This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa
File: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (raw, json)
Hash identifier: KY3CI4lRU/S2GDP4bTu4UZAl2Y4glbPTvJ4M2OhoOWk=
Subject key identifier: 10:25:08:C6:66:4A:BA:FD:F6:B3:9E:43:4A:4A:DE:0D:ED:8C:68:23
Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial: 37BF
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa
Signing time: Tue 30 Dec 2025 15:10:47 +0000
ROA not before: Tue 30 Dec 2025 15:10:47 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9730
IP address blocks: 59.144.97.0/24 maxlen: 24
59.145.72.0/23 maxlen: 24
61.246.50.0/24 maxlen: 24
122.185.26.0/24 maxlen: 24
125.20.15.0/24 maxlen: 24
125.22.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14271 (0x37bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Validity
Not Before: Dec 30 15:10:47 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6953eb77-5a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:9c:ed:64:62:e4:b4:bd:da:46:ad:a6:39:
bf:7f:2f:16:50:96:36:48:dc:ad:c5:8a:e2:db:f0:
2e:59:12:9d:7c:7f:26:b0:88:94:b5:dc:f1:3c:ba:
f3:ba:58:ea:89:77:2d:7a:38:8d:b4:04:84:a1:ab:
54:6e:39:c5:ec:f6:33:93:46:ac:5f:17:23:71:47:
7e:29:ba:c7:47:58:48:df:d4:98:0c:29:b5:8e:c2:
07:12:f3:61:c9:78:c5:44:fc:a9:8b:b5:72:3a:bc:
48:19:d5:86:34:15:8d:2f:22:02:c6:18:ec:c1:d2:
ea:18:c2:82:20:49:1a:4e:a3:50:e2:86:f7:f9:3f:
ea:21:5f:db:3e:e6:fc:8f:99:85:ab:d7:68:b9:e3:
1b:dc:db:bb:14:08:91:2c:5a:f8:33:7a:b3:f5:cc:
eb:09:de:d1:1e:09:a9:10:04:c2:3d:96:8e:3f:e1:
4c:75:1e:65:d7:55:4d:8d:84:81:fb:80:65:f2:9f:
5a:8d:b7:a4:6a:31:da:c6:d7:0e:ab:3d:13:80:ad:
ae:f0:58:6b:0e:f9:1c:9f:0c:6e:6b:97:45:21:b5:
c9:36:c2:37:b0:84:1e:75:4f:27:5b:e9:4b:5f:9d:
76:b8:46:1c:41:9a:c1:f5:31:29:04:a1:33:b0:05:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:08:C6:66:4A:BA:FD:F6:B3:9E:43:4A:4A:DE:0D:ED:8C:68:23
X509v3 Authority Key Identifier:
keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.144.97.0/24
59.145.72.0/23
61.246.50.0/24
122.185.26.0/24
125.20.15.0/24
125.22.113.0/24
Signature Algorithm: sha256WithRSAEncryption
29:1f:e6:4c:92:4d:9a:82:cf:f4:ad:ae:c5:58:bf:53:4f:eb:
92:75:94:79:22:75:6c:67:86:0a:17:bc:5e:6a:60:32:e5:03:
b3:e2:31:76:b6:ca:8b:a2:9c:32:19:da:4b:cf:b2:71:3d:fe:
5b:dd:d2:34:94:49:7e:c9:7f:09:cc:f7:f0:ff:26:42:0d:f3:
e3:ff:40:e9:da:e5:07:27:08:24:99:ab:8b:a1:62:14:43:2e:
7f:d9:af:0a:36:bc:58:34:b8:9c:70:f4:f5:03:63:65:d0:9c:
6c:e7:f7:73:2a:28:83:67:af:d8:9f:48:a6:34:d1:75:1f:38:
92:a2:4e:be:f4:4f:e5:83:5f:e9:d9:be:fa:73:25:a4:44:51:
16:ef:ac:ad:6b:2f:63:63:85:3d:e4:ac:c7:95:61:bc:f0:54:
28:6c:6c:87:38:ee:15:f6:eb:b1:1f:3d:b2:98:f7:7e:f5:b6:
39:db:24:02:64:e8:fd:83:fb:12:a6:aa:ea:ac:b4:92:99:73:
f9:7f:8f:b2:42:d5:38:72:a3:2c:ab:c9:cc:7d:fc:37:5d:7c:
df:ec:2f:af:1a:8e:47:31:ae:b1:1c:01:e0:f6:5f:c1:67:e1:
50:c7:a3:c7:ff:b3:e7:fb:0f:9c:2b:60:26:9f:d7:f4:96:92:
fc:77:0a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:34 2026 by rpki-client