This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/57D28CCA853E11EB9D9E2D39C4F9AE02.roa
File: 57D28CCA853E11EB9D9E2D39C4F9AE02.roa (raw, json)
Hash identifier: iKn5TfguO8Mhc7Q+khdM2Gs5+kk+EBJN5sb5yyLHen0=
Subject key identifier: EE:3C:EB:E0:DE:1D:A4:06:FE:27:B0:77:39:18:54:84:3F:B9:2C:0B
Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial: 06C1
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/57D28CCA853E11EB9D9E2D39C4F9AE02.roa
Signing time: Sat 08 Nov 2025 21:13:06 +0000
ROA not before: Sat 08 Nov 2025 21:13:06 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 1221
IP address blocks: 103.198.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1729 (0x6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Validity
Not Before: Nov 8 21:13:06 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690fb261-0783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:c1:0c:68:ff:09:69:9e:83:79:c9:10:75:
06:7e:2e:3f:c8:8e:cf:54:17:1a:ce:aa:40:6a:da:
22:25:8f:0a:ea:bd:4b:a8:d6:a0:3f:84:1d:e0:8e:
90:13:2e:be:e8:84:bf:09:36:89:a0:c5:74:68:dc:
f4:c3:9a:42:89:d7:b6:04:d0:64:27:e4:fd:d6:9b:
60:24:11:a0:5a:8c:af:a2:49:2c:2a:b7:2b:af:25:
68:25:35:91:9b:74:21:0c:2e:02:75:da:ce:b2:c1:
08:50:0d:4f:09:e8:32:04:2f:84:ff:8f:cc:7a:fc:
13:04:ad:34:6e:46:37:34:32:8f:77:ae:62:ad:8f:
2d:54:40:ac:60:48:8a:4a:95:71:94:98:47:8c:44:
1f:07:2a:ac:d7:b1:74:24:c5:18:ba:ae:80:33:71:
42:68:71:ea:0e:6b:57:9b:55:be:b9:a7:69:53:54:
03:ef:a3:8d:d5:4b:90:fb:de:14:58:44:4a:05:49:
c0:1b:4f:51:3a:c4:b2:cc:ed:32:59:f0:19:74:79:
d6:31:36:dc:a4:f3:f2:28:ad:78:fa:19:e5:06:d4:
20:18:f5:c2:d2:61:39:84:54:b7:2e:4f:11:a2:6f:
57:af:be:89:53:7c:a2:f7:54:c8:44:cb:f4:f1:6c:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3C:EB:E0:DE:1D:A4:06:FE:27:B0:77:39:18:54:84:3F:B9:2C:0B
X509v3 Authority Key Identifier:
keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/57D28CCA853E11EB9D9E2D39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.92.0/24
Signature Algorithm: sha256WithRSAEncryption
63:1e:bf:75:c4:e2:56:bd:db:b6:a2:a7:d1:01:f2:4e:5f:1a:
cc:bd:52:0d:14:00:7e:04:b1:b2:b9:68:11:d0:c1:49:01:74:
c5:61:d3:19:9e:55:62:a3:16:1a:4d:c6:3a:bc:5a:c4:10:68:
2b:e4:29:b3:38:96:5d:70:62:b8:8e:45:37:7f:77:a8:90:28:
99:d1:1c:dd:b8:07:16:d7:3a:7f:7d:a6:12:65:4e:29:1f:3f:
07:39:01:cf:b3:78:e9:40:dd:0e:32:09:5a:03:f9:84:49:d7:
37:89:fc:90:56:67:06:bb:66:30:0f:54:3a:75:c6:6d:8b:b0:
dd:2f:27:6a:1a:4f:de:cd:7c:b0:6f:ce:e6:63:fe:ae:7a:ed:
67:a8:eb:29:18:38:07:a2:94:b8:82:c4:65:08:97:67:72:da:
3f:6a:c3:c1:f2:13:84:85:e5:16:8f:39:80:2a:79:c3:f0:b1:
b1:45:5f:64:b9:76:d8:a5:fc:67:56:5e:c0:b8:6d:f5:0f:31:
6a:78:0c:bb:95:4f:4b:4b:a5:74:9a:71:60:e9:10:08:05:7f:
43:be:61:3b:05:4d:5e:c6:ed:46:03:89:4a:3a:a2:2b:75:85:
39:5a:45:e0:06:94:3e:e3:48:32:83:05:a0:44:34:8d:6a:a0:
00:83:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:14:05 2025 by rpki-client