This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/2E0FE566659A11ED8981D533C4F9AE02.roa
File: 2E0FE566659A11ED8981D533C4F9AE02.roa (raw, json)
Hash identifier: 9mymLiXCRjtr+TlJsGmOLAO7c7q7H4q9/GmJLFOK+K4=
Subject key identifier: 36:4F:F0:F3:A3:CA:87:6C:1E:0A:23:8A:9B:65:11:BA:5B:C4:49:4F
Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial: 02A0
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/2E0FE566659A11ED8981D533C4F9AE02.roa
Signing time: Wed 05 Nov 2025 01:45:53 +0000
ROA not before: Wed 05 Nov 2025 01:45:53 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 209242
IP address blocks: 203.19.222.0/24 maxlen: 24
203.89.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Validity
Not Before: Nov 5 01:45:53 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690aac51-39f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:ea:9b:16:1e:fd:8a:15:05:73:80:32:bf:
4a:41:de:1a:cb:ec:41:1f:77:99:c6:5a:10:83:fd:
cc:21:ed:47:a8:ec:39:e5:cd:e0:34:38:bb:3e:ad:
42:45:09:db:bf:56:30:e0:03:be:b1:0c:06:e9:40:
88:10:29:3d:3b:f8:c9:a2:59:d3:1c:14:51:75:fd:
fe:86:d5:c4:e0:66:c8:b0:20:3c:d9:62:1f:eb:ab:
11:68:e0:17:01:a2:0b:32:32:7e:cb:61:b6:2f:e8:
c4:16:71:7e:25:31:e3:46:9e:84:d8:6e:0a:06:11:
f8:57:18:1d:47:ca:ff:bc:d8:08:f4:25:bf:d3:d0:
7e:d4:b2:fc:3d:a3:38:2d:4d:dd:9a:09:92:7e:15:
18:1c:89:f3:0b:46:73:8c:84:50:62:10:ba:69:15:
4d:59:b4:61:f0:14:51:87:64:40:0a:17:27:af:e6:
ab:e3:66:ec:9e:31:8e:f6:0b:05:c6:62:39:f0:b1:
ec:bc:c9:17:25:cc:db:12:6c:ef:e2:8f:f6:36:e4:
5e:c4:c6:ba:4b:7d:74:b5:fa:9e:73:6e:83:98:91:
c3:1c:d1:3c:5d:c3:8f:19:7e:eb:f9:ee:c1:88:94:
50:e3:eb:f4:0d:18:4e:33:6e:6c:9b:eb:b8:03:29:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4F:F0:F3:A3:CA:87:6C:1E:0A:23:8A:9B:65:11:BA:5B:C4:49:4F
X509v3 Authority Key Identifier:
keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/2E0FE566659A11ED8981D533C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.19.222.0/24
203.89.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:68:da:57:83:14:d8:7d:85:25:be:99:9e:89:b1:04:b9:f7:
60:6b:90:f8:8b:53:57:88:68:cb:b8:4c:ca:d8:6a:8b:58:f2:
7c:55:59:ad:a3:6a:a5:31:30:2d:7e:03:be:38:b5:9d:8d:93:
90:db:3d:d4:e2:f6:23:4d:39:b7:84:73:02:46:58:1a:e4:80:
e7:14:be:5c:ec:75:b4:8c:18:a9:d3:5d:9d:f0:fc:79:60:3a:
2d:d9:a9:a8:81:52:34:79:92:1f:ae:ee:35:68:e0:02:00:18:
af:69:00:36:0a:f6:cc:76:be:8e:39:4b:0c:de:84:fe:98:10:
11:53:52:5c:60:4d:69:2f:18:10:1e:07:87:09:3c:2d:ff:58:
04:8a:6a:9b:ab:64:69:c5:ea:02:79:41:f5:8d:5d:9e:49:d9:
63:cc:4b:2d:06:d7:cb:e2:17:a2:b1:5b:f3:fb:13:4c:9c:c0:
e1:74:05:ee:6f:6c:92:3f:df:ef:6a:ec:08:88:3d:98:46:cc:
db:af:e5:5f:66:66:ce:8b:4c:40:ea:c0:87:9a:c6:c3:2b:60:
20:60:aa:fb:3d:64:00:61:19:44:96:a5:6c:86:a9:79:e5:17:
06:b6:2b:1c:f5:83:dc:bb:0f:4d:83:69:d5:96:4f:8f:64:86:
15:79:67:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:45 2025 by rpki-client