This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa
File: 25C80478053A11F08A0D6F31C4F9AE02.roa (raw, json)
Hash identifier: LiUBZoVw3Jt99/4FU3g3RposaxL70t+JGdJUjhZObvY=
Subject key identifier: 8D:6D:B9:C8:AA:FC:56:BB:A3:E7:FA:57:BD:E5:31:B3:F9:60:0A:E0
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: 88
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa
Signing time: Thu 13 Nov 2025 04:52:14 +0000
ROA not before: Thu 13 Nov 2025 04:52:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4764
IP address blocks: 203.23.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84, serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Validity
Not Before: Nov 13 04:52:14 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691563fe-844b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:79:10:b2:15:2a:19:b0:6a:fa:97:e7:63:
a3:31:40:3b:18:1f:73:31:1e:02:1c:dd:e5:af:6b:
c6:e3:57:7d:18:d6:f7:ca:4c:e7:b3:ea:fc:de:d3:
42:09:d6:bb:16:49:07:77:8d:fd:55:39:9e:12:27:
cd:c5:44:5f:8e:b0:2b:61:26:76:65:bd:45:48:87:
e8:ac:09:88:7a:14:6c:d5:a8:00:4c:14:81:1e:1c:
89:36:22:85:23:75:c3:c7:e3:1a:01:da:d4:0e:58:
21:dc:5c:af:6b:c7:0b:99:67:98:e3:f6:84:84:a3:
94:a7:0e:c2:0d:83:1c:d8:ca:81:51:ce:95:ca:ac:
aa:ae:9d:ce:d4:1b:ad:23:6d:51:0e:1a:8b:6e:dd:
fb:0c:26:01:b8:cf:62:07:cb:fe:a4:86:ac:be:80:
33:12:b6:fa:15:05:29:3b:0a:09:bd:23:a4:02:a1:
9c:61:71:d2:55:ec:f9:3c:07:21:6c:08:7b:70:6b:
68:5b:da:c7:78:02:32:1e:42:2f:2e:83:4b:21:a5:
72:c9:26:5f:a5:1c:aa:6b:d0:40:a5:1f:b9:7d:07:
5f:72:81:26:a6:03:5f:4b:c9:b7:8b:77:e4:0f:3f:
5d:22:35:18:52:91:9e:6c:84:6d:7e:0f:68:28:4a:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:B9:C8:AA:FC:56:BB:A3:E7:FA:57:BD:E5:31:B3:F9:60:0A:E0
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/25C80478053A11F08A0D6F31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.23.57.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d4:33:a1:2b:b0:30:d6:bc:64:c8:d6:44:a6:be:90:1e:b7:
0f:46:93:fe:12:d8:d3:a8:0c:5f:2b:4d:35:07:75:0f:37:b3:
84:ea:b5:d8:8e:fa:ff:c1:77:6a:75:01:a6:33:a1:71:72:e6:
af:80:3e:99:88:d2:36:82:d4:6b:1e:f0:88:06:3c:c7:bc:0f:
bf:c6:1a:7f:e1:5b:81:87:ea:aa:15:2e:58:de:e2:b2:98:a8:
06:fb:24:a5:c2:44:a1:cf:d6:28:f7:9a:fa:29:a1:17:90:9f:
13:12:c5:de:f1:79:c5:8e:48:f9:f7:c7:c4:c9:f7:e0:a3:93:
c8:5b:5a:de:72:c6:d2:cf:aa:1d:69:cc:fc:83:f0:86:91:e0:
a0:dd:8f:dc:42:7a:a5:91:ca:93:86:00:35:b2:43:07:22:e1:
6b:77:7b:de:3a:e9:8c:72:87:02:db:e2:22:32:b0:d7:34:1f:
6d:bc:e2:a7:2a:f7:a4:b4:9a:53:1c:dd:c0:3a:5c:b6:db:fb:
7a:fd:50:53:ea:c3:d4:d9:5a:1b:d9:a5:13:99:05:4d:87:9b:
db:fe:f1:9e:f0:e6:92:fa:ff:5c:22:d0:c6:85:11:74:b0:76:
73:d9:67:45:22:50:42:98:4a:80:db:07:01:25:1f:2b:f5:8f:
17:7f:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:00:30 2025 by rpki-client