4e:a6:fb:a8:7a:1a:09:aa:87:86:a4:16:e7:
6c:fd:ae:e0:4d:83:88:08:27:90:66:d5:fa:38:5e:d6:be:91:
da:ec:0a:a8:02:35:0f:a1:a1:d3:09:b5:96:17:ca:32:98:9b:
f3:e4:b9:a9:a8:ba:9d:20:c2:ae:82:c8:81:be:46:19:e4:b0:
0a:d0:1a:d7:e9:15:e8:40:ab:b3:1b:f8:00:b6:9b:29:37:02:
9a:8c:93:9d:c0:d8:30:e9:d1:cc:35:0b:0b:18:32:c4:fb:fd:
a0:af:ba:21:b2:c9:0b:65:ba:ae:90:03:7f:97:66:44:41:6a:
29:12:f0:84:7a:62:d4:78:4f:73:c2:3d:98:fc:8f:75:c8:6a:
64:cf:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:35:17 2025 by rpki-client