This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EAF1E48478FA11EF9043060AC4F9AE02.roa
File: EAF1E48478FA11EF9043060AC4F9AE02.roa (raw, json)
Hash identifier: 29JJitgeZibCuMLwmFZOe7Iewb0yCQvMIqLz7xwmm+U=
Subject key identifier: 41:9E:71:2F:DA:4F:73:F9:82:A2:22:64:DB:B2:75:7D:B1:BF:05:F8
Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8
Certificate serial: DF
Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EAF1E48478FA11EF9043060AC4F9AE02.roa
Signing time: Tue 25 Nov 2025 03:51:14 +0000
ROA not before: Tue 25 Nov 2025 03:51:14 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150341
IP address blocks: 160.187.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl
rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 03:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8
Validity
Not Before: Nov 25 03:51:14 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=692527b1-6357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:b7:1c:67:b9:75:3f:e1:a9:dc:aa:9f:8d:
d6:aa:14:99:fe:4b:b6:1c:99:83:b0:86:a3:78:d8:
85:15:52:fa:66:fc:bb:05:8f:69:c5:3f:eb:0e:f8:
de:61:10:53:26:a2:b1:ce:9e:92:9a:ed:da:19:04:
dc:1f:67:f1:3f:45:fe:36:f0:e0:de:61:7a:1c:32:
73:33:e9:0c:c0:ac:f2:a3:c7:9b:ae:80:91:08:6e:
38:e9:a5:af:79:59:ef:62:b4:ec:f8:8f:df:52:45:
a8:a7:cf:40:fa:f7:1c:e7:87:68:23:e0:82:06:f9:
27:43:75:c7:0a:57:51:d9:1f:d9:74:42:4a:c9:01:
77:1b:24:27:5f:16:87:61:56:20:e2:c8:2a:40:ad:
72:5e:b1:e2:15:67:30:d7:30:2d:21:31:c3:7e:81:
a3:4f:63:7a:4d:1c:44:f7:be:2c:a2:18:2a:6a:43:
5c:e9:39:45:54:d2:cf:b4:37:64:31:13:5e:bf:5c:
b7:2f:45:67:ab:db:a6:80:49:48:15:2b:fc:3a:1c:
74:58:13:87:da:f0:a7:69:9f:dd:44:53:13:47:05:
9b:df:c4:13:22:c4:38:38:1d:79:d0:a8:d2:82:ea:
32:43:42:d0:b7:92:c5:75:de:52:f2:d5:c0:2a:03:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:71:2F:DA:4F:73:F9:82:A2:22:64:DB:B2:75:7D:B1:BF:05:F8
X509v3 Authority Key Identifier:
keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EAF1E48478FA11EF9043060AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.34.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c1:f4:75:c9:8f:2e:94:73:dd:ab:5c:7b:4e:22:bf:e6:f8:
89:d6:6c:cc:39:41:e2:48:90:72:8e:39:75:b4:98:79:37:8c:
cb:31:35:ec:a6:c5:1a:5f:62:2e:00:93:9d:41:c5:04:d8:f0:
a0:8f:f6:2c:28:33:92:9a:63:c0:aa:1f:f6:8f:3a:dc:4b:84:
4a:ee:0d:40:cc:9c:fa:37:d4:f1:1f:bb:11:bb:c0:4a:89:d4:
58:df:e1:d5:f2:80:fa:1f:45:a1:50:4d:dd:2d:e0:aa:c1:f8:
7e:6a:5c:37:b0:e0:21:c2:6a:87:9c:c7:ba:5c:4d:a8:8a:48:
74:0f:52:1e:1f:1f:84:0c:d2:4a:f7:39:8c:d3:86:a4:b5:fe:
45:d4:d1:21:d7:e0:61:e3:31:bb:41:b0:14:72:fa:a2:d6:58:
80:43:2a:7d:ef:0e:4e:5f:3b:01:cf:32:d1:c6:60:84:fa:64:
93:95:b7:44:54:2c:fe:67:ac:f2:33:26:b8:4d:9f:bc:0c:b7:
e4:cd:9e:3a:a1:5e:83:2d:3d:8c:6f:f0:49:19:3a:f3:ec:b4:
41:99:a3:06:0b:c3:6b:a4:55:b4:e0:a0:82:02:3f:be:72:7d:
08:de:c2:17:01:47:b5:a6:b3:b2:77:44:a6:ba:69:42:e4:15:
4a:58:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:45:30 2025 by rpki-client