This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/094ECC9A9DB311EEA5CE2852C4F9AE02.roa
File: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (raw, json)
Hash identifier: Tt5QEGk9H3QguHqaRgkxIgqMFYCotd2Vf9fW+VmHipQ=
Subject key identifier: 1A:B8:37:FD:2A:AD:89:4E:96:D9:9A:75:46:68:C3:CC:50:66:51:A4
Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Certificate serial: 026A
Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/094ECC9A9DB311EEA5CE2852C4F9AE02.roa
Signing time: Thu 27 Nov 2025 00:17:47 +0000
ROA not before: Thu 27 Nov 2025 00:17:47 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132204
IP address blocks: 206.131.192.0/24 maxlen: 24
206.131.199.0/24 maxlen: 24
206.131.200.0/24 maxlen: 24
206.131.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE
Validity
Not Before: Nov 27 00:17:47 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692798ab-d0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:51:4e:73:39:18:43:bf:e2:3a:fd:ab:32:
7b:a8:ab:e9:f6:43:82:7d:cb:7b:3a:73:ba:98:31:
b3:d9:33:dd:d9:73:39:64:8a:92:5b:2a:21:83:95:
8b:63:fd:ab:bf:04:ed:8b:58:70:6e:f1:12:65:02:
15:ed:70:d3:0b:92:97:7d:3f:f1:d6:5b:ef:13:0d:
8c:f2:6d:7f:00:b6:83:a3:61:e9:f8:1c:f1:68:83:
26:9c:98:3b:b7:6f:3a:9e:0e:b5:c8:e5:b4:10:c6:
11:12:37:b7:2a:0c:be:1b:4b:e6:9f:08:17:26:25:
7e:5c:15:e0:39:52:be:2e:14:12:3c:02:a6:72:b4:
1d:28:ab:c9:ad:a8:d6:27:14:3c:ed:c9:d2:07:62:
03:3f:19:74:af:4f:e9:8a:98:20:f6:98:63:55:81:
38:cb:27:fc:30:73:f9:d7:4b:f7:01:2f:e3:77:be:
8d:79:30:29:4a:9b:3e:58:e9:12:d3:86:c6:43:3f:
77:78:b9:c4:1e:6c:12:24:c7:1e:8d:93:97:d4:77:
87:95:b8:43:2a:53:08:f6:ac:6b:71:25:8a:5d:28:
07:55:f0:ef:7e:5e:07:ad:c8:34:e0:11:58:dc:96:
cb:8d:4d:da:b0:1c:3b:50:fd:31:1d:d0:7f:aa:24:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B8:37:FD:2A:AD:89:4E:96:D9:9A:75:46:68:C3:CC:50:66:51:A4
X509v3 Authority Key Identifier:
keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/094ECC9A9DB311EEA5CE2852C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
206.131.192.0/24
206.131.199.0-206.131.201.255
Signature Algorithm: sha256WithRSAEncryption
62:b0:62:1b:03:2f:a6:6c:7d:c5:2f:68:28:f4:92:ec:10:bf:
a4:4b:e1:a3:6f:68:3c:19:bf:c4:e3:61:92:dc:0d:d0:2d:9d:
9d:ae:50:bf:21:05:fb:c0:9e:99:0e:2f:d3:5d:ac:03:3f:f8:
4b:5b:03:62:ec:cc:a7:dc:9c:dd:3b:eb:11:c3:de:24:ac:09:
90:11:73:f7:5f:e6:60:b0:5e:1b:e5:33:6d:a6:51:4a:d3:f7:
ce:5d:93:8b:6c:9d:6e:32:35:eb:cb:76:2e:db:e8:74:b2:b6:
5b:22:f8:ed:44:52:03:28:d2:75:e2:99:19:94:26:c1:4d:26:
4c:08:cf:80:7a:ea:4c:7a:fb:f6:ef:88:d8:20:39:66:ea:b8:
3e:a2:65:1e:15:81:71:a0:32:55:13:b5:2b:45:76:92:1c:53:
b2:2b:30:91:80:de:20:72:3d:e3:ba:0e:b7:ec:9f:7b:15:be:
a4:9f:c4:4e:a0:82:91:ca:6d:9d:d5:d5:b9:07:89:dc:06:de:
a3:76:8b:49:03:eb:9f:01:f3:26:4a:9e:7a:af:fb:e2:82:8c:
4d:11:f5:02:15:5a:80:00:b6:b6:8f:82:bf:c6:17:c4:1b:31:
a6:0a:a9:63:62:f1:15:90:ff:e8:5b:58:87:20:2b:96:e3:c5:
eb:14:16:dd
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1
NjlFRUUzQ0UwHhcNMjUxMTI3MDAxNzQ3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3OThhYi1kMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsxRTnM5GEO/4jr9qzJ7qKvp9kOCfct7OnO6mDGz2TPd2XM5ZIqSWyohg5WL
Y/2rvwTti1hwbvESZQIV7XDTC5KXfT/x1lvvEw2M8m1/ALaDo2Hp+BzxaIMmnJg7
t286ng61yOW0EMYREje3Kgy+G0vmnwgXJiV+XBXgOVK+LhQSPAKmcrQdKKvJrajW
JxQ87cnSB2IDPxl0r0/pipgg9phjVYE4yyf8MHP510v3AS/jd76NeTApSps+WOkS
04bGQz93eLnEHmwSJMcejZOX1HeHlbhDKlMI9qxrcSWKXSgHVfDvfl4Hrcg04BFY
3JbLjU3asBw7UP0xHdB/qiTZlwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFBq4N/0q
rYlOltmadUZow8xQZlGkMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2
MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OURDNzQvREEyMjQwRTY0NjI5MTFFREFFNzhCMjM1QzRGOUFFMDIvMDk0RUNDOUE5
REIzMTFFRUE1Q0UyODUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQDBADOg8AwDAMEAM6DxwMEAc6DyDANBgkqhkiG9w0BAQsFAAOC
AQEAYrBiGwMvpmx9xS9oKPSS7BC/pEvho29oPBm/xONhktwN0C2dna5QvyEF+8Ce
mQ4v012sAz/4S1sDYuzMp9yc3TvrEcPeJKwJkBFz91/mYLBeG+UzbaZRStP3zl2T
i2ydbjI168t2LtvodLK2WyL47URSAyjSdeKZGZQmwU0mTAjPgHrqTHr79u+I2CA5
Zuq4PqJlHhWBcaAyVRO1K0V2khxTsiswkYDeIHI947oOt+yfexW+pJ/ETqCCkcpt
ndXVuQeJ3Abeo3aLSQPrnwHzJkqeeq/74oKMTRH1AhVagAC2to+Cv8YXxBsxpgqp
Y2LxFZD/6FtYhyArluPF6xQW3Q==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:37:47 2025 by rpki-client