This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/0B2052EA6D0D11EEA65D7522C4F9AE02.roa
File: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (raw, json)
Hash identifier: SQU55xr2Tm/wy7qGKrkrCAG2CiVrozgfMpFuo73ZxSc=
Subject key identifier: F2:73:F2:DD:2A:34:19:D1:67:F2:CC:A5:BB:40:DA:B0:29:ED:B9:86
Certificate issuer: /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Certificate serial: 0193
Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/0B2052EA6D0D11EEA65D7522C4F9AE02.roa
Signing time: Thu 27 Nov 2025 01:49:41 +0000
ROA not before: Thu 27 Nov 2025 01:49:41 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 150335
IP address blocks: 223.130.8.0/23 maxlen: 23
223.130.8.0/24 maxlen: 24
223.130.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0CAE, serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Validity
Not Before: Nov 27 01:49:41 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6927ae35-fb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:6a:fb:4b:33:2a:2e:ec:6c:7a:05:66:1b:
e9:59:19:b5:12:50:3e:4f:99:1c:9e:0c:e4:e8:f5:
92:ae:16:bb:bd:03:4b:eb:07:d5:01:d9:f0:6a:b3:
29:fa:b6:01:2e:6e:e3:e5:5d:1b:13:80:49:f8:6c:
b4:6e:ec:93:7f:f1:ae:93:40:ec:5d:20:f2:2e:a9:
24:c3:bf:2f:07:b3:af:29:85:70:c3:0f:cd:98:52:
8e:13:c3:39:54:bf:6e:a6:80:3e:cb:ab:7b:e1:fd:
48:0a:e7:8c:d2:47:82:33:25:c3:34:f8:14:d4:fa:
bf:3a:ae:3f:cf:8c:b6:57:1a:72:d0:6f:80:d1:09:
dd:7d:9b:4e:c9:2e:29:7d:4e:3d:96:0d:97:a3:9c:
51:11:f3:95:fe:70:3a:07:6b:18:ad:eb:8c:b8:6c:
12:ad:6e:2b:ea:e7:e6:8a:c4:0e:32:13:24:5e:45:
d3:45:6a:b9:0f:25:f4:e8:29:8e:95:ba:f1:fa:cc:
d3:32:d9:d6:7c:4a:bb:61:29:95:a7:b4:22:c2:6a:
81:77:cf:33:ab:5a:72:a3:e8:94:68:40:cd:14:69:
d1:5f:01:56:bd:a8:e7:53:dc:cd:e7:a4:62:be:0f:
b3:d0:89:71:96:56:36:61:50:ce:61:51:3b:21:64:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:F2:DD:2A:34:19:D1:67:F2:CC:A5:BB:40:DA:B0:29:ED:B9:86
X509v3 Authority Key Identifier:
keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/0B2052EA6D0D11EEA65D7522C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.130.8.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:d7:cb:96:66:98:a8:87:36:9f:a8:c6:48:6e:e4:79:73:fe:
ca:a4:e7:9b:8b:3c:62:8a:f6:89:91:5e:83:91:57:1d:87:28:
7d:df:6f:46:46:25:f7:7a:0e:f0:eb:6a:6f:67:7f:f0:97:e3:
cf:c9:28:67:07:41:22:e2:b0:3e:1b:3a:49:46:c9:f8:e0:56:
7b:f5:f9:b3:cf:f5:dd:ca:e4:c9:52:60:01:5a:ec:05:2d:98:
a5:de:0c:4b:f9:73:53:34:8b:a6:d5:9b:2e:fa:a7:6c:1c:0a:
e9:49:64:e7:a6:30:8e:8f:ce:11:f3:9e:09:4c:e3:7e:c9:cf:
0d:23:3c:f3:83:69:ce:06:7e:ee:bb:43:fb:db:1d:25:29:7b:
95:48:d8:58:e3:0f:ff:a8:ec:13:37:4d:f7:ff:02:3f:2a:8f:
ca:bb:65:0a:ac:5c:87:a8:99:c6:6b:6b:7c:45:02:9c:18:2a:
76:24:2e:0d:7f:cf:a0:40:45:6c:1a:7e:d7:28:ce:ea:8d:7f:
98:8a:34:a3:f1:c3:5f:95:1e:78:1c:2e:88:52:05:d5:8d:f1:
99:4c:bb:87:6c:72:bf:43:11:d1:01:99:9e:40:ec:4e:b0:d5:
16:85:9a:b7:ca:bd:5a:d2:d9:33:c4:cc:5a:07:a9:f6:a0:89:
c0:c1:55:e2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBDQUUxMTAvBgNVBAUTKDI5ODExRTFEQjA2OEJEQkJBQkZCN0FCNjk1Rjg1ODk4
QkQ2MThDNjkwHhcNMjUxMTI3MDE0OTQxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3YWUzNS1mYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtjdq+0szKi7sbHoFZhvpWRm1ElA+T5kcngzk6PWSrha7vQNL6wfVAdnwarMp
+rYBLm7j5V0bE4BJ+Gy0buyTf/Guk0DsXSDyLqkkw78vB7OvKYVwww/NmFKOE8M5
VL9upoA+y6t74f1ICueM0keCMyXDNPgU1Pq/Oq4/z4y2Vxpy0G+A0QndfZtOyS4p
fU49lg2Xo5xREfOV/nA6B2sYreuMuGwSrW4r6ufmisQOMhMkXkXTRWq5DyX06CmO
lbrx+szTMtnWfEq7YSmVp7QiwmqBd88zq1pyo+iUaEDNFGnRXwFWvajnU9zN56Ri
vg+z0IlxllY2YVDOYVE7IWS39wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPJz8t0q
NBnRZ/LMpbtA2rAp7bmGMB8GA1UdIwQYMBaAFCmBHh2waL27q/t6tpX4WJi9YYxp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMENBRS83QzY0NEVFNjZB
NzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3ZidXItM3EybGZoWW1MMWhq
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tZRWVIYkJvdmJ1ci0zcTJsZmhZbUwxaGpHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjBDQUUvN0M2NDRFRTY2QTcxMTFFRUE1QjRDQjI2QzRGOUFFMDIvMEIyMDUyRUE2
RDBEMTFFRUE2NUQ3NTIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHfgggwDQYJKoZIhvcNAQELBQADggEBAJ3Xy5ZmmKiHNp+o
xkhu5Hlz/sqk55uLPGKK9omRXoORVx2HKH3fb0ZGJfd6DvDram9nf/CX48/JKGcH
QSLisD4bOklGyfjgVnv1+bPP9d3K5MlSYAFa7AUtmKXeDEv5c1M0i6bVmy76p2wc
CulJZOemMI6PzhHznglM437Jzw0jPPODac4Gfu67Q/vbHSUpe5VI2FjjD/+o7BM3
Tff/Aj8qj8q7ZQqsXIeomcZra3xFApwYKnYkLg1/z6BARWwaftcozuqNf5iKNKPx
w1+VHngcLohSBdWN8ZlMu4dscr9DEdEBmZ5A7E6w1RaFmrfKvVrS2TPEzFoHqfag
icDBVeI=
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:00:34 2025 by rpki-client