This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
File: 42823846037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier: rFCflbUAS4w1rxkJsyec/ty/xMjS3zn6kzJpj1c1YqE=
Subject key identifier: 42:A6:DC:22:3F:65:7E:F4:C0:4C:59:60:D8:09:62:A2:1C:0B:CA:ED
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4F36
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
Signing time: Thu 27 Nov 2025 06:18:44 +0000
ROA not before: Thu 27 Nov 2025 06:18:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 149105
IP address blocks: 103.145.2.0/23 maxlen: 24
103.188.80.0/23 maxlen: 24
220.158.134.0/23 maxlen: 24
2400:8160::/48 maxlen: 48
2405:73c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20278 (0x4f36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Nov 27 06:18:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6927ed44-85a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:45:66:03:d4:a1:46:41:d8:46:73:40:f2:
7b:58:29:ec:8c:cb:da:50:bc:cf:dc:bf:a1:a1:b0:
fd:87:31:ba:a0:70:2d:f7:27:2a:70:8d:68:aa:19:
df:9c:73:b7:ce:c4:dc:ab:de:3b:10:5e:bf:3c:b2:
4e:6a:cb:26:29:2c:d9:70:26:f2:e5:46:43:a0:43:
f0:a5:c4:09:6e:63:2a:b8:d1:6d:73:4d:0e:bf:c4:
5b:13:9e:a4:d2:d6:3c:da:be:19:65:6e:f8:e1:d4:
6f:0d:c8:61:3a:b2:75:95:82:a3:11:72:78:ab:31:
92:1d:aa:7a:e0:15:37:7e:9f:4a:8f:2c:d4:06:af:
50:63:8a:d2:e3:04:a6:5a:31:8e:1e:35:c4:cf:c5:
c2:50:f3:82:81:97:40:44:8b:cb:a3:b8:28:f9:b8:
cf:80:f3:6c:97:c4:74:89:4d:45:da:97:d7:36:68:
3c:1e:1f:9d:17:a3:e2:ff:14:91:1c:9d:08:ca:e2:
f0:45:c1:5d:85:d2:b3:2c:c8:84:02:da:9e:ec:5a:
6a:dd:c3:8d:03:19:87:e7:d3:ed:ad:6b:86:3f:1d:
8f:6a:60:cd:e7:ae:82:8a:2d:44:da:ca:33:b2:37:
52:8a:a7:ee:0b:c2:c0:e3:63:93:06:ab:4e:f6:82:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A6:DC:22:3F:65:7E:F4:C0:4C:59:60:D8:09:62:A2:1C:0B:CA:ED
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.2.0/23
103.188.80.0/23
220.158.134.0/23
IPv6:
2400:8160::/48
2405:73c0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:7c:41:c8:8c:f8:19:16:f0:c5:b3:c8:7a:b6:2f:6d:bf:f6:
47:56:de:43:49:58:f1:f7:23:0f:67:cb:f2:8c:dd:5e:23:76:
32:9d:11:42:d3:bb:33:75:9e:2e:57:8d:05:c2:29:2e:af:9f:
e0:66:4b:58:42:2b:94:76:10:6e:86:99:9b:fa:63:e8:b8:14:
3e:c0:c8:c5:e4:26:37:3b:ae:0e:d3:3f:61:00:fe:67:b3:96:
30:f3:fc:31:66:8e:4b:80:aa:dd:35:b3:88:70:c6:50:84:ba:
fb:f1:6a:40:fa:3b:ac:ca:f5:7c:45:5b:e0:ae:66:37:46:ef:
b0:aa:8e:56:b2:83:c7:49:f8:6e:16:cd:51:e8:62:9b:a3:8e:
f5:b4:76:2a:96:5b:3f:bc:98:25:23:05:36:c6:a5:b5:95:79:
cd:ca:c0:d1:de:51:94:41:07:19:54:17:b6:27:f7:1a:9f:14:
f8:29:d6:02:7c:ef:89:fb:b8:5f:72:1f:0c:6d:cf:fb:99:2b:
c4:29:99:36:36:17:5d:67:5d:74:34:0f:45:aa:1c:f9:dc:3c:
d6:a1:66:91:cb:96:a4:f5:fa:38:c3:0f:ad:02:9a:ad:05:48:
48:4c:8f:6e:6e:71:98:fd:52:fb:2d:68:21:6c:82:02:c7:d4:
ee:b8:36:6f
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgICTzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUxMTI3MDYxODQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3ZWQ0NC04NWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAprBFZgPUoUZB2EZzQPJ7WCnsjMvaULzP3L+hobD9hzG6oHAt9ycqcI1oqhnf
nHO3zsTcq947EF6/PLJOassmKSzZcCby5UZDoEPwpcQJbmMquNFtc00Ov8RbE56k
0tY82r4ZZW744dRvDchhOrJ1lYKjEXJ4qzGSHap64BU3fp9KjyzUBq9QY4rS4wSm
WjGOHjXEz8XCUPOCgZdARIvLo7go+bjPgPNsl8R0iU1F2pfXNmg8Hh+dF6Pi/xSR
HJ0IyuLwRcFdhdKzLMiEAtqe7Fpq3cONAxmH59PtrWuGPx2PamDN566Cii1E2soz
sjdSiqfuC8LA42OTBqtO9oKN1wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFEKm3CI/
ZX70wExZYNgJYqIcC8rtMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDI4MjM4NDYw
Mzc0MTFFRUI2RDVENzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E
NjA0MBgEAgABMBIDBAFnkQIDBAFnvFADBAHcnoYwGAQCAAIwEgMHACQAgWAAAAMH
ACQFc8AAADANBgkqhkiG9w0BAQsFAAOCAQEAHnxByIz4GRbwxbPIerYvbb/2R1be
Q0lY8fcjD2fL8ozdXiN2Mp0RQtO7M3WeLleNBcIpLq+f4GZLWEIrlHYQboaZm/pj
6LgUPsDIxeQmNzuuDtM/YQD+Z7OWMPP8MWaOS4Cq3TWziHDGUIS6+/FqQPo7rMr1
fEVb4K5mN0bvsKqOVrKDx0n4bhbNUehim6OO9bR2KpZbP7yYJSMFNsaltZV5zcrA
0d5RlEEHGVQXtif3Gp8U+CnWAnzvifu4X3IfDG3P+5krxCmZNjYXXWdddDQPRaoc
+dw81qFmkcuWpPX6OMMPrQKarQVISEyPbm5xmP1S+y1oIWyCAsfU7rg2bw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:02:04 2025 by rpki-client