This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/146B772C82DC11EA9B13000CC4F9AE02.roa
File: 146B772C82DC11EA9B13000CC4F9AE02.roa (raw, json)
Hash identifier: RaEy/c0RDVPJljVOjzCUx5HkOYe2NH7gDK679iI3lU8=
Subject key identifier: C4:0F:33:DB:06:5B:50:4F:A8:B7:7D:BD:FE:4F:33:03:23:23:DF:EF
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0AD3
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/146B772C82DC11EA9B13000CC4F9AE02.roa
Signing time: Thu 20 Nov 2025 19:10:16 +0000
ROA not before: Thu 20 Nov 2025 19:10:16 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4134
IP address blocks: 183.91.32.0/21 maxlen: 21
183.91.32.0/24 maxlen: 24
183.91.33.0/24 maxlen: 24
183.91.34.0/24 maxlen: 24
183.91.35.0/24 maxlen: 24
183.91.36.0/24 maxlen: 24
183.91.37.0/24 maxlen: 24
183.91.38.0/24 maxlen: 24
183.91.39.0/24 maxlen: 24
183.91.40.0/21 maxlen: 21
183.91.40.0/24 maxlen: 24
183.91.41.0/24 maxlen: 24
183.91.42.0/24 maxlen: 24
183.91.43.0/24 maxlen: 24
183.91.44.0/24 maxlen: 24
183.91.45.0/24 maxlen: 24
183.91.46.0/24 maxlen: 24
183.91.47.0/24 maxlen: 24
183.91.56.0/24 maxlen: 24
2400:9380:8000::/40 maxlen: 48
2400:9380:8100::/40 maxlen: 48
2400:9380:8200::/40 maxlen: 48
2400:9380:8300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2771 (0xad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: Nov 20 19:10:16 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691f6797-ce45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:c9:ef:6b:8a:b2:69:fe:17:e1:c8:d3:06:
b8:da:e9:9b:fd:29:52:20:4f:9f:fb:26:cf:b0:51:
51:c0:a8:1b:42:ac:20:28:b4:62:fd:77:26:74:36:
44:c5:2b:a9:7d:83:33:dd:f7:cc:e6:0e:45:85:1d:
88:7d:ca:a5:4d:c2:6a:2a:45:32:7b:c5:2c:e6:16:
46:76:23:1b:70:fd:cf:ba:c7:52:13:eb:a4:bb:e0:
61:3f:a2:8e:4d:df:dd:20:ef:d3:cf:89:10:da:bb:
95:9a:b6:02:e9:19:7a:10:6e:c7:43:96:ca:51:c9:
96:0c:7b:fe:56:2a:8a:cd:36:9c:1c:c7:74:0b:f0:
23:1e:30:17:bc:a2:24:d7:39:28:d9:72:b1:75:a8:
28:24:9d:3a:6d:0f:f3:ce:9b:c9:0b:02:d3:68:16:
8b:59:f9:2e:18:f9:c4:c7:de:d8:16:1e:61:66:20:
e4:31:e8:f8:5f:cf:c5:6b:6b:f8:94:28:45:87:b9:
80:3e:bb:f4:bd:8e:64:e6:79:05:b5:ab:a6:84:ce:
5f:58:ed:fe:dd:f0:a6:cb:7b:55:13:3f:89:8c:2a:
d3:2a:49:5a:a5:a3:1d:41:23:b1:1c:dc:23:8e:2b:
d4:e7:76:e9:72:48:c1:5e:bc:16:5b:57:62:df:fc:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0F:33:DB:06:5B:50:4F:A8:B7:7D:BD:FE:4F:33:03:23:23:DF:EF
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/146B772C82DC11EA9B13000CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.91.32.0/20
183.91.56.0/24
IPv6:
2400:9380:8000::/38
Signature Algorithm: sha256WithRSAEncryption
87:0d:cf:2a:03:05:39:61:f7:9a:ff:d5:6c:02:d4:de:3a:92:
21:47:3a:70:1a:13:f7:28:22:1c:f2:1f:aa:94:db:1a:79:8e:
1e:19:2a:f9:35:e4:90:d3:2b:43:76:39:f6:14:38:38:2c:5e:
4b:6f:a4:1e:b4:99:7b:48:cb:57:1c:73:e8:37:4c:3b:cf:6c:
f4:d4:ed:b7:b6:0e:9a:7e:14:0d:1f:33:93:ad:ea:a6:f0:89:
cc:39:18:f6:df:d1:81:d4:14:b0:31:c0:ae:42:6e:85:f7:01:
d2:95:c9:f6:cd:26:fe:c9:ab:ae:07:78:7e:a1:87:8a:ca:d1:
09:6f:b6:8b:5b:82:d0:12:3c:5a:b5:61:27:ab:a1:59:92:cc:
1a:4b:d0:0e:48:5d:15:37:d6:b2:8e:95:60:56:13:01:e8:63:
90:b2:ec:d1:ae:10:96:f0:5a:1e:da:8c:78:5a:48:d7:27:c8:
21:bf:03:52:ec:46:30:be:a9:3a:f4:0a:38:95:70:ad:e4:7d:
d9:74:87:bb:22:ef:9c:f8:99:f3:51:6b:b2:90:e8:bc:5e:1b:
88:7a:ac:4c:c8:34:76:21:38:eb:e3:6d:eb:db:4a:67:11:97:
48:fb:98:53:7c:99:2b:52:31:f2:c8:6e:7a:7b:c2:95:1b:86:
5c:1a:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:19:24 2025 by rpki-client