This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/0A1FAC405BB211EEAD06B243C4F9AE02.roa
File: 0A1FAC405BB211EEAD06B243C4F9AE02.roa (raw, json)
Hash identifier: BH/z7dAKTqAskzwNrhdIelrqYYR7ZR+hGgbRW0cxyK0=
Subject key identifier: 29:AD:AA:5D:41:1D:D0:EC:24:1A:C9:7E:A8:89:1E:AA:4A:31:05:65
Certificate issuer: /CN=A9197FDB/serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D
Certificate serial: 05F9
Authority key identifier: E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/0A1FAC405BB211EEAD06B243C4F9AE02.roa
Signing time: Wed 24 Dec 2025 22:19:51 +0000
ROA not before: Wed 24 Dec 2025 22:19:51 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4787
IP address blocks: 202.179.136.0/24 maxlen: 24
202.179.137.0/24 maxlen: 24
202.179.138.0/24 maxlen: 24
202.179.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl
rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1529 (0x5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197FDB, serialNumber=E0025BF932E716E1A1F8AF9010211C411084FC9D
Validity
Not Before: Dec 24 22:19:51 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=694c6707-6bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:19:e0:24:b6:13:29:23:d0:00:8c:0b:ee:
10:ee:7f:69:5e:78:3f:12:89:db:31:73:b9:9c:50:
fe:37:44:c8:d1:1f:ee:fd:77:9a:cc:76:a4:62:02:
b6:05:78:03:dc:9d:7c:88:36:37:95:da:99:6d:10:
5f:5b:4f:5a:83:9f:c3:8e:11:46:9c:d8:ee:52:d4:
c9:58:bd:35:e1:41:c4:37:f1:44:05:4d:aa:dd:72:
4a:0b:69:c2:54:88:a7:1d:42:5f:a5:41:be:af:9f:
74:b4:ff:93:ff:40:66:66:bf:b4:cb:fe:3a:f3:dd:
ec:96:a5:6a:36:93:20:b7:1d:7a:ea:46:a4:1f:dd:
52:f8:17:e7:ef:c8:5b:f3:b0:e6:fc:96:01:60:0b:
c3:15:bd:af:30:da:34:a0:44:13:ff:2c:4e:e1:8c:
dd:db:32:07:6d:e0:c1:3b:45:12:86:78:34:0e:96:
46:45:96:6f:df:77:c4:82:fe:ac:8e:02:2c:03:1f:
32:a5:bc:68:8f:33:52:66:e6:ef:46:c0:15:20:f6:
2f:c0:66:65:f9:8f:24:81:77:e3:2a:24:06:2e:71:
c6:db:b4:8c:3a:e8:d4:df:80:40:cd:87:e8:61:45:
03:a5:b5:55:b2:ea:e1:45:df:a7:59:2c:06:4e:f6:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:AA:5D:41:1D:D0:EC:24:1A:C9:7E:A8:89:1E:AA:4A:31:05:65
X509v3 Authority Key Identifier:
keyid:E0:02:5B:F9:32:E7:16:E1:A1:F8:AF:90:10:21:1C:41:10:84:FC:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/4AJb-TLnFuGh-K-QECEcQRCE_J0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4AJb-TLnFuGh-K-QECEcQRCE_J0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FDB/657E4074DA3611EB84E6A349C4F9AE02/0A1FAC405BB211EEAD06B243C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.179.136.0/22
