This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/43631816B82211EFB74FF56BC4F9AE02.roa
File: 43631816B82211EFB74FF56BC4F9AE02.roa (raw, json)
Hash identifier: VWuV3WTDHbFhKXSmycUNk+HMKCNIe035E4JGd1F1GZU=
Subject key identifier: 05:BA:02:AE:53:47:F8:24:7C:83:33:06:B2:5F:A5:0A:00:B0:17:CB
Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial: B9
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/43631816B82211EFB74FF56BC4F9AE02.roa
Signing time: Wed 19 Nov 2025 04:23:00 +0000
ROA not before: Wed 19 Nov 2025 04:23:00 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 15695
IP address blocks: 86.48.240.0/24 maxlen: 24
86.48.241.0/24 maxlen: 24
86.48.242.0/24 maxlen: 24
86.48.243.0/24 maxlen: 24
86.48.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Validity
Not Before: Nov 19 04:23:00 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=691d4624-187b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:13:4c:9b:fd:96:0a:c2:53:da:12:fe:68:
69:a6:73:29:bc:99:6b:cd:9b:7f:d8:df:b7:c7:8d:
1f:01:95:aa:13:2a:da:20:2c:c5:f7:e1:f5:3a:6a:
a5:81:3d:72:f7:bd:35:59:9c:6e:ad:7b:ae:2f:75:
f5:ca:b4:7c:1d:60:7c:6a:1a:a7:97:db:ba:fe:37:
d8:b8:dc:7c:a4:f3:fd:03:95:31:8a:d7:d9:b3:b2:
4d:9b:73:fa:95:b1:23:08:8b:06:a5:56:c2:a7:38:
35:cf:db:83:e9:71:de:ac:53:ae:af:f8:7d:e9:37:
69:ed:8b:9e:8a:2b:00:cb:36:ce:7a:6d:a8:62:c3:
34:ad:31:20:55:9c:e9:8f:6f:f8:83:8b:77:05:d0:
10:c1:22:e8:5f:47:4d:29:72:f5:c9:e7:8a:c0:3c:
99:c0:07:33:98:7e:c7:5f:63:12:b8:35:b2:01:78:
e2:d7:7b:77:b6:a3:52:90:e2:c5:bf:6f:24:cb:2c:
1d:3e:87:ad:91:1b:b8:8d:92:47:10:3c:01:2f:14:
61:9d:74:d8:05:83:da:61:c9:47:f9:00:a5:03:d8:
f4:72:de:6e:38:0e:13:fb:fc:46:9b:ac:70:f1:bd:
7a:16:ba:04:3c:29:d3:70:bf:be:c1:7b:2c:ab:41:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:02:AE:53:47:F8:24:7C:83:33:06:B2:5F:A5:0A:00:B0:17:CB
X509v3 Authority Key Identifier:
keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/43631816B82211EFB74FF56BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
86.48.240.0-86.48.244.255
Signature Algorithm: sha256WithRSAEncryption
16:5d:8b:4b:1b:52:fa:57:95:73:f3:da:50:5f:2b:c2:fc:7d:
c7:bb:6f:95:75:9d:b9:cc:c4:80:c4:d5:76:fe:28:56:84:b4:
9f:eb:48:fd:e6:6c:e3:0c:c1:d2:23:3a:55:aa:a7:d3:38:76:
57:73:e8:44:7f:49:97:b7:cb:04:cd:03:32:b0:b1:02:f0:c1:
58:88:77:d4:8e:bb:e8:ff:26:0d:b9:c0:d8:5e:5b:f2:bf:4e:
d6:31:40:75:d7:54:d1:bb:c3:a0:e7:e7:b1:74:b9:b1:28:e6:
2c:dc:f7:67:43:fb:b8:47:7a:2f:75:5b:3f:f7:3a:e8:9e:05:
cc:c9:c0:44:86:22:63:3b:c5:44:49:ed:39:d5:61:6e:66:db:
93:7c:c8:61:d5:5d:0c:e3:24:2d:43:97:a7:43:bc:68:d2:c9:
7d:59:d6:5e:18:1e:2e:2a:7f:be:28:81:81:52:f4:e8:bf:bf:
bb:d6:8e:06:37:d2:a5:58:0a:4b:4a:5f:f8:aa:e6:b8:ef:9a:
f2:97:f0:43:c5:6d:80:c4:5b:2a:3c:0e:9c:a6:37:93:34:d4:
da:ee:7e:0a:52:e0:53:78:c7:2f:b3:20:77:63:ca:7d:94:8b:
c5:46:af:4e:1f:03:0e:20:49:9a:88:ad:89:34:34:67:a8:81:
b8:f2:05:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:25:54 2025 by rpki-client