This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa
File: 69FDEAC6645511EFB98C143DC4F9AE02.roa (raw, json)
Hash identifier: 2yxdWLH5KV11B5SzTIqQpfLj1mBTBEqIu2hQrTm6PHo=
Subject key identifier: 58:06:4B:4A:62:C1:BB:01:F8:45:4A:15:AC:68:3A:A4:41:7E:41:95
Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial: 0DDA
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa
Signing time: Mon 05 Jan 2026 08:11:12 +0000
ROA not before: Mon 05 Jan 2026 08:11:12 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141180
IP address blocks: 87.119.2.0/24 maxlen: 24
87.119.3.0/24 maxlen: 24
87.119.4.0/24 maxlen: 24
87.119.5.0/24 maxlen: 24
87.119.6.0/24 maxlen: 24
87.119.7.0/24 maxlen: 24
87.119.8.0/24 maxlen: 24
87.119.10.0/24 maxlen: 24
87.119.11.0/24 maxlen: 24
87.119.13.0/24 maxlen: 24
87.119.14.0/24 maxlen: 24
87.119.15.0/24 maxlen: 24
87.119.16.0/24 maxlen: 24
87.119.17.0/24 maxlen: 24
87.119.18.0/24 maxlen: 24
87.119.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3546 (0xdda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Validity
Not Before: Jan 5 08:11:12 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=695b7220-ce3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:17:40:91:84:0a:d7:a6:bd:05:57:b0:93:
68:8d:c4:f8:f0:7a:4b:9c:0a:1c:31:e7:c2:9d:01:
c6:00:df:f5:3a:1f:e2:f4:ab:b4:d0:91:72:a1:d5:
be:0b:83:3e:1e:1f:86:31:15:bc:a0:8e:5c:4b:b6:
b7:90:2d:c1:d0:61:8e:10:d3:25:e0:b1:e2:c1:c6:
49:3f:28:e4:00:6b:a5:2e:8a:f3:31:a3:41:a9:37:
41:d6:a3:57:15:f8:56:ce:44:8e:cc:df:de:38:b0:
5d:9e:91:9a:2f:6b:21:5d:1b:4f:be:52:d3:f1:9c:
41:29:9f:8f:53:d8:f9:be:ce:c4:d8:a0:7f:ae:b1:
73:26:6d:c0:42:02:0e:af:42:94:4d:b9:fe:43:6b:
11:25:9c:d9:8c:d3:e6:88:d6:b7:59:7d:f4:af:0a:
70:d6:dd:5c:38:9c:ff:f6:55:93:07:37:ad:76:52:
4c:59:59:06:f2:60:f6:70:a9:b5:2d:ea:37:9a:ba:
c8:26:68:06:6c:c6:4a:58:ee:58:bf:2c:29:55:c7:
f8:f9:cb:a5:58:e5:e6:7c:c4:d2:4d:b3:f8:60:5e:
2c:bc:d7:9c:5a:8c:41:3c:ea:b5:18:c4:f5:27:7c:
af:9d:62:4c:9a:c4:a8:9b:27:87:0b:e5:a0:e7:52:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:06:4B:4A:62:C1:BB:01:F8:45:4A:15:AC:68:3A:A4:41:7E:41:95
X509v3 Authority Key Identifier:
keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
87.119.2.0-87.119.8.255
87.119.10.0/23
87.119.13.0-87.119.19.255
Signature Algorithm: sha256WithRSAEncryption
95:b4:0f:c5:e0:c4:e7:74:ae:6c:e0:ef:5f:d8:77:92:fb:09:
03:1c:27:a6:6d:a6:7c:84:84:7a:a1:c0:7e:ca:f8:21:e9:ae:
74:43:1b:29:a7:48:fc:f9:66:6e:a4:56:2c:fc:6a:07:98:b8:
4c:1a:5f:01:6f:0f:ea:13:42:41:02:87:0d:cb:5b:54:ce:86:
c2:17:b7:b2:e0:6f:99:90:c4:a2:66:a9:2b:8b:59:03:ab:2b:
86:a8:d7:2d:56:db:ca:8a:b2:78:20:98:cb:d9:d2:e2:d0:05:
f4:03:f9:82:f8:22:54:9a:97:bf:cd:26:08:22:ba:15:d9:94:
b7:d2:8f:98:72:1c:4d:d4:41:8f:5e:a4:f9:36:ae:03:a7:14:
62:00:36:d6:80:98:92:36:a1:44:8a:05:77:61:76:4f:e4:3a:
67:73:67:61:7a:67:32:51:08:83:7b:a4:56:d9:73:cf:57:94:
48:e5:97:b6:ab:f0:1b:32:ce:fc:18:be:94:06:c8:07:45:30:
95:de:67:e5:6f:d4:6e:b3:3c:22:b8:75:8f:b1:f8:cf:58:d2:
98:e0:94:03:eb:13:8f:2c:45:1d:f5:01:6f:5c:5a:f5:ab:2a:
0d:65:eb:ab:b9:f1:34:04:8f:d8:65:e3:f3:00:e6:06:fb:93:
67:be:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:31 2026 by rpki-client