This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/A50FD050DA7911EDB0D3866BC4F9AE02.roa
File: A50FD050DA7911EDB0D3866BC4F9AE02.roa (raw, json)
Hash identifier: g/nswxyJsa+B6IHJZV4vfYf8nast/FctdpxoppJYiCU=
Subject key identifier: 30:2A:CA:BF:CD:29:45:48:0E:E9:C0:F2:73:CB:EF:04:93:19:32:A6
Certificate issuer: /CN=A91613AB/serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Certificate serial: 0249
Authority key identifier: 39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/A50FD050DA7911EDB0D3866BC4F9AE02.roa
Signing time: Tue 02 Dec 2025 08:18:07 +0000
ROA not before: Tue 02 Dec 2025 08:18:07 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150452
IP address blocks: 103.46.184.0/23 maxlen: 24
2400:c620::/32 maxlen: 32
2400:c620:10::/44 maxlen: 48
2400:c620:20::/44 maxlen: 48
2400:c620:30::/44 maxlen: 44
2400:c620:40::/44 maxlen: 44
2400:c620:50::/44 maxlen: 44
2400:c620:60::/44 maxlen: 44
2400:c620:70::/44 maxlen: 44
2400:c620:80::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91613AB, serialNumber=3901AF4A93FEFAAEB879CC9F5994E4E7F01AF838
Validity
Not Before: Dec 2 08:18:07 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=692ea0bf-53a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:42:66:36:01:93:a1:0c:9a:1f:ff:60:6a:
3d:4b:d0:99:9b:9b:57:f9:39:15:13:20:81:be:c9:
88:b1:86:9e:58:22:c3:4c:d7:d9:d9:64:ab:90:66:
08:65:f8:c8:bb:66:82:38:04:6f:55:0b:55:45:cb:
7e:91:a2:ee:a0:33:94:70:a6:97:67:3e:d1:ed:ad:
54:5a:88:9b:af:e8:1d:df:75:75:81:dd:7a:2c:1a:
9e:f0:48:f1:03:bd:10:8d:b6:50:85:8b:2b:7c:c1:
78:89:db:bf:00:0e:2d:73:71:61:bd:d8:0f:fb:a3:
97:66:d0:70:2c:61:34:8b:a3:6d:7a:24:8e:15:ae:
03:0c:c0:80:e7:f2:62:2c:f4:b9:be:48:ce:c0:a7:
02:c9:6b:f7:d8:76:e7:f2:2e:62:53:5b:4f:89:19:
0f:21:be:70:73:35:0a:5b:23:42:8c:8a:0f:bd:a5:
06:67:a2:48:0b:a6:a4:c7:f8:fc:95:bc:1f:2e:79:
0d:b6:ec:73:9e:79:10:72:89:93:ee:10:c5:17:00:
37:57:30:2d:37:f5:f2:80:4f:58:38:b7:e6:96:88:
0e:97:7d:ae:ae:60:2c:db:73:bf:ca:bb:0a:e0:cd:
c4:90:f9:64:f0:a5:c8:02:19:0f:dc:f0:c5:31:79:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2A:CA:BF:CD:29:45:48:0E:E9:C0:F2:73:CB:EF:04:93:19:32:A6
X509v3 Authority Key Identifier:
keyid:39:01:AF:4A:93:FE:FA:AE:B8:79:CC:9F:59:94:E4:E7:F0:1A:F8:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/OQGvSpP--q64ecyfWZTk5_Aa-Dg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OQGvSpP--q64ecyfWZTk5_Aa-Dg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91613AB/9CF7ECDA6F8B11ED8FAE3C11C4F9AE02/A50FD050DA7911EDB0D3866BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.184.0/23
IPv6:
2400:c620::/32
Signature Algorithm: sha256WithRSAEncryption
a1:23:91:c1:42:3f:3e:ff:d3:f1:57:75:97:94:59:af:89:d6:
2d:20:10:51:15:20:2f:6d:4d:19:fe:77:85:1c:22:e1:a8:e2:
fb:09:f2:5a:7f:4d:9d:bd:6f:5c:70:05:3e:6b:9e:f5:b7:6f:
03:87:7a:fc:d5:ad:8e:2e:e6:45:36:db:9a:5f:a6:51:00:26:
66:28:10:e1:4f:ba:44:c8:54:08:ce:cd:65:ab:5b:66:71:a9:
11:99:ef:89:3e:e6:a2:e7:69:08:88:e0:5e:4f:ec:60:30:e4:
1c:dd:50:df:15:9b:02:f6:31:ac:b6:6b:1a:64:af:92:3f:eb:
e3:8d:88:61:be:02:9f:2b:a2:c3:0c:98:95:c2:ad:99:4b:a2:
4b:da:0b:90:a0:f8:1e:a9:16:15:17:08:40:d0:5b:05:d6:03:
b0:3e:54:59:f2:45:94:df:c7:60:cb:c2:c9:49:29:53:d5:1c:
92:92:af:de:a0:cf:38:19:06:56:92:d0:49:30:d8:41:69:43:
21:57:59:b8:86:80:1e:a3:b9:08:81:84:9a:42:34:6d:7d:b3:
e4:74:48:89:86:d2:26:7a:92:ed:bb:2e:d6:f0:27:5e:df:38:
7e:dd:fa:67:5a:63:c9:b4:0c:f4:f1:b0:44:67:9d:14:dd:e6:
0b:35:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:17:24 2025 by rpki-client