This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/D628208AFB7611EC96592431C4F9AE02.roa
File: D628208AFB7611EC96592431C4F9AE02.roa (raw, json)
Hash identifier: cilxCfcXhy+8ANL+q/YrymCSmzhZFJAAzvO1nIcGqK8=
Subject key identifier: E9:7E:DA:3D:EB:ED:ED:37:23:05:64:83:1F:0C:06:69:EF:1E:46:B2
Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284
Certificate serial: 030C
Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/D628208AFB7611EC96592431C4F9AE02.roa
Signing time: Thu 04 Dec 2025 23:38:49 +0000
ROA not before: Thu 04 Dec 2025 23:38:49 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147177
IP address blocks: 103.174.10.0/23 maxlen: 24
2407:f8c0::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl
rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284
Validity
Not Before: Dec 4 23:38:49 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69321b89-2293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:84:7f:68:da:21:8b:b3:f6:de:26:78:d5:
6a:7e:64:8d:65:8b:46:c5:b7:96:ec:c8:1a:8e:25:
56:3d:ee:53:37:bf:69:0b:77:04:4d:7d:a9:5a:94:
7a:d4:61:f7:bf:12:42:a5:89:ed:2a:48:e2:2f:e6:
9a:1d:9b:33:cd:54:fc:c2:fb:31:dc:cd:3d:56:e3:
f3:8c:78:c3:f2:2d:dd:45:24:f9:c2:02:83:b5:b9:
bb:75:b9:98:a3:43:de:cb:e0:7c:6e:d9:4e:3e:c5:
9b:8d:8e:f0:5e:30:aa:3e:45:a1:51:71:ec:70:35:
5d:68:f7:89:09:08:5d:be:80:7f:c1:25:fe:7e:2b:
46:ff:a4:3a:fb:be:8a:79:2a:9c:11:c4:4f:db:f2:
24:fb:d7:cb:1e:2f:5f:0e:b5:0e:73:cd:fd:b3:cb:
b4:5a:cc:50:6c:c2:60:aa:ee:52:58:c2:20:95:fd:
ed:89:a8:20:ac:86:c3:7c:94:f9:c8:ea:46:d9:44:
29:7a:dc:de:5f:ed:a6:56:28:cd:c9:9a:1b:e3:e0:
de:96:d4:13:84:36:1f:7a:ad:d0:9a:3c:01:38:2e:
d1:09:8d:0a:34:2f:ab:e7:ed:59:61:ea:9d:87:36:
1c:87:1e:23:0d:46:fe:79:02:4d:83:91:0b:18:f5:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7E:DA:3D:EB:ED:ED:37:23:05:64:83:1F:0C:06:69:EF:1E:46:B2
X509v3 Authority Key Identifier:
keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/D628208AFB7611EC96592431C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.10.0/23
IPv6:
2407:f8c0::/40
Signature Algorithm: sha256WithRSAEncryption
16:fa:8c:58:0b:2b:ff:09:40:6a:fe:85:48:ef:cb:18:a5:61:
95:4e:07:fc:c6:6d:d0:fa:fa:75:47:88:9f:7c:83:d8:37:85:
38:f7:d7:4e:46:8e:a0:08:c9:da:10:0a:f0:6f:85:06:4b:a5:
d1:4c:5b:30:2d:ee:17:85:f5:41:5c:37:af:e7:8a:62:25:f7:
f4:19:78:98:96:88:19:6b:79:13:0c:23:97:62:a3:e5:e2:91:
ea:68:da:b3:4f:b4:54:b6:e4:71:e8:c4:e1:55:70:b1:69:97:
1b:e1:01:7f:d5:9e:b2:b8:98:80:7c:6b:fd:85:94:72:51:ca:
44:8a:bc:08:a7:65:71:9f:18:d9:d5:16:62:9f:e8:e1:fd:92:
5d:d4:81:a7:21:5e:5a:8e:50:8b:29:09:0b:b8:5a:97:9c:00:
b9:d5:d3:16:a6:4d:ee:74:01:70:de:27:c0:58:96:d3:3b:e6:
8e:f3:ac:6a:32:7f:76:58:69:b2:80:ad:39:e2:44:4b:26:6b:
90:2f:f9:c8:6d:10:71:8d:8b:64:18:4b:e3:8c:a4:f6:d2:6f:
58:c4:14:3c:f7:fe:5b:54:6c:47:56:f2:10:37:5b:38:bc:36:
74:7c:30:cc:7e:22:29:73:88:89:4b:ea:e1:b5:b3:11:c6:77:
ee:ab:0c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:48:55 2025 by rpki-client