This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/D616F9C45CB011F09DD6183AC4F9AE02.roa
File: D616F9C45CB011F09DD6183AC4F9AE02.roa (raw, json)
Hash identifier: ml1Kug9S1qOScffHzmjdmVF6lgBnT/45matCF9JTOhY=
Subject key identifier: E0:E5:15:61:A6:64:B2:F1:84:99:E1:45:D9:EE:4D:73:5C:C1:BC:DA
Certificate issuer: /CN=A915FC5C/serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Certificate serial: 04
Authority key identifier: 72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/D616F9C45CB011F09DD6183AC4F9AE02.roa
Signing time: Wed 09 Jul 2025 11:22:24 +0000
ROA not before: Wed 09 Jul 2025 11:22:24 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152635
IP address blocks: 202.0.81.0/24 maxlen: 24
2001:df3:8940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FC5C, serialNumber=72DAB7CEBE8A7F2788DE782EDA701E467D8C78DE
Validity
Not Before: Jul 9 11:22:24 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=686e50f0-0546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:f9:b1:d5:94:61:95:14:df:2e:e2:e7:94:
20:e0:88:c0:61:7b:34:c5:34:53:55:23:b1:c8:34:
14:7b:08:e1:f5:1e:d9:d2:07:fa:54:95:7b:f4:d2:
56:66:ab:48:0f:16:6f:0b:2a:64:33:e2:0f:d0:20:
0e:ca:a8:2b:7b:86:41:1e:7e:b3:b9:49:02:12:65:
c0:f0:4c:30:96:13:c3:3a:a3:01:f5:68:ee:27:f6:
4b:1d:f7:e0:1f:22:54:cd:af:f3:7f:98:d7:b3:a0:
8c:51:67:26:d7:10:e1:7a:13:fc:b4:27:b2:bd:0e:
50:e0:c2:59:46:b7:82:a9:95:7a:55:2e:cc:4e:81:
fb:03:51:f0:36:50:b5:32:02:de:c2:65:85:bc:2f:
08:b1:1a:a0:01:35:7a:2b:c2:3d:7a:53:05:57:2f:
7f:8e:80:91:92:5c:bb:13:fc:2f:22:1d:0c:34:f6:
5e:9e:ab:ee:cc:06:de:2b:4e:71:41:f4:c6:2c:95:
0a:27:3c:6a:58:84:fb:7c:35:c7:c1:0b:74:75:d6:
46:a6:2a:49:af:29:50:c8:b3:a8:07:a7:00:4d:74:
28:42:13:b2:8a:34:3b:25:52:13:7e:c9:5f:84:44:
a0:45:9a:be:d9:1c:46:cf:11:6f:3f:1b:7f:14:a0:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E5:15:61:A6:64:B2:F1:84:99:E1:45:D9:EE:4D:73:5C:C1:BC:DA
X509v3 Authority Key Identifier:
keyid:72:DA:B7:CE:BE:8A:7F:27:88:DE:78:2E:DA:70:1E:46:7D:8C:78:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/ctq3zr6KfyeI3ngu2nAeRn2MeN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctq3zr6KfyeI3ngu2nAeRn2MeN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC5C/363788EC5CB011F0B7442539C4F9AE02/D616F9C45CB011F09DD6183AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.0.81.0/24
IPv6:
2001:df3:8940::/48
Signature Algorithm: sha256WithRSAEncryption
79:70:59:d2:b7:b0:84:3c:73:9c:81:9b:9d:54:b5:32:e8:3e:
1a:20:1f:98:28:55:94:2a:f9:8e:64:bd:b9:5b:e0:47:13:10:
d0:54:b4:65:b5:72:1e:70:a0:a4:1b:b5:96:d2:f7:46:85:4f:
6c:3d:b8:52:ea:c4:a0:6a:18:b5:2d:46:0e:dd:b1:88:b4:3c:
ae:05:f3:07:4a:01:d2:09:f5:df:3f:c8:ec:cb:be:28:93:ad:
f6:e1:a9:59:fa:0d:42:f4:5e:23:a3:58:24:c1:da:98:c4:d8:
fc:08:26:77:78:63:a2:0e:e6:7f:59:23:44:5a:e6:8d:34:9c:
f8:f7:b0:21:b8:ea:f9:27:d9:a1:5c:6e:7d:71:3c:1d:dc:6e:
53:67:ad:bf:bf:94:a3:24:45:41:7f:f5:79:bc:d2:cc:90:16:
4e:9a:5f:f2:10:97:ba:9c:27:12:0f:3b:51:2a:16:64:a9:51:
ed:33:0b:0f:d9:3e:af:84:7e:7a:34:85:5f:45:94:7c:23:85:
be:dd:8a:1d:24:ef:c2:86:94:13:d1:f3:c9:a5:f8:83:4a:b3:
bf:9a:eb:9a:77:38:6c:99:de:83:96:94:89:c0:13:3e:75:32:
79:31:06:ee:d2:47:9e:d3:29:dc:e0:56:f7:65:b3:76:36:ab:
fa:3b:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:44:35 2025 by rpki-client