This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa
File: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (raw, json)
Hash identifier: ww4opZQiRIVmFBO4mjZwE04Iiig3sSAh564SMCvzMW4=
Subject key identifier: FC:54:B1:D6:38:FD:C0:67:04:03:4B:30:1B:D2:F2:E0:FE:64:FE:7C
Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Certificate serial: 039F
Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa
Signing time: Tue 13 Jan 2026 00:20:24 +0000
ROA not before: Tue 13 Jan 2026 00:20:24 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 23477
IP address blocks: 168.153.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:05:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927 (0x39f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B
Validity
Not Before: Jan 13 00:20:24 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69658fc8-a77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:92:96:b7:7a:a1:3c:1e:0d:f0:31:87:26:24:
77:67:fa:23:ae:6d:72:8e:ef:67:cb:24:05:f0:d0:
c0:3c:96:82:6c:e8:1d:65:68:3a:c8:eb:0b:57:4c:
e1:58:66:99:f6:74:e3:74:bc:37:85:8d:19:18:3f:
8a:23:4d:d3:4e:29:23:fd:90:bc:23:56:a6:11:33:
33:c5:9a:05:c9:c0:89:16:e8:e9:19:f4:e3:06:ba:
7f:53:cb:1f:7f:17:a0:26:bf:05:77:a1:51:6b:66:
d8:08:c3:cb:45:4a:90:15:fd:8a:e6:72:8d:a2:ae:
07:08:45:e6:34:f2:25:c6:2d:33:50:74:df:3c:1e:
fa:f4:2f:fd:7c:21:e4:c2:31:5a:10:12:3e:20:7c:
26:fc:f3:8a:f3:a5:6a:6e:6b:28:5b:81:3c:c4:f1:
e1:42:fa:c5:75:32:89:9c:76:e7:8e:e3:9c:ad:e0:
39:41:8b:45:e3:9a:cb:9c:d9:c3:23:a6:38:5d:d7:
d1:ae:5e:31:42:5c:56:9f:cd:69:2c:69:8d:f1:b2:
c4:0e:e6:ec:a8:dc:bf:b0:00:96:9e:db:df:74:35:
c4:9f:51:8e:0e:9f:3a:f0:b6:63:18:1f:a9:30:6b:
14:b3:53:b7:ef:ba:c7:6e:c8:6e:73:89:07:d8:88:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:B1:D6:38:FD:C0:67:04:03:4B:30:1B:D2:F2:E0:FE:64:FE:7C
X509v3 Authority Key Identifier:
keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.153.100.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b3:73:88:55:e8:16:84:5d:7f:53:09:64:a2:54:47:39:93:
94:7e:c5:65:0f:a1:e9:69:19:7b:db:52:21:a5:bd:d7:32:33:
a3:43:6b:31:a1:74:ab:7d:29:d0:db:4e:aa:b6:54:6d:9f:01:
14:82:25:3a:ca:52:ec:26:5e:f8:d4:f1:2f:70:13:6d:b1:4c:
8b:e5:bb:de:42:cc:ff:b8:4b:9c:09:5b:17:55:c4:f8:d8:05:
ad:03:06:91:28:c5:cb:39:b6:15:7a:a5:33:d1:e5:82:8a:a4:
71:a1:df:6c:4e:a7:5a:94:34:20:16:2f:19:ad:ec:c2:db:73:
a1:20:6a:5f:fb:57:16:e6:59:e4:e4:26:55:e2:57:ce:d8:e1:
b5:fd:f0:c2:58:d4:38:66:f7:f9:a9:21:c8:2a:d7:71:86:22:
89:9f:78:32:4c:b5:c5:c6:a7:8e:11:55:80:be:aa:45:25:4b:
59:6e:12:2c:b5:c6:b6:bf:0c:57:94:80:53:38:de:5f:9e:9b:
ee:99:c6:ed:4f:17:08:ff:e9:70:11:a9:77:b8:15:50:09:e6:
5d:2e:7d:fc:b9:cf:e4:ee:ac:35:cc:5c:7a:26:a6:6f:ef:6e:
b3:ea:3f:1c:04:f3:c2:43:a2:8f:ea:4e:eb:fd:09:29:f8:ca:
91:3b:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:42:32 2026 by rpki-client