This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
File: A923DDA2BE0211F090AD9F13C4F9AE02.roa (raw, json)
Hash identifier: rJPMOVrpncAhvub4ptLK3aMWfe/wCmar13ef6P+IuQs=
Subject key identifier: B3:B1:D3:10:0D:75:08:4C:AD:6A:4A:8C:EE:59:62:8C:10:45:0F:CF
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 16C8
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
Signing time: Mon 10 Nov 2025 06:58:28 +0000
ROA not before: Mon 10 Nov 2025 06:58:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206283
IP address blocks: 103.27.20.0/24 maxlen: 24
175.111.6.0/24 maxlen: 24
2001:fe8:8f00::/40 maxlen: 40
2001:fe8:8f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5832 (0x16c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Nov 10 06:58:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69118d14-6ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:c0:53:07:8e:1a:99:5e:06:55:22:75:64:
e6:54:be:38:b0:28:f7:a1:30:03:00:19:ee:c7:5b:
31:e9:aa:7b:bd:ac:d3:98:08:df:78:e3:a9:90:da:
d0:ac:3c:1a:4b:66:29:13:28:9d:b9:28:bf:28:05:
d8:47:17:06:cf:39:64:f8:5f:00:37:bf:d3:73:64:
4d:20:73:48:54:eb:19:a8:c3:44:73:e3:f5:1d:62:
8d:2a:7c:59:12:00:ec:6b:8a:d4:7d:ea:79:76:61:
16:f0:3a:1d:69:67:f1:13:e0:2d:11:b4:96:5e:d3:
0b:10:b1:88:1c:30:ac:84:a6:3f:26:b3:b2:d7:91:
d1:03:ec:04:3d:31:bd:70:fa:b0:b4:79:2a:be:70:
4f:79:17:48:15:ae:6e:a4:87:4a:90:07:43:6d:09:
9a:61:e1:52:ec:03:d8:85:d3:5e:7c:46:01:b6:f5:
c7:11:00:d2:ef:b0:13:66:f3:5d:9b:f3:fd:53:d4:
e9:b2:86:b4:48:ce:02:0c:57:89:91:f3:ca:ea:88:
3f:18:e1:b1:0b:ed:4d:74:01:a6:fa:64:2d:76:db:
71:8c:e1:b9:c1:62:53:4f:bf:fe:a9:ae:07:be:27:
13:d5:1b:e9:1e:62:07:1a:0a:82:18:5d:1e:fc:df:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B1:D3:10:0D:75:08:4C:AD:6A:4A:8C:EE:59:62:8C:10:45:0F:CF
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/A923DDA2BE0211F090AD9F13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.20.0/24
175.111.6.0/24
IPv6:
2001:fe8:8f00::/40
Signature Algorithm: sha256WithRSAEncryption
00:86:47:6d:e4:9f:5a:c7:22:b3:68:a8:cd:44:31:3a:bb:5d:
d7:d3:c5:1d:b3:20:50:b8:8b:f1:3a:fd:79:cc:ae:8c:5c:01:
79:3b:d5:0f:23:22:72:bd:66:3c:29:b3:a4:77:cf:02:d8:19:
e8:d9:c7:75:18:8f:60:fd:a5:e6:9a:56:19:cb:8e:8b:b4:d3:
c6:2e:e4:4e:28:2b:15:f8:58:cf:05:ef:9e:46:e8:72:a3:f0:
1b:14:a6:c7:87:f3:ab:d3:5f:2b:31:cf:cc:0a:f9:82:b1:47:
08:10:a1:8d:2a:5f:64:04:e2:7f:c0:85:30:60:6d:b8:36:3a:
16:d2:67:b9:9f:24:37:47:36:22:f7:6a:bc:81:71:54:c6:d9:
42:ad:f0:90:ee:57:5f:f6:a5:39:54:90:9b:e0:d6:9a:74:81:
04:7a:b9:40:4d:5c:8e:0d:9b:43:4b:90:12:7d:6b:71:45:aa:
20:b2:9e:e2:da:ec:a2:be:c9:4b:d3:a6:cf:97:09:88:58:0d:
96:18:75:88:1d:16:14:af:1e:bd:f1:69:42:4c:df:51:77:40:
6a:23:d0:f1:03:0e:d2:66:fe:f3:75:fc:51:bf:61:13:53:17:
6d:b3:69:10:32:38:a0:a9:7e:42:a8:04:35:98:3e:c9:9c:ab:
33:f8:37:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:41:23 2025 by rpki-client