This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/06B2C184C06711F094A5BC25C4F9AE02.roa
File: 06B2C184C06711F094A5BC25C4F9AE02.roa (raw, json)
Hash identifier: XHsWgt14mba6jCHltNoKhdxGvt+PpB0JF3/BXTo/7EM=
Subject key identifier: 85:D2:04:91:41:8C:E8:CF:17:1E:BF:78:0C:D5:1B:94:0A:E9:C5:92
Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial: 70
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/06B2C184C06711F094A5BC25C4F9AE02.roa
Signing time: Thu 13 Nov 2025 08:01:58 +0000
ROA not before: Thu 13 Nov 2025 08:01:58 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 140902
IP address blocks: 103.152.136.0/24 maxlen: 24
103.152.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Validity
Not Before: Nov 13 08:01:58 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69159075-1738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:c2:a6:2a:cf:5c:67:96:ce:6c:59:9f:68:
24:8b:73:82:15:20:60:c9:59:dc:0b:e9:e9:a2:67:
1c:47:86:18:80:68:48:99:7a:bb:7f:1a:d9:a2:7b:
95:f1:f0:c9:65:89:27:f6:34:86:8a:d8:be:8c:51:
7f:c3:8d:f5:af:2d:74:d0:75:09:98:7c:53:ac:e8:
99:75:4d:15:48:68:1d:db:4d:6d:68:4e:f8:9c:7a:
27:ef:78:12:f9:c9:2b:65:0b:8e:3e:17:14:50:be:
58:fc:68:ab:8a:5d:61:6a:6a:fb:4b:dc:30:8b:9c:
8b:93:84:59:98:8a:e4:75:39:a3:45:ec:72:af:3e:
7b:b4:42:c3:9f:f4:23:93:b4:dc:a5:08:7f:6b:e0:
51:ca:53:0d:b2:b2:38:09:8b:16:16:c1:b3:08:3e:
43:a6:e5:fb:f2:5e:fe:74:b0:8f:16:19:99:04:52:
2f:bd:22:83:2b:58:3c:d9:83:c2:60:c2:50:08:a6:
84:81:d3:45:d2:96:05:1d:26:82:d0:d2:c0:21:17:
9e:b2:69:c0:0b:88:27:80:e3:02:42:3c:ee:85:1c:
ac:27:3c:ff:f3:7b:45:8d:e7:56:36:68:6c:9b:30:
21:31:da:1f:d1:80:1b:b3:f9:b0:a5:6f:69:33:2f:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D2:04:91:41:8C:E8:CF:17:1E:BF:78:0C:D5:1B:94:0A:E9:C5:92
X509v3 Authority Key Identifier:
keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/06B2C184C06711F094A5BC25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.136.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:26:3f:ae:2a:2f:c2:6f:ab:3d:ca:53:66:ed:36:be:19:c3:
ed:61:b3:2f:78:39:b9:1b:c8:7c:3a:7c:f0:18:02:d1:47:39:
1c:c2:46:80:14:ba:ec:47:3e:55:dd:4c:ba:4f:27:e0:2e:8d:
82:7e:f4:cb:ed:13:00:42:23:49:0a:dc:22:71:10:99:9c:70:
53:ad:d4:0f:60:45:c1:86:3e:bc:48:66:4e:86:dd:0a:66:8f:
3b:49:78:28:47:09:bc:1a:28:c0:14:93:ee:3d:d5:a4:24:a5:
ab:3b:58:e5:1d:a8:83:90:e4:38:94:33:b6:eb:40:c3:0e:cb:
58:04:a1:f0:57:6e:b5:33:61:8a:4c:8b:2a:36:97:99:69:f2:
ab:a8:e3:77:5e:ca:96:d4:5b:19:20:5c:3c:b8:9a:29:58:29:
9e:d4:aa:92:aa:54:7b:e4:65:24:8b:24:98:b2:3d:a7:a2:47:
09:01:93:90:04:e2:64:03:b7:d8:98:90:4e:88:6a:f5:7c:c8:
8b:27:a8:66:12:b9:5a:1d:e9:98:73:a6:09:f1:99:d8:10:60:
0f:45:70:3f:b0:71:5f:88:d9:76:21:e5:cd:94:31:52:45:64:
6c:6e:c5:e2:f4:a5:3d:5a:27:82:fa:36:77:cb:d9:5f:3c:11:
d4:d4:16:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:52:43 2025 by rpki-client