This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/D240E2EE814D11EBB1CE367FC4F9AE02.roa
File: D240E2EE814D11EBB1CE367FC4F9AE02.roa (raw, json)
Hash identifier: OcDk0+b+7yUXsyGIwS3/BcoBm4sD7lmajtFFAPMecA4=
Subject key identifier: CB:D7:A8:60:74:47:58:94:1D:60:61:95:F4:2A:E3:08:4A:5E:D7:1C
Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Certificate serial: 0679
Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/D240E2EE814D11EBB1CE367FC4F9AE02.roa
Signing time: Thu 12 Jun 2025 22:21:28 +0000
ROA not before: Thu 12 Jun 2025 22:21:28 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 138002
IP address blocks: 103.115.233.0/24 maxlen: 24
2001:df5:3f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Validity
Not Before: Jun 12 22:21:28 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=684b52e8-574c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0f:95:5b:2f:0e:65:ab:5d:56:03:6b:02:3a:
3b:e3:4d:34:52:53:71:44:88:45:0c:ac:9d:b6:26:
07:aa:02:31:6e:86:78:bd:1f:1f:0e:f2:f1:82:5f:
0e:f7:df:d8:52:71:12:90:88:ce:37:91:eb:49:78:
3d:94:7d:e7:6c:08:83:03:b4:45:64:70:8d:c8:c2:
b1:9c:b7:9f:0a:69:2c:aa:cb:ab:c0:7f:58:b7:46:
45:f7:df:c9:1b:23:b1:a2:1c:0f:6e:50:71:d2:8a:
63:3f:c5:b4:85:3b:6a:a1:12:0f:7b:b5:52:5d:c6:
22:3f:b9:70:74:15:5b:91:75:27:74:30:d7:af:e4:
96:e2:74:48:cb:6c:7c:d0:6c:8c:55:bd:b1:31:ad:
70:f7:2c:9a:68:51:9b:31:e1:4b:c1:6c:14:fa:0a:
97:0c:08:59:bc:4b:37:af:20:6e:75:6e:66:31:dd:
49:85:64:6a:8d:5e:80:2c:ba:46:b5:82:ff:ee:5a:
4d:33:be:07:76:80:85:4c:1e:71:8f:63:f2:a6:4e:
dc:ff:bc:88:a0:3f:ab:28:ac:84:a9:a4:be:cb:2b:
c2:b1:fb:f8:fa:00:a7:da:be:81:50:5d:10:7f:aa:
e9:88:5a:4f:c5:7d:51:af:c4:b7:c8:55:ed:49:22:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D7:A8:60:74:47:58:94:1D:60:61:95:F4:2A:E3:08:4A:5E:D7:1C
X509v3 Authority Key Identifier:
keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/D240E2EE814D11EBB1CE367FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.233.0/24
IPv6:
2001:df5:3f00::/48
Signature Algorithm: sha256WithRSAEncryption
7b:6b:ba:8c:c0:c7:69:e9:a9:a2:52:73:4a:8e:75:97:34:90:
6e:1b:26:80:bf:c0:63:52:38:b3:70:f1:7b:1d:6b:0b:60:25:
9b:eb:6c:61:f0:b1:56:07:cb:f3:43:08:cd:6a:f0:0a:53:cc:
d8:59:25:3e:c4:0e:b2:5b:43:d0:65:2d:3e:d0:50:dc:11:02:
a3:8c:c7:ba:04:f6:51:37:74:ef:6c:5c:87:a8:d0:84:36:30:
ee:a1:64:78:d3:d2:4a:a4:6b:d1:71:07:16:83:5c:7a:65:0e:
a4:c6:6e:2d:37:a6:d2:66:b3:44:b4:18:60:a6:7e:45:51:37:
68:d5:9c:c2:0f:54:28:59:d4:e2:c5:50:08:37:31:bd:97:b1:
59:fb:4c:b2:f6:61:8d:d8:30:6d:d7:54:46:8c:22:3e:43:57:
a8:02:69:48:28:8c:69:67:b3:89:1a:21:f1:2b:3b:d5:08:93:
ca:42:85:e6:6f:5f:e4:24:02:00:d6:eb:40:3c:ec:a0:a1:5a:
9c:99:61:01:0e:1e:c0:e4:93:f7:a6:69:60:c8:78:4d:88:2e:
7b:8a:be:0f:b8:a5:38:dd:84:13:02:1a:e3:e5:61:4e:95:7c:
46:0b:59:00:ff:f2:0f:02:2c:eb:1f:6c:3a:26:38:8a:3a:d8:
f2:1b:92:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:25:07 2025 by rpki-client