This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/77248CD0889111F0810C3E1FC4F9AE02.roa
File: 77248CD0889111F0810C3E1FC4F9AE02.roa (raw, json)
Hash identifier: AQ4Lse7zCFP3/9JvqgPaWnl1J8Ednlxm8McvA0KBIHY=
Subject key identifier: BA:89:37:2C:72:BC:8F:83:6E:B5:C2:63:C0:B5:F1:70:62:36:DD:90
Certificate issuer: /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Certificate serial: 45
Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/77248CD0889111F0810C3E1FC4F9AE02.roa
Signing time: Sun 11 Jan 2026 07:24:25 +0000
ROA not before: Sun 11 Jan 2026 07:24:25 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 64078
IP address blocks: 59.152.44.0/22 maxlen: 24
103.205.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Validity
Not Before: Jan 11 07:24:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69635029-2293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:f9:4a:c9:a9:c4:d8:96:d2:23:27:fb:e1:
7f:b9:e7:03:84:0d:33:42:a1:47:a2:c9:d7:e0:89:
0b:f8:05:e9:bf:1b:0d:c2:8f:8e:65:2c:8f:b3:62:
85:18:38:02:9f:aa:a5:67:c5:ee:fc:4e:93:c7:8d:
20:f0:84:0c:64:10:38:27:07:a9:29:d9:fa:64:9f:
50:8f:bf:67:aa:e0:f8:4f:9d:77:c7:f4:b6:82:6b:
78:eb:4c:ef:52:e2:7d:dd:3d:2e:dc:7e:55:20:a4:
47:1f:96:2e:19:cc:39:74:44:94:69:7e:3d:86:95:
3f:8b:08:60:fc:df:1f:77:cc:59:6e:75:e2:15:e8:
55:9e:16:d4:a0:9c:e4:62:1d:e3:20:55:cd:82:73:
db:1a:6b:69:7a:a4:a4:2d:3b:5f:1f:9e:42:9b:82:
96:c5:b0:7c:25:22:1c:4e:8a:04:d8:7e:c5:65:d0:
25:5f:41:ba:46:32:65:af:ca:26:8b:91:6d:34:9c:
8b:8d:b2:c4:e9:6e:e1:9c:f6:b0:18:c7:06:d4:e4:
03:79:db:72:bf:da:e2:97:c1:f5:12:f7:8f:73:28:
34:f2:ea:72:ae:8b:59:10:a7:cb:9d:5a:bf:80:fe:
df:88:10:25:9e:ff:7a:8f:c7:0d:b4:40:ee:9d:e1:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:89:37:2C:72:BC:8F:83:6E:B5:C2:63:C0:B5:F1:70:62:36:DD:90
X509v3 Authority Key Identifier:
keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/77248CD0889111F0810C3E1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.152.44.0/22
103.205.156.0/22
Signature Algorithm: sha256WithRSAEncryption
35:e4:77:d9:d3:58:bc:88:9a:7f:f0:ea:e2:6b:30:bb:c3:de:
e1:bf:e6:5c:b5:8f:de:99:ae:58:9f:82:d4:71:54:28:db:e3:
ea:f6:72:9e:74:c7:73:a9:5e:fe:00:ab:f1:9d:d3:4e:4a:aa:
cd:f9:2d:84:4b:b7:25:ec:b2:ed:fc:7e:6c:94:6a:ef:4d:55:
af:2c:54:fb:ef:b5:1a:b0:2d:ec:c7:e6:18:76:96:15:76:24:
56:41:d1:46:16:67:92:88:2e:25:4c:86:ef:53:7b:4e:fa:e5:
c7:ea:9c:f5:3a:08:59:a7:e8:e9:4b:d1:16:7f:e7:76:3f:b3:
7a:9e:9c:b2:19:3a:ee:fc:1d:f5:e6:f7:17:e4:66:ec:14:75:
08:4e:c8:36:b8:8e:f9:61:df:fc:7e:f0:5d:2b:a6:32:34:19:
d8:86:57:f0:ca:ee:2b:88:06:6d:28:bd:2d:5d:5b:c0:86:ec:
09:4d:36:9d:91:5a:d3:14:68:08:45:3c:3a:49:1a:9a:78:a0:
cd:1a:26:65:52:21:52:39:fe:8d:d9:21:34:11:36:f5:25:21:
e8:59:8d:49:f5:4b:31:96:d9:e2:9d:f3:69:49:2d:cc:cc:5e:
a7:b8:e9:3d:27:3b:57:3a:fd:e3:cb:47:21:63:e0:2f:14:3f:
5b:26:77:9c
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE3
RDExNDExMC8GA1UEBRMoMEQ4QzFGMTEwQkRCMzNEMDUzQjY1NkJCQTAwNzNCOTMw
QzY0RjMxNDAeFw0yNjAxMTEwNzI0MjVaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NjM1MDI5LTIyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDpXflKyanE2JbSIyf74X+55wOEDTNCoUeiydfgiQv4Bem/Gw3Cj45lLI+zYoUY
OAKfqqVnxe78TpPHjSDwhAxkEDgnB6kp2fpkn1CPv2eq4PhPnXfH9LaCa3jrTO9S
4n3dPS7cflUgpEcfli4ZzDl0RJRpfj2GlT+LCGD83x93zFludeIV6FWeFtSgnORi
HeMgVc2Cc9saa2l6pKQtO18fnkKbgpbFsHwlIhxOigTYfsVl0CVfQbpGMmWvyiaL
kW00nIuNssTpbuGc9rAYxwbU5AN523K/2uKXwfUS949zKDTy6nKui1kQp8udWr+A
/t+IECWe/3qPxw20QO6d4fXvAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUuok3LHK8
j4NutcJjwLXxcGI23ZAwHwYDVR0jBBgwFoAUDYwfEQvbM9BTtla7oAc7kwxk8xQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMTE0Lzc5RDQzMEJDODg5
MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlCVHRsYTdvQWM3a3d4azh4
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRFl3ZkVRdmJNOUJUdGxhN29BYzdrd3hrOHhRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDExNC83OUQ0MzBCQzg4OTAxMUYwODkzQTREMUNDNEY5QUUwMi83NzI0OENEMDg4
OTExMUYwODEwQzNFMUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAjuYLAMEAmfNnDANBgkqhkiG9w0BAQsFAAOCAQEANeR32dNY
vIiaf/Dq4mswu8Pe4b/mXLWP3pmuWJ+C1HFUKNvj6vZynnTHc6le/gCr8Z3TTkqq
zfkthEu3Jeyy7fx+bJRq701VryxU+++1GrAt7MfmGHaWFXYkVkHRRhZnkoguJUyG
71N7Tvrlx+qc9ToIWafo6UvRFn/ndj+zep6cshk67vwd9eb3F+Rm7BR1CE7INriO
+WHf/H7wXSumMjQZ2IZX8MruK4gGbSi9LV1bwIbsCU02nZFa0xRoCEU8Okkamnig
zRomZVIhUjn+jdkhNBE29SUh6FmNSfVLMZbZ4p3zaUktzMxep7jpPSc7Vzr948tH
IWPgLxQ/WyZ3nA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:03 2026 by rpki-client