This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/73D3A6E0F72011EA8776EC28C4F9AE02.roa
File: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (raw, json)
Hash identifier: EgzF4RdbUeBvjesKc59wR9UVO4rx0k2Sq5JHzQFu9tU=
Subject key identifier: 7A:24:CE:1D:E1:CC:60:C3:58:84:B9:06:B8:6C:0F:6D:8D:4D:0B:70
Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial: 0825
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/73D3A6E0F72011EA8776EC28C4F9AE02.roa
Signing time: Wed 26 Nov 2025 20:11:40 +0000
ROA not before: Wed 26 Nov 2025 20:11:40 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139731
IP address blocks: 103.144.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Validity
Not Before: Nov 26 20:11:40 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69275efb-c590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:6b:cf:86:45:42:c3:99:86:1b:05:0f:02:
0e:58:17:53:50:f0:fa:b1:e8:77:55:8c:bd:5a:d0:
b4:77:0a:f4:92:48:2b:16:62:1c:f2:6d:ba:4c:ac:
fe:b1:80:f5:48:43:77:e8:fb:6d:60:a4:ad:ee:05:
a6:cb:69:f6:26:8b:61:fc:d9:f3:74:3b:87:91:4f:
61:58:a1:c0:cb:f4:39:4f:73:3a:0d:db:d1:56:27:
93:8a:23:e1:6c:fc:16:89:0d:5e:f3:37:6a:3f:48:
e4:a1:79:6f:66:67:40:1e:31:fc:c7:67:de:6e:2a:
2f:e1:fa:f1:48:8c:25:e6:84:73:3e:94:52:84:f0:
d9:35:63:b6:49:e5:d9:e4:5b:64:35:cf:55:60:60:
40:4c:ce:a1:b6:f5:58:86:4f:96:00:56:cc:5d:6d:
da:64:05:ca:9b:51:6d:68:51:58:d8:39:03:59:9f:
c9:59:b2:43:17:0a:c6:20:4e:4a:c8:ae:64:b1:20:
a9:c2:ab:36:b1:14:5c:40:b8:54:31:2e:26:3a:82:
02:c5:2f:f9:c9:30:f1:03:47:93:f1:88:36:0e:c4:
ca:50:b7:20:f0:af:a5:c7:46:e7:41:c1:06:cc:25:
02:6d:47:fc:5f:c1:7e:f9:77:a4:32:a6:14:42:57:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:24:CE:1D:E1:CC:60:C3:58:84:B9:06:B8:6C:0F:6D:8D:4D:0B:70
X509v3 Authority Key Identifier:
keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/73D3A6E0F72011EA8776EC28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
47:65:fb:61:c7:29:2b:ca:41:e0:59:3c:8b:04:99:5f:2e:fd:
f1:65:25:c8:06:7e:a2:5c:33:6f:ba:be:0b:c8:a6:d7:9a:82:
12:69:cf:b5:bd:5c:22:f5:09:6f:fb:24:1f:0c:ee:df:c4:f5:
4e:51:76:b2:f8:9c:a1:12:4f:0a:8a:f9:cd:28:8e:16:9f:18:
ba:d7:d6:2d:fa:80:00:73:6e:5d:eb:b6:95:d8:1d:c6:7c:db:
52:40:4e:a9:02:64:5e:95:5a:b1:d1:c9:b8:05:4d:53:26:ac:
b6:cb:12:f5:db:ec:f5:9a:47:36:1d:ae:d8:3c:95:7c:4e:0c:
42:f0:5c:dc:27:24:a4:13:77:ef:d2:8f:ea:2c:e7:bd:4f:ac:
b8:42:47:c3:60:d0:3d:fb:90:12:66:0c:70:16:cf:66:a4:da:
c5:29:b7:da:2c:7e:9d:1e:ae:a4:c3:07:ee:a9:c3:42:91:e1:
49:e2:42:29:b4:4c:6a:8a:bd:99:03:3f:4b:0f:0a:7e:ac:7c:
2f:b8:19:f4:26:15:b3:ea:17:32:43:df:4d:64:9d:64:d0:d4:
46:f9:c2:0a:da:7b:d5:89:f5:e5:e2:65:a3:9d:71:f3:a9:dd:
31:86:41:f7:f2:54:13:f0:2c:e0:27:c6:f5:4f:60:7c:7f:68:
46:b7:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:08:05 2025 by rpki-client