This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/FA7C5B6C996611EC8E565E60C4F9AE02.roa
File: FA7C5B6C996611EC8E565E60C4F9AE02.roa (raw, json)
Hash identifier: twtkk1WApwH4i+a2+1Hbj/9smQsUe3HWcee2VcpojQs=
Subject key identifier: 96:D2:12:85:CB:5A:18:CC:D2:9A:7E:82:27:E1:33:C4:3B:47:D0:BC
Certificate issuer: /CN=A915CD63/serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
Certificate serial: 041A
Authority key identifier: 2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/FA7C5B6C996611EC8E565E60C4F9AE02.roa
Signing time: Wed 07 Jan 2026 00:19:37 +0000
ROA not before: Wed 07 Jan 2026 00:19:37 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 25222
IP address blocks: 180.94.48.0/21 maxlen: 21
2402:1500:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl
rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CD63, serialNumber=2B9D6D7DDABC52255F3CCD79CEEA76DBCF435B9D
Validity
Not Before: Jan 7 00:19:37 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=695da699-a8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:0e:01:e4:1e:ee:a6:ed:94:54:8c:1c:c6:
e7:1f:47:3f:a3:31:33:43:c5:44:00:bc:56:bb:bd:
b6:0c:68:4e:73:1c:b4:a7:93:72:7b:38:1b:f2:f4:
35:12:59:cd:4d:56:f8:32:d6:1f:9a:53:5d:e7:7c:
9b:5f:39:e5:46:0c:a7:d8:01:1e:96:f4:e3:c4:ef:
66:d6:51:f7:51:94:40:5a:e9:3b:e3:6d:3a:3a:17:
ba:51:a1:e9:64:a8:8a:3d:3a:58:10:d2:64:d3:6e:
51:3e:f5:96:d8:5d:3c:56:4a:d5:af:19:e8:de:4b:
0d:f2:ea:aa:c9:9d:16:66:03:ca:ca:52:5c:31:e3:
4c:d6:53:e9:ee:a1:30:a9:c2:91:c2:30:41:27:ef:
63:46:d6:40:43:a6:1e:da:f4:47:40:b7:9e:75:72:
48:75:9d:38:19:19:8b:e9:d6:15:f1:31:1b:8d:b2:
32:23:d8:04:99:46:9a:75:43:46:c9:fe:04:4d:8d:
7f:63:5a:84:32:63:f7:72:96:f9:47:7d:39:f9:05:
2c:7d:cc:e9:90:2a:6a:2e:1f:ea:1d:f7:3f:a8:93:
b6:b2:8d:b8:00:7b:08:ec:d6:38:d9:f1:9a:64:7a:
c3:e0:f4:f3:11:5a:50:ee:bf:bc:55:22:26:8f:03:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D2:12:85:CB:5A:18:CC:D2:9A:7E:82:27:E1:33:C4:3B:47:D0:BC
X509v3 Authority Key Identifier:
keyid:2B:9D:6D:7D:DA:BC:52:25:5F:3C:CD:79:CE:EA:76:DB:CF:43:5B:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/K51tfdq8UiVfPM15zup2289DW50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K51tfdq8UiVfPM15zup2289DW50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CD63/8AF067C4996211ECBB661A57C4F9AE02/FA7C5B6C996611EC8E565E60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.94.48.0/21
IPv6:
2402:1500:8000::/33
Signature Algorithm: sha256WithRSAEncryption
