This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/EA7554AC82D011EA8BCCCA64C4F9AE02.roa
File: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (raw, json)
Hash identifier: s2nUxCRuLuGEazR6JBSUwlKRD9YIJ5lbB/8C9TPhUEk=
Subject key identifier: FD:E0:47:21:83:EB:96:4C:99:7F:46:99:17:30:20:8F:F3:58:FC:5E
Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial: 0A5C
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/EA7554AC82D011EA8BCCCA64C4F9AE02.roa
Signing time: Thu 20 Nov 2025 19:10:11 +0000
ROA not before: Thu 20 Nov 2025 19:10:11 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 63527
IP address blocks: 63.140.1.0/24 maxlen: 24
63.140.2.0/24 maxlen: 24
63.140.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2652 (0xa5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Validity
Not Before: Nov 20 19:10:11 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691f6793-4e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:0e:22:4b:98:bf:27:5f:51:a7:cc:a6:40:
d2:46:24:f7:d0:e6:97:74:f8:be:f5:11:c6:56:88:
3a:93:df:6a:6b:f6:0d:3a:29:bd:4a:97:e5:95:f7:
02:dd:18:8e:14:96:16:36:5b:a2:e3:a3:3a:9e:73:
bb:2a:22:0f:1c:3f:b1:13:59:bf:b4:0d:35:e8:f7:
07:3d:36:35:2c:05:4c:05:83:45:e2:a6:68:2c:47:
f5:fb:85:b1:8d:35:02:2e:7d:1a:98:68:66:96:46:
c2:d5:b6:52:a8:c3:ba:2f:8c:7c:17:04:d3:62:d3:
d8:37:8e:76:b7:3a:ac:cb:bb:1f:d0:32:b5:f9:93:
a7:55:51:59:64:63:87:39:63:a8:ac:bb:80:b2:75:
85:e0:eb:6d:6f:29:13:0b:19:fe:7a:0e:ff:0e:74:
f2:e1:ac:ca:5b:d4:8a:76:0c:ae:7e:fb:d7:8c:3e:
53:44:e8:98:2f:0a:c2:47:be:65:5a:9e:4c:28:ef:
37:e9:49:b1:3a:f4:aa:65:34:47:87:3b:60:c3:a9:
85:72:1f:c5:cc:a2:11:da:09:ec:f8:03:f9:f9:71:
2b:a9:2b:bc:89:f4:47:ce:06:bf:8a:80:6f:d2:60:
5d:39:d4:0d:09:70:c3:a5:53:ae:44:e3:a9:d6:8e:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E0:47:21:83:EB:96:4C:99:7F:46:99:17:30:20:8F:F3:58:FC:5E
X509v3 Authority Key Identifier:
keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/EA7554AC82D011EA8BCCCA64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
63.140.1.0-63.140.2.255
63.140.12.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ff:7c:6e:ee:e9:2c:e0:7f:36:5f:54:9c:f9:29:08:27:68:
c8:5f:32:c4:91:13:06:e8:e3:13:85:80:c8:5a:c7:c7:c5:cf:
fc:6f:3b:87:19:c2:b9:1e:81:02:33:71:94:46:49:25:23:24:
38:3a:8a:91:ac:7b:52:b0:90:3a:0f:d8:43:d6:1e:cb:e4:15:
38:13:29:15:83:c4:15:ff:4d:b2:23:89:33:ba:6d:63:89:20:
34:77:5a:48:41:3f:d5:c2:e4:d4:7f:5d:16:30:0b:dd:2b:15:
ea:e8:cd:9c:89:8c:d1:75:38:98:bc:9a:71:11:81:3c:32:9a:
d1:d7:ea:2d:87:db:a3:7d:a7:c2:0d:9e:6e:67:b1:53:13:58:
5f:17:96:64:a1:a9:9d:a4:94:31:de:fb:cb:db:7f:71:5a:62:
ba:02:9a:24:69:78:5d:e3:6e:29:40:c9:3c:16:70:4f:76:e6:
ad:d7:9d:ed:0c:95:82:75:5b:69:d3:b8:c7:16:52:b3:c9:81:
bd:a9:07:c0:73:06:4f:a0:65:fb:f1:ef:c7:46:8a:9e:14:76:
1f:7a:d8:cd:d5:6a:56:3f:48:dc:63:f6:3a:bb:f9:70:3c:c7:
31:55:8c:51:72:79:63:ca:05:47:7b:c8:40:05:9d:07:35:68:
75:f6:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:22 2025 by rpki-client