This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/42D62828962711F0B74FEE0CC4F9AE02.roa
File: 42D62828962711F0B74FEE0CC4F9AE02.roa (raw, json)
Hash identifier: sOFNuw5sW5kqAzcrxtAYzYea6PRb3ZLUqxOeG9XFSaA=
Subject key identifier: 17:A9:93:75:9F:56:D4:89:27:39:48:C3:53:BD:2A:C9:28:37:5C:13
Certificate issuer: /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Certificate serial: BC
Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/42D62828962711F0B74FEE0CC4F9AE02.roa
Signing time: Thu 15 Jan 2026 06:24:26 +0000
ROA not before: Thu 15 Jan 2026 06:24:26 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153523
IP address blocks: 2001:df4:e940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Validity
Not Before: Jan 15 06:24:26 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6968881a-e751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:74:16:6c:0f:00:31:b7:f9:ed:7c:66:c5:40:
86:81:e7:8e:45:ce:22:e4:bf:5b:65:0a:2f:1a:d9:
2a:de:53:bb:f4:60:63:52:4c:2e:d1:ac:0f:ce:ae:
3a:70:01:44:f5:4f:77:82:76:ee:90:9b:d5:af:43:
fa:e9:00:4c:50:6d:f4:0f:e6:47:5b:74:d4:e8:1d:
ce:c3:5e:29:be:7d:13:f8:5b:95:d3:79:55:b8:7b:
a8:b2:c5:ec:5f:e3:58:eb:41:1c:e2:72:52:e1:5c:
0c:df:d4:a2:73:7d:fc:ad:40:66:4e:87:01:2b:18:
28:a9:29:a9:26:1c:35:c2:a9:5b:aa:c9:06:a4:d6:
a5:7a:1f:30:39:55:8f:20:5f:3f:ea:10:6e:99:6f:
89:e2:0c:d8:6b:09:59:f0:03:c0:0e:3a:40:10:13:
ea:86:f3:b8:da:12:98:00:f0:93:cd:70:db:b3:ed:
41:9c:fc:ee:bc:aa:f7:3b:75:7b:aa:7a:dd:16:73:
d6:e3:df:3e:e3:af:14:43:a4:2d:ff:25:11:13:8c:
42:6a:27:54:65:1c:b9:5a:2d:49:03:08:16:88:41:
4b:49:af:87:fd:9c:b9:7e:e6:e4:c1:13:6b:0a:9f:
59:8d:c5:70:09:84:79:b1:0a:1f:9b:3c:cd:35:9f:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A9:93:75:9F:56:D4:89:27:39:48:C3:53:BD:2A:C9:28:37:5C:13
X509v3 Authority Key Identifier:
keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/42D62828962711F0B74FEE0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:e940::/48
Signature Algorithm: sha256WithRSAEncryption
c6:08:de:49:c5:11:bf:a5:20:ef:82:af:1d:78:d6:26:be:2f:
92:ac:67:d8:9d:cb:e3:05:b7:2c:ba:33:38:7c:a0:07:29:a0:
16:88:27:6c:85:56:cc:e1:7d:64:93:2d:91:0a:73:f2:fe:22:
2a:c0:9c:2b:53:42:8c:ef:37:f7:ac:b6:da:2c:2c:f2:75:5a:
de:cc:42:b5:a4:25:f1:94:4b:4e:75:cb:4d:19:68:d4:83:9b:
fb:9d:cf:67:8d:ba:93:d3:b9:4d:a1:74:0e:b6:ec:ce:de:f6:
c2:52:78:29:86:cb:53:e3:cd:62:70:da:55:c5:8d:e8:c8:04:
23:3d:a4:3e:28:2e:dd:f3:4f:d8:91:4b:3f:72:05:4e:f9:7d:
a8:1e:7d:89:a7:7f:0c:11:6d:40:c7:f7:b7:b3:62:16:c6:5a:
3f:77:b4:a9:68:d9:03:8b:a2:22:e0:24:15:92:69:f3:9f:80:
92:41:1d:74:ff:75:17:78:49:00:de:10:b9:99:2c:6d:af:b9:
36:95:40:21:6e:2d:d5:d0:06:38:84:df:7b:30:2c:96:ec:96:
5b:40:6c:fc:aa:c1:38:15:6d:16:7b:bc:e3:16:63:cf:64:ae:
f4:e7:52:b1:a8:40:15:55:76:82:84:40:67:83:36:59:ec:ff:
8b:27:63:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:34 2026 by rpki-client