This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/18C1AED0ABD111F0A1D84812C4F9AE02.roa
File: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (raw, json)
Hash identifier: LpfiiZBp6ZqPz+RAq9RYXP6EPKlAVKwF2M7MPrOOMO0=
Subject key identifier: 6A:3C:47:E3:BB:B7:81:94:94:4D:E7:1B:6A:EF:16:F7:F6:19:4A:C7
Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Certificate serial: FC
Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/18C1AED0ABD111F0A1D84812C4F9AE02.roa
Signing time: Thu 27 Nov 2025 03:21:58 +0000
ROA not before: Thu 27 Nov 2025 03:21:58 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 26658
IP address blocks: 103.198.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A
Validity
Not Before: Nov 27 03:21:58 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6927c3d6-0a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:7a:bf:72:46:f5:ad:29:c0:46:15:94:d7:
5f:a3:a1:4d:47:c9:05:53:68:20:4c:bd:d9:dc:5c:
ef:87:54:21:96:47:8e:53:6f:6a:70:53:53:16:00:
9d:e6:ea:ed:18:4b:a7:e5:0c:8a:ab:d6:4a:15:ae:
f1:fc:1a:14:dc:27:56:1a:2b:05:e1:e1:de:9e:53:
48:23:be:48:64:73:60:99:90:75:1a:09:ea:90:b2:
b4:e3:e2:2b:66:7d:22:36:77:db:87:37:53:d9:a8:
29:8e:8d:88:3c:89:23:db:65:52:57:83:9f:b4:f5:
b2:76:77:ec:a4:48:10:7a:1f:2b:3a:6c:1c:62:28:
96:02:78:8a:70:2c:ce:0e:1f:48:49:6a:a2:7c:b1:
6a:fa:b6:e9:dc:1d:a3:a3:bf:e2:56:f4:2c:da:3e:
05:61:af:00:4e:c3:c7:0e:57:00:d9:53:d4:6a:05:
f6:76:05:7b:27:e4:18:1d:50:d7:bf:0f:3f:8e:98:
f1:bf:1c:d9:03:16:d5:00:41:df:a3:16:e9:11:dd:
b0:f4:f7:03:da:bd:c9:8d:6f:9d:13:89:fb:2c:16:
e6:8a:59:c8:96:19:a0:00:57:a3:a0:35:49:ee:16:
f9:59:28:5b:31:6c:01:74:61:8c:d8:7d:ad:e5:56:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3C:47:E3:BB:B7:81:94:94:4D:E7:1B:6A:EF:16:F7:F6:19:4A:C7
X509v3 Authority Key Identifier:
keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/18C1AED0ABD111F0A1D84812C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.204.0/22
Signature Algorithm: sha256WithRSAEncryption
28:4c:06:83:a0:03:9e:e9:c6:52:f0:5b:56:fb:92:04:82:7e:
e6:c6:0d:47:8e:16:b1:88:ec:b8:53:56:ed:a8:d0:32:14:c5:
25:90:78:43:89:a7:50:c9:43:6e:96:17:49:01:d4:dd:7b:62:
9f:79:c3:49:60:78:32:7b:55:5c:3f:94:95:b4:62:9f:58:b5:
c2:95:ac:01:7b:46:df:48:c9:ad:12:ac:0f:69:93:bc:71:3a:
c8:d7:23:3f:a7:5b:6d:52:df:45:26:dc:26:d9:24:45:48:37:
bc:1d:7d:67:31:79:07:a3:3d:b5:3b:ba:37:c1:d9:fc:56:7a:
98:cb:0c:8a:21:55:66:2c:b5:93:61:37:bc:e0:bd:c2:a8:0b:
81:ba:31:08:4f:6f:4f:f0:ac:b5:ef:38:1d:32:13:57:4c:84:
af:96:1c:66:aa:23:6d:1f:95:e6:99:ba:c7:20:22:7e:78:dc:
96:ca:16:98:a9:b3:48:ef:fd:1e:ac:ed:73:b3:3e:11:1f:6e:
1b:0a:5a:f7:2c:62:44:7e:9f:e6:8f:b3:ba:48:aa:e9:13:dc:
96:f1:f5:3f:09:7b:72:93:9a:c0:1c:50:8a:5f:11:5c:42:19:
9d:53:38:9f:fc:91:18:97:84:2a:e3:c9:f9:10:f8:f0:2f:c7:
77:c7:ad:39
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC
NzZDMUQyMUEwHhcNMjUxMTI3MDMyMTU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3YzNkNi0wYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApbB6v3JG9a0pwEYVlNdfo6FNR8kFU2ggTL3Z3Fzvh1QhlkeOU29qcFNTFgCd
5urtGEun5QyKq9ZKFa7x/BoU3CdWGisF4eHenlNII75IZHNgmZB1GgnqkLK04+Ir
Zn0iNnfbhzdT2agpjo2IPIkj22VSV4OftPWydnfspEgQeh8rOmwcYiiWAniKcCzO
Dh9ISWqifLFq+rbp3B2jo7/iVvQs2j4FYa8ATsPHDlcA2VPUagX2dgV7J+QYHVDX
vw8/jpjxvxzZAxbVAEHfoxbpEd2w9PcD2r3JjW+dE4n7LBbmilnIlhmgAFejoDVJ
7hb5WShbMWwBdGGM2H2t5VaY/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGo8R+O7
t4GUlE3nG2rvFvf2GUrHMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB
RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTQ2OTAvNDA5Qzk3MEE1QUUwMTFFRjg1ODI3MDdGQzRGOUFFMDIvMThDMUFFRDBB
QkQxMTFGMEExRDg0ODEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnxswwDQYJKoZIhvcNAQELBQADggEBAChMBoOgA57pxlLw
W1b7kgSCfubGDUeOFrGI7LhTVu2o0DIUxSWQeEOJp1DJQ26WF0kB1N17Yp95w0lg
eDJ7VVw/lJW0Yp9YtcKVrAF7Rt9Iya0SrA9pk7xxOsjXIz+nW21S30Um3CbZJEVI
N7wdfWcxeQejPbU7ujfB2fxWepjLDIohVWYstZNhN7zgvcKoC4G6MQhPb0/wrLXv
OB0yE1dMhK+WHGaqI20fleaZuscgIn543JbKFpips0jv/R6s7XOzPhEfbhsKWvcs
YkR+n+aPs7pIqukT3Jbx9T8Je3KTmsAcUIpfEVxCGZ1TOJ/8kRiXhCrjyfkQ+PAv
x3fHrTk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:06:25 2025 by rpki-client