This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4DC27210558111EF880A8679C4F9AE02.roa
File: 4DC27210558111EF880A8679C4F9AE02.roa (raw, json)
Hash identifier: h9yTe7lhrg8907g7zfUvE00jCBHzORz0gLImI24Dzc0=
Subject key identifier: C1:92:9E:07:42:AF:3B:D7:73:2B:F3:95:02:11:D7:92:F4:58:AE:A0
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3691
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4DC27210558111EF880A8679C4F9AE02.roa
Signing time: Fri 12 Dec 2025 14:30:34 +0000
ROA not before: Fri 12 Dec 2025 14:30:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 131471
IP address blocks: 116.90.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13969 (0x3691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Dec 12 14:30:34 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=693c270a-3cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:22:01:8a:ae:c7:3f:e8:dc:20:ac:cb:ec:
a7:ee:b0:5f:cf:1e:20:2d:35:93:b4:94:1e:22:9a:
14:8b:d4:3d:5f:b3:bd:a2:3f:3f:c5:9f:9b:8f:a8:
ac:06:1f:0f:df:cf:bf:c6:17:bd:3e:56:b2:54:f5:
ed:bd:3f:f3:8d:61:ba:58:f8:0d:77:34:a4:87:f1:
77:26:0d:cf:39:6d:26:53:62:70:6c:9b:b7:3e:00:
46:09:01:45:14:ac:54:d2:bb:b7:dc:cb:34:98:dc:
fb:e7:65:b6:28:60:7a:82:04:41:df:a9:b4:08:62:
6e:cc:65:7a:18:ed:c5:ee:58:74:55:a3:d6:a9:25:
49:6c:b9:27:11:86:1b:ef:76:df:48:7f:14:6b:6e:
9b:13:2a:e1:38:c2:29:ce:82:dc:88:7d:1c:87:e1:
f0:41:16:be:8f:9a:4c:52:ec:47:ed:b4:ff:f2:33:
46:87:9c:f7:98:f3:f6:28:6c:81:1e:da:32:08:ee:
96:ae:8a:51:e5:48:35:43:46:19:e1:8f:cf:85:98:
2c:bb:41:83:fe:f7:66:58:ec:de:2f:40:7b:b2:9a:
25:a7:d7:0c:37:44:a0:8c:1e:b8:92:38:37:c2:75:
32:90:57:94:57:75:21:73:81:a1:c9:3d:92:66:72:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:92:9E:07:42:AF:3B:D7:73:2B:F3:95:02:11:D7:92:F4:58:AE:A0
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4DC27210558111EF880A8679C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a1:9b:a9:80:63:52:19:ad:6f:58:3d:a3:8a:db:b8:70:cc:
ca:dc:f7:9d:d0:8d:87:1a:0e:99:99:b5:79:36:07:03:e3:f5:
03:28:cc:1c:45:3c:18:db:5a:37:5a:f1:f5:71:58:f8:15:88:
ef:cb:d7:61:c7:d5:eb:70:a8:04:25:5f:cd:a1:3b:0f:1e:c8:
74:45:74:92:16:de:fe:87:e8:b8:d0:cc:1c:53:64:d7:46:ca:
d0:ea:3f:03:63:d9:f7:35:59:b4:c6:27:59:0b:9b:64:f7:1e:
f3:3f:c4:a6:69:7e:51:eb:6f:7f:54:d1:2b:ae:37:3a:41:9c:
15:74:94:57:92:3f:8a:57:e8:6b:14:96:65:94:49:ef:19:30:
07:56:00:fc:d4:c5:e2:c1:8c:b3:c3:cb:65:f4:d5:ac:ce:f2:
0d:ee:09:c6:4b:38:3c:17:a7:8f:7f:f0:8b:55:ce:fe:72:69:
31:64:70:78:ba:15:c8:8c:5e:8b:46:eb:c8:c3:e2:30:53:58:
86:d2:6c:23:8f:30:03:76:5a:fd:67:16:5f:bc:63:9d:30:fa:
5d:d2:21:06:5e:a9:ed:95:70:58:f2:11:8e:71:a0:04:eb:da:
3b:58:8c:70:be:3f:d6:42:73:dc:74:84:bf:54:47:9b:97:1a:
5e:f4:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:35:26 2026 by rpki-client