This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/0717511C564511F0A1E8983AC4F9AE02.roa
File: 0717511C564511F0A1E8983AC4F9AE02.roa (raw, json)
Hash identifier: xG2LS6C8x8CQUK4qPW/RvBSwEnqkcjEWwMOeK61dfdw=
Subject key identifier: E6:C2:AF:95:92:62:96:28:8E:21:13:CF:59:89:7B:D5:F8:A8:50:BE
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 18EE
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/0717511C564511F0A1E8983AC4F9AE02.roa
Signing time: Thu 04 Dec 2025 16:15:54 +0000
ROA not before: Thu 04 Dec 2025 16:15:54 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 18190
IP address blocks: 27.49.89.0/24 maxlen: 24
27.49.90.0/24 maxlen: 24
27.49.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6382 (0x18ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Dec 4 16:15:54 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6931b3ba-72e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:fd:4a:d3:a6:6a:2a:2d:03:14:db:c5:6f:
92:f3:a3:fd:9e:9a:fb:02:2f:ad:bc:bd:37:9e:1a:
50:32:30:78:48:21:1d:84:ef:e6:2a:ac:49:9d:97:
c2:38:a0:e6:38:02:2b:29:d2:7d:52:ca:c8:6b:92:
2d:54:07:06:35:4a:12:67:44:a8:a2:e0:95:6e:7d:
8a:93:0b:a8:f8:fa:4f:49:92:ff:14:4b:e0:cf:c7:
16:d3:02:62:d1:96:d1:37:f5:2a:6d:96:30:f0:4e:
cc:87:24:1a:fe:85:e5:84:0e:a5:78:77:96:26:18:
9b:be:fb:c0:40:a8:85:5c:75:b9:b8:df:9e:db:ce:
08:28:8e:6c:bf:1f:60:0d:c8:33:ee:a0:55:09:5c:
3d:0e:55:c4:82:22:ec:a4:2c:fb:f4:5d:81:e6:a7:
5f:a6:e9:84:e4:2d:29:b1:f1:c6:bf:ad:0b:5d:04:
cc:c3:05:06:96:ec:67:ba:06:61:a7:d5:d5:1b:d3:
b0:33:38:64:7a:5e:c1:cf:36:92:94:88:1e:b2:eb:
b5:fa:c8:50:f4:1d:25:02:6e:71:d8:dc:13:9f:b5:
72:8f:a4:f0:92:4b:e5:bb:7d:e7:5e:55:fc:62:e6:
69:c5:79:e7:56:23:98:18:4a:da:99:48:8d:ab:ae:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:AF:95:92:62:96:28:8E:21:13:CF:59:89:7B:D5:F8:A8:50:BE
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/0717511C564511F0A1E8983AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.49.89.0-27.49.91.255
Signature Algorithm: sha256WithRSAEncryption
2e:d6:4d:89:35:02:e7:1b:66:5d:83:b2:f5:eb:1b:3d:58:02:
fa:9b:7d:91:7f:0b:51:05:6b:ae:a7:a6:59:8a:06:f1:56:82:
c3:52:c1:02:d0:69:19:8d:12:93:b7:a4:d8:79:fa:18:96:df:
41:20:88:d8:0d:01:a1:48:11:ae:78:6f:52:22:83:9b:7b:b4:
cc:c1:64:67:37:33:52:a0:db:75:38:22:24:15:6b:75:a7:96:
49:41:a1:95:82:9e:85:13:8a:4f:3f:12:3c:c8:0a:c5:62:64:
7b:e0:a3:42:17:b3:71:23:d7:a4:d5:25:9b:93:a4:18:70:33:
da:b7:33:7b:1b:97:70:bf:66:12:63:d4:30:8a:05:7e:9a:ba:
20:fe:b9:83:90:ce:76:1c:0e:fa:8e:0a:a9:b8:e8:e0:18:2a:
44:83:bc:d3:6c:2d:2b:66:e6:e0:49:5c:44:eb:53:2b:43:17:
4b:a2:36:56:49:e5:07:c6:58:69:97:81:8c:91:52:df:9a:38:
51:eb:db:b8:3c:32:71:17:60:af:62:b1:dd:03:a8:ac:f5:22:
10:87:8f:f9:dd:6d:32:72:34:a1:02:65:57:d5:8d:d4:f9:9a:
7f:55:7b:d2:a7:76:14:f5:35:0d:a2:2d:1e:79:0d:7c:9b:44:
2e:e4:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:55 2025 by rpki-client