This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
File: 26A143C291EB11EF8A024083C4F9AE02.roa (raw, json)
Hash identifier: zZX2xKM9t7UlIC1izdJ24Nc0B4+L0hbN7j3FqiI/qzA=
Subject key identifier: 1F:EB:FC:51:67:E9:BD:61:73:4E:17:CD:F5:49:F7:0A:86:CC:EC:AE
Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial: 37B9
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
Signing time: Tue 30 Dec 2025 15:10:40 +0000
ROA not before: Tue 30 Dec 2025 15:10:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 198949
IP address blocks: 125.19.17.0/24 maxlen: 24
125.21.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14265 (0x37b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Validity
Not Before: Dec 30 15:10:40 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6953eb6f-482b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:76:02:06:c4:b4:fc:d2:e8:3c:27:23:e0:
5a:10:f1:25:91:b9:ca:a6:1a:51:b8:48:59:22:4c:
93:c7:14:65:8f:a4:30:61:0b:2d:28:86:2e:b1:b6:
6f:af:e2:39:70:19:7f:0a:be:39:27:f7:20:54:d6:
39:28:72:6e:fd:27:4f:2c:7a:74:f5:51:b1:4f:e8:
aa:58:f1:d9:86:0e:b4:e3:78:16:eb:bc:45:66:6d:
3f:f2:26:3f:ac:1c:26:7d:33:c4:9c:15:71:0c:a0:
10:4e:4f:04:88:6e:79:b9:b9:82:9a:f6:a6:17:97:
9b:6d:a9:74:96:bb:38:c4:7a:d8:ea:ed:3b:d2:77:
22:f6:7a:2c:a9:d8:11:f0:93:05:fb:c7:c2:fc:58:
08:44:80:39:cb:5b:2b:a7:a2:c7:df:8e:21:5c:43:
b9:de:ed:4a:0c:1f:63:47:c3:3d:0e:31:ce:a7:cb:
92:63:65:42:a9:e1:e2:cd:41:e3:3b:82:59:27:85:
86:cf:7a:87:a6:0d:c1:54:70:2d:51:cb:a4:03:42:
8a:bc:dc:c9:88:7e:96:c5:fd:1f:52:9f:a6:82:f9:
4a:41:ff:2f:3d:0b:11:a5:38:8d:9f:d9:bf:7f:06:
46:90:08:67:09:b1:d9:cf:f5:af:c4:54:4e:cc:a2:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EB:FC:51:67:E9:BD:61:73:4E:17:CD:F5:49:F7:0A:86:CC:EC:AE
X509v3 Authority Key Identifier:
keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.19.17.0/24
125.21.240.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:76:06:fd:47:c7:2d:aa:67:5c:61:2d:64:2e:de:fd:0c:40:
43:dd:dc:9b:3d:59:38:bc:9b:59:21:d4:21:35:2c:ad:e1:15:
f8:2c:49:7f:a6:40:89:5c:36:32:02:71:8e:85:81:1d:b2:b7:
9e:74:17:f8:bf:fc:84:bd:7f:fd:0b:43:6a:3b:83:71:6a:4d:
fa:f7:cf:31:d0:91:d4:31:b8:f1:aa:80:57:ce:1f:2b:5a:b2:
0e:45:a0:54:d6:95:ba:b5:6c:c5:4a:14:ae:b7:70:91:ba:16:
a4:43:20:f7:bf:6b:27:de:2a:dd:f1:e5:30:b7:8e:16:8d:fc:
d3:2a:d4:ff:a5:a7:31:e9:8f:de:37:aa:0e:4d:76:b0:e0:42:
82:e5:48:ea:13:bc:94:12:ee:33:e6:b4:18:73:25:de:47:11:
10:54:f1:0b:f3:30:41:c1:98:4b:f6:82:44:5a:33:b7:22:a9:
fd:b0:57:34:ab:6c:cc:a6:23:49:f3:bf:05:6d:25:82:b9:27:
b3:83:31:f8:e7:01:5f:93:e0:22:c5:d0:40:28:0c:b1:16:19:
53:1c:d5:80:ab:68:b7:78:c0:36:a9:70:e6:9b:12:e2:d9:4c:
ba:32:63:58:72:c5:3f:8b:5f:1d:7e:e0:fe:b9:be:3f:89:40:
ad:ec:0e:4c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICN7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB
ODlBMTg2MjUwHhcNMjUxMjMwMTUxMDQwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTUzZWI2Zi00ODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmjp2AgbEtPzS6DwnI+BaEPElkbnKphpRuEhZIkyTxxRlj6QwYQstKIYusbZv
r+I5cBl/Cr45J/cgVNY5KHJu/SdPLHp09VGxT+iqWPHZhg6043gW67xFZm0/8iY/
rBwmfTPEnBVxDKAQTk8EiG55ubmCmvamF5ebbal0lrs4xHrY6u070nci9nosqdgR
8JMF+8fC/FgIRIA5y1srp6LH344hXEO53u1KDB9jR8M9DjHOp8uSY2VCqeHizUHj
O4JZJ4WGz3qHpg3BVHAtUcukA0KKvNzJiH6Wxf0fUp+mgvlKQf8vPQsRpTiNn9m/
fwZGkAhnCbHZz/WvxFROzKL2DQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFB/r/FFn
6b1hc04XzfVJ9wqGzOyuMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE
ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTY0QjMvRTY1ODUxMTIxRDg0MTFFMkExQkEzMERCMDhCMDJDRDIvMjZBMTQzQzI5
MUVCMTFFRjhBMDI0MDgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB9ExEDBAB9FfAwDQYJKoZIhvcNAQELBQADggEBAKp2Bv1H
xy2qZ1xhLWQu3v0MQEPd3Js9WTi8m1kh1CE1LK3hFfgsSX+mQIlcNjICcY6FgR2y
t550F/i//IS9f/0LQ2o7g3FqTfr3zzHQkdQxuPGqgFfOHytasg5FoFTWlbq1bMVK
FK63cJG6FqRDIPe/ayfeKt3x5TC3jhaN/NMq1P+lpzHpj943qg5NdrDgQoLlSOoT
vJQS7jPmtBhzJd5HERBU8QvzMEHBmEv2gkRaM7ciqf2wVzSrbMymI0nzvwVtJYK5
J7ODMfjnAV+T4CLF0EAoDLEWGVMc1YCraLd4wDapcOabEuLZTLoyY1hyxT+LXx1+
4P65vj+JQK3sDkw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:24 2026 by rpki-client