72:d4:c1:44:20:ab:33:92:8e:ea:b6:ef:45:06:dc:a4:8b:d3:
44:d7:bf:84:ea:f7:e6:22:f9:09:2f:00:dc:e0:a3:29:01:f6:
97:60:4b:e0:88:18:b0:20:73:a2:7a:96:52:87:9d:da:3a:01:
16:fb:b8:21:6b:75:48:53:e6:fe:62:8e:45:64:d8:ad:bc:4b:
b8:da:a0:d7:bd:07:25:cb:5f:33:1b:8e:02:4d:50:0e:45:d7:
8d:5a:40:8a:ce:16:21:79:ef:8e:8c:ab:28:58:b8:2b:91:91:
ea:2e:82:d3:9a:6e:db:05:1a:c1:82:b9:39:0f:43:8b:3d:df:
e9:bb:2d:26:01:53:be:96:9a:21:09:fa:e0:25:4b:e4:5f:00:
19:fd:12:be:4c:d2:c7:c9:2c:a7:57:e5:6b:94:a6:a4:50:cf:
b6:9b:b4:e5:3c:77:17:b1:9f:0a:b2:b6:3a:d2:16:ca:e0:b1:
b5:60:34:1f:b4:42:60:fe:98:be:69:d5:42:25:a2:05:f9:1f:
fd:68:ae:53:0e:b5:5e:5f:46:e3:fd:2b:55:a2:9d:e0:75:c0:
23:ab:7e:ec:72:bb:84:1a:73:ad:3c:38:36:db:20:b4:32:ec:
33:c6:13:d8:e6:9d:ba:79:a9:bd:a1:2c:fe:a8:69:1e:ed:94:
12:80:3b:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NUNENjMxMTAvBgNVBAUTKDJCOUQ2RDdEREFCQzUyMjU1RjNDQ0Q3OUNFRUE3NkRC
Q0Y0MzVCOUQwHhcNMjYwMTA3MDAxOTM3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTVkYTY5OS1hOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzL0OAeQe7qbtlFSMHMbnH0c/ozEzQ8VEALxWu722DGhOcxy0p5Nyezgb8vQ1
ElnNTVb4MtYfmlNd53ybXznlRgyn2AEelvTjxO9m1lH3UZRAWuk74206Ohe6UaHp
ZKiKPTpYENJk025RPvWW2F08VkrVrxno3ksN8uqqyZ0WZgPKylJcMeNM1lPp7qEw
qcKRwjBBJ+9jRtZAQ6Ye2vRHQLeedXJIdZ04GRmL6dYV8TEbjbIyI9gEmUaadUNG
yf4ETY1/Y1qEMmP3cpb5R305+QUsfczpkCpqLh/qHfc/qJO2so24AHsI7NY42fGa
ZHrD4PTzEVpQ7r+8VSImjwMTewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJbSEoXL
WhjM0pp+gifhM8Q7R9C8MB8GA1UdIwQYMBaAFCudbX3avFIlXzzNec7qdtvPQ1ud
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0Q2My84QUYwNjdDNDk5
NjIxMUVDQkI2NjFBNTdDNEY5QUUwMi9LNTF0ZmRxOFVpVmZQTTE1enVwMjI4OURX
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s1MXRmZHE4VWlWZlBNMTV6dXAyMjg5RFc1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUNENjMvOEFGMDY3QzQ5OTYyMTFFQ0JCNjYxQTU3QzRGOUFFMDIvRkE3QzVCNkM5
OTY2MTFFQzhFNTY1RTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E
IDAeMAwEAgABMAYDBAO0XjAwDgQCAAIwCAMGByQCFQCAMA0GCSqGSIb3DQEBCwUA
A4IBAQBy1MFEIKszko7qtu9FBtyki9NE17+E6vfmIvkJLwDc4KMpAfaXYEvgiBiw
IHOiepZSh53aOgEW+7gha3VIU+b+Yo5FZNitvEu42qDXvQcly18zG44CTVAORdeN
WkCKzhYhee+OjKsoWLgrkZHqLoLTmm7bBRrBgrk5D0OLPd/puy0mAVO+lpohCfrg
JUvkXwAZ/RK+TNLHySynV+VrlKakUM+2m7TlPHcXsZ8KsrY60hbK4LG1YDQftEJg
/pi+adVCJaIF+R/9aK5TDrVeX0bj/StVop3gdcAjq37scruEGnOtPDg22yC0Muwz
xhPY5p26eam9oSz+qGke7ZQSgDu3
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:17:06 2026 by rpki-client