This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/A7A72BF24B0611EF91534014C4F9AE02.roa
File: A7A72BF24B0611EF91534014C4F9AE02.roa (raw, json)
Hash identifier: rkEEq1NU0ZB0iJ206DwCqyTIcCk221/XirQFCrxsWtw=
Subject key identifier: 1A:18:4B:59:6F:72:23:88:D7:31:B2:3C:75:4E:37:80:4D:A8:E3:C1
Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Certificate serial: 0AD6
Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/A7A72BF24B0611EF91534014C4F9AE02.roa
Signing time: Sat 08 Nov 2025 19:10:00 +0000
ROA not before: Sat 08 Nov 2025 19:10:00 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 14618
IP address blocks: 27.124.61.0/24 maxlen: 24
182.173.70.0/24 maxlen: 24
182.173.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Validity
Not Before: Nov 8 19:10:00 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690f9588-2ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:50:8d:68:59:7e:51:9a:4b:89:97:6f:d4:
da:52:ba:3c:99:67:01:3c:de:a2:b9:cd:e9:66:15:
78:c6:f0:8e:95:fb:51:4f:b4:5e:c5:9f:83:da:cd:
61:1b:ac:39:df:26:0d:8a:be:ed:aa:45:e6:a5:5b:
d4:21:73:7a:56:ac:cf:4b:50:2c:11:75:eb:a8:02:
95:0a:db:02:d3:5c:4a:34:4d:fb:6f:c8:48:73:48:
f9:c3:68:0b:3c:65:26:5f:56:9a:d0:bf:f4:f8:3b:
b2:aa:d0:51:0c:dc:00:8b:3c:39:21:f2:ce:b8:41:
c7:11:8a:57:fe:79:0f:48:1c:d8:5c:0f:f6:81:a4:
dc:6a:83:b3:97:7b:b7:64:1a:f9:58:e3:25:28:d5:
8b:97:80:bf:bd:20:64:aa:a6:22:b4:1b:19:81:c4:
8f:2b:79:58:f4:58:e8:c3:9e:93:bf:bb:45:88:05:
98:9d:73:61:85:52:3f:42:64:2c:ac:1d:a2:d3:5b:
70:5e:de:8d:83:70:56:f4:96:37:4d:8f:3c:c8:28:
e3:cb:77:b3:f9:96:ff:2b:1a:89:db:97:a8:3e:e5:
c8:fa:29:7c:14:66:7c:80:b5:24:34:4e:42:6b:44:
57:bc:f3:a8:a2:99:ee:81:76:e7:21:f6:a1:b0:a3:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:18:4B:59:6F:72:23:88:D7:31:B2:3C:75:4E:37:80:4D:A8:E3:C1
X509v3 Authority Key Identifier:
keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/A7A72BF24B0611EF91534014C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.124.61.0/24
182.173.70.0/23
Signature Algorithm: sha256WithRSAEncryption
27:00:f7:18:f0:a6:3c:67:8b:d1:9b:90:46:c4:8e:0a:d9:5c:
57:66:af:12:db:87:bc:35:b3:87:04:87:6c:fa:65:ca:f5:55:
d3:48:8f:f6:ca:be:5b:30:4b:04:62:f3:ae:a2:3b:12:a3:0f:
0e:a8:9d:84:37:29:0a:7f:91:49:fc:81:37:16:5d:25:dc:d5:
47:26:98:63:d5:79:e9:97:d2:bd:ec:66:fc:15:51:3b:4e:db:
73:0e:0e:46:79:7b:11:99:40:bb:65:a8:33:b0:23:d7:bd:90:
93:b7:2c:4a:06:1e:e2:cb:fa:db:e2:42:b7:99:db:8d:df:59:
38:46:a8:7a:b4:4a:84:1b:04:d7:bd:0a:77:5d:fa:7b:c9:61:
29:02:31:b5:02:36:5d:3a:ea:e3:f3:35:da:59:13:62:c5:e7:
83:47:46:4f:6c:ce:bd:e7:5c:87:37:8d:9f:b9:0f:64:af:34:
c0:f8:f4:ff:fc:58:8a:c1:d7:2e:ce:1a:ea:34:77:66:13:5e:
1e:d2:8c:0f:17:77:fb:15:3f:9b:40:4d:34:6d:56:24:e2:39:
60:66:5b:b8:64:fa:70:3b:48:d1:30:c6:d4:29:0f:d2:a0:1b:
bd:1a:4c:7b:dc:ea:c6:ca:52:da:07:c4:4e:e1:09:e1:09:be:
77:56:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:09:04 2025 by rpki-client