This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/63EC7E9476C211EE9FDED166C4F9AE02.roa
File: 63EC7E9476C211EE9FDED166C4F9AE02.roa (raw, json)
Hash identifier: 5kehy6INc2ToLeOi19J6b3LvAIXj1iv4FwMeLT93MH8=
Subject key identifier: 90:CF:CF:A9:47:04:54:C6:4F:AA:1A:08:AE:E7:11:31:8A:EA:48:C0
Certificate issuer: /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
Certificate serial: 018B
Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/63EC7E9476C211EE9FDED166C4F9AE02.roa
Signing time: Sat 29 Nov 2025 01:59:37 +0000
ROA not before: Sat 29 Nov 2025 01:59:37 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7387
IP address blocks: 103.255.192.0/23 maxlen: 24
2001:df3:12c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl
rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91164FE, serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
Validity
Not Before: Nov 29 01:59:37 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692a5389-d78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:70:73:72:96:60:48:96:ec:73:68:24:2f:
db:8a:01:21:c4:4c:89:4a:6e:ed:76:b4:ae:bf:61:
df:f6:ae:85:61:45:39:8a:ec:95:54:06:5e:d5:e3:
b5:7e:58:e8:3e:54:f9:75:57:d5:ad:e5:91:28:73:
71:cb:7a:14:7e:30:3c:33:a5:37:68:9a:13:11:2d:
c9:87:48:53:7d:56:1b:7d:4b:1c:03:a2:16:6b:55:
46:1a:88:fb:2f:81:d5:2f:75:2a:73:36:63:f3:f3:
46:8a:46:50:26:af:53:7a:c7:b9:b0:1f:a5:33:f2:
73:b5:bd:11:14:27:9a:24:2f:c0:6a:a8:d2:83:96:
70:0e:05:e4:78:06:09:12:aa:d5:e7:35:5b:df:03:
d1:f7:5e:c1:b6:02:51:3b:5e:18:d7:5e:13:49:f1:
69:6c:46:f4:ce:ed:ba:d0:d3:e5:14:06:70:80:d3:
54:c4:4d:2c:a9:69:36:c4:0a:f5:35:db:5a:b1:65:
f3:d7:1c:21:8a:8b:08:62:51:d9:c4:a0:6e:f1:84:
67:66:df:80:04:1b:f4:bb:7c:66:2f:be:09:02:fc:
50:8d:fb:64:dc:81:9e:1a:72:f0:bb:70:3f:9b:17:
c4:a0:d7:66:e2:e8:19:f0:90:e6:86:1c:49:1b:0d:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:CF:A9:47:04:54:C6:4F:AA:1A:08:AE:E7:11:31:8A:EA:48:C0
X509v3 Authority Key Identifier:
keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/63EC7E9476C211EE9FDED166C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.192.0/23
IPv6:
2001:df3:12c0::/48
Signature Algorithm: sha256WithRSAEncryption
72:8a:7a:79:42:75:8c:a3:cb:85:23:f4:33:35:e8:6d:23:ee:
49:7a:f6:bf:5b:c7:33:cd:c1:b7:8d:ab:69:b8:02:b4:da:7a:
93:cb:e6:4b:24:04:b9:3d:59:91:4e:98:19:06:3e:2c:2d:3f:
95:f3:f1:7d:ee:b6:28:32:1b:a5:cf:a7:ca:a3:17:dd:3d:96:
7c:38:6e:6f:67:ba:17:02:52:88:f9:07:c8:6f:3c:2f:33:2f:
70:06:57:01:be:90:61:5a:0a:a5:ce:1e:00:ec:7e:56:53:17:
bc:ff:e7:1d:6a:3a:05:e3:9b:a2:d5:13:be:81:a8:09:9c:df:
17:35:9c:00:58:8b:4e:92:2e:45:aa:50:ad:6c:fe:49:e3:f8:
58:f7:1b:75:a6:42:a2:8e:b8:38:71:5d:50:be:fc:02:e7:52:
1c:39:8d:d7:fe:08:e1:bd:1f:c1:00:e1:d4:eb:e5:19:c7:2f:
ce:60:37:c0:30:48:68:8e:8b:d1:0d:52:d7:5a:42:09:d4:04:
56:a0:15:0b:33:14:0e:e3:57:ea:69:6c:2f:bd:d0:4c:09:42:
45:64:20:3a:b9:e7:93:16:a6:d5:1b:3c:19:c1:37:97:43:b6:
52:01:74:87:3b:b3:d4:d5:14:57:12:93:c7:a3:d1:d1:48:73:
0d:b6:c9:83
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY0RkUxMTAvBgNVBAUTKEU2RjA4NkMwNUM1RTA0REQ5NkFFMEU1RkM5MDM5Nzkx
QTM3NTYwRkUwHhcNMjUxMTI5MDE1OTM3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJhNTM4OS1kNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAhwc3KWYEiW7HNoJC/bigEhxEyJSm7tdrSuv2Hf9q6FYUU5iuyVVAZe1eO1
fljoPlT5dVfVreWRKHNxy3oUfjA8M6U3aJoTES3Jh0hTfVYbfUscA6IWa1VGGoj7
L4HVL3UqczZj8/NGikZQJq9Tese5sB+lM/Jztb0RFCeaJC/AaqjSg5ZwDgXkeAYJ
EqrV5zVb3wPR917BtgJRO14Y114TSfFpbEb0zu260NPlFAZwgNNUxE0sqWk2xAr1
NdtasWXz1xwhiosIYlHZxKBu8YRnZt+ABBv0u3xmL74JAvxQjftk3IGeGnLwu3A/
mxfEoNdm4ugZ8JDmhhxJGw2D1QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJDPz6lH
BFTGT6oaCK7nETGK6kjAMB8GA1UdIwQYMBaAFObwhsBcXgTdlq4OX8kDl5GjdWD+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjRGRS9CODI2Q0E4MDc2
QkYxMUVFQjE0RjJENzJDNEY5QUUwMi81dkNHd0Z4ZUJOMldyZzVmeVFPWGthTjFZ
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2Q0d3RnhlQk4yV3JnNWZ5UU9Ya2FOMVlQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY0RkUvQjgyNkNBODA3NkJGMTFFRUIxNEYyRDcyQzRGOUFFMDIvNjNFQzdFOTQ3
NkMyMTFFRTlGREVEMTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFn/8AwDwQCAAIwCQMHACABDfMSwDANBgkqhkiG9w0BAQsF
AAOCAQEAcop6eUJ1jKPLhSP0MzXobSPuSXr2v1vHM83Bt42rabgCtNp6k8vmSyQE
uT1ZkU6YGQY+LC0/lfPxfe62KDIbpc+nyqMX3T2WfDhub2e6FwJSiPkHyG88LzMv
cAZXAb6QYVoKpc4eAOx+VlMXvP/nHWo6BeObotUTvoGoCZzfFzWcAFiLTpIuRapQ
rWz+SeP4WPcbdaZCoo64OHFdUL78AudSHDmN1/4I4b0fwQDh1OvlGccvzmA3wDBI
aI6L0Q1S11pCCdQEVqAVCzMUDuNX6mlsL73QTAlCRWQgOrnnkxam1Rs8GcE3l0O2
UgF0hzuz1NUUVxKTx6PR0UhzDbbJgw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 12:02:55 2025 by rpki-client