Signature Algorithm: sha256WithRSAEncryption
59:24:e7:02:92:b1:0e:aa:77:c9:40:85:cd:78:a5:6a:ad:5e:
75:f6:0d:3a:2c:05:33:ad:33:6a:d7:78:94:f4:a1:08:1d:13:
41:35:db:9a:bb:ba:0f:44:c6:2d:39:f3:f9:8e:0e:6d:27:83:
89:6e:f3:14:82:c3:2f:c2:fa:92:8c:01:cc:5d:11:de:86:2b:
ce:09:1b:33:76:be:94:c3:54:e7:fa:5c:87:2e:0a:35:00:77:
d5:fb:01:f5:c9:99:ec:c6:03:ab:b7:55:7a:3f:5e:9f:b3:30:
2e:eb:ba:8e:73:42:1b:ab:ab:ff:c0:94:15:3c:c6:10:01:95:
38:48:73:f0:af:83:b5:69:64:11:64:72:da:7f:36:94:2f:7e:
22:34:0d:a8:93:5c:3d:ca:6a:a8:8b:54:ff:93:82:5b:3f:ca:
09:94:7f:bc:2e:86:eb:45:51:e2:25:5f:74:0d:53:f3:bd:ff:
e8:0d:fc:93:52:87:d2:3d:3e:6d:6e:a5:74:ca:bd:8a:35:df:
06:3f:15:cd:fc:53:42:72:8a:b3:c5:ff:10:40:5a:a1:5a:f0:
b9:ba:23:b1:30:6d:fb:6b:e2:ba:04:4f:ec:e9:4d:87:39:f6:
db:bc:21:94:00:96:38:d4:14:09:37:97:af:e7:67:44:a1:8a:
73:48:16:05
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTdGREIxMTAvBgNVBAUTKEUwMDI1QkY5MzJFNzE2RTFBMUY4QUY5MDEwMjExQzQx
MTA4NEZDOUQwHhcNMjUxMjI0MjIxOTUxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTRjNjcwNy02YmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq98Z4CS2Eykj0ACMC+4Q7n9pXng/EonbMXO5nFD+N0TI0R/u/XeazHakYgK2
BXgD3J18iDY3ldqZbRBfW09ag5/DjhFGnNjuUtTJWL014UHEN/FEBU2q3XJKC2nC
VIinHUJfpUG+r590tP+T/0BmZr+0y/46893slqVqNpMgtx166kakH91S+Bfn78hb
87Dm/JYBYAvDFb2vMNo0oEQT/yxO4Yzd2zIHbeDBO0UShng0DpZGRZZv33fEgv6s
jgIsAx8ypbxojzNSZubvRsAVIPYvwGZl+Y8kgXfjKiQGLnHG27SMOujU34BAzYfo
YUUDpbVVsurhRd+nWSwGTva2qQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCmtql1B
HdDsJBrJfqiJHqpKMQVlMB8GA1UdIwQYMBaAFOACW/ky5xbhofivkBAhHEEQhPyd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZEQi82NTdFNDA3NERB
MzYxMUVCODRFNkEzNDlDNEY5QUUwMi80QUpiLVRMbkZ1R2gtSy1RRUNFY1FSQ0Vf
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRBSmItVExuRnVHaC1LLVFFQ0VjUVJDRV9KMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTdGREIvNjU3RTQwNzREQTM2MTFFQjg0RTZBMzQ5QzRGOUFFMDIvMEExRkFDNDA1
QkIyMTFFRUFEMDZCMjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALKs4gwDQYJKoZIhvcNAQELBQADggEBAFkk5wKSsQ6qd8lA
hc14pWqtXnX2DTosBTOtM2rXeJT0oQgdE0E125q7ug9Exi058/mODm0ng4lu8xSC
wy/C+pKMAcxdEd6GK84JGzN2vpTDVOf6XIcuCjUAd9X7AfXJmezGA6u3VXo/Xp+z
MC7ruo5zQhurq//AlBU8xhABlThIc/Cvg7VpZBFkctp/NpQvfiI0DaiTXD3KaqiL
VP+Tgls/ygmUf7wuhutFUeIlX3QNU/O9/+gN/JNSh9I9Pm1upXTKvYo13wY/Fc38
U0JyirPF/xBAWqFa8Lm6I7Ewbftr4roET+zpTYc59tu8IZQAljjUFAk3l6/nZ0Sh
inNIFgU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:59 2026 by rpki-client