This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/2DDAF496ABD811F08750DA6CC4F9AE02.roa
File: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (raw, json)
Hash identifier: jvF4AHWc7m7ZqI2zF3mfzsXTE42RWmBksodUplqDm6Q=
Subject key identifier: DA:DF:A4:C7:82:6D:1E:92:E9:1E:AD:50:B1:AB:99:84:BD:72:7E:2E
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 1288
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/2DDAF496ABD811F08750DA6CC4F9AE02.roa
Signing time: Thu 04 Dec 2025 16:46:51 +0000
ROA not before: Thu 04 Dec 2025 16:46:51 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132110
IP address blocks: 103.200.114.0/24 maxlen: 24
103.200.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4744 (0x1288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Dec 4 16:46:51 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6931bafb-0055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:31:47:f8:e4:28:ef:d7:42:a6:bb:12:03:
ce:32:51:14:33:ca:c4:1d:19:54:62:e9:cd:f5:17:
fd:a4:12:56:8b:0f:7d:33:54:07:87:e7:b0:cc:94:
ea:a0:9b:f7:95:b0:b1:f2:8c:f4:b6:5f:f5:e5:42:
e0:51:f0:6d:96:69:d8:8c:bc:7d:78:78:75:0b:c3:
aa:0f:ff:7a:49:09:aa:1f:b9:79:db:aa:29:56:c7:
5b:a7:ec:1b:51:ca:ef:73:b0:f3:d2:c0:70:27:88:
80:16:83:38:ce:a1:c1:bf:84:60:bc:4b:0c:96:c7:
aa:c6:22:a2:52:18:32:f1:93:6d:0a:8e:b8:1e:97:
05:cb:04:79:c0:d8:23:20:4d:9a:7b:01:c6:9f:bb:
0f:28:89:ea:dc:9c:8d:64:d9:cb:9b:1e:e1:69:03:
aa:8d:13:3e:a8:51:58:eb:c6:89:a1:b8:98:4e:49:
82:06:9d:c3:62:74:5a:40:c9:7e:98:47:ad:5c:f3:
df:a4:19:f5:3f:6d:db:d0:3e:27:42:48:e3:f6:97:
51:59:a2:00:50:cd:11:db:86:90:6a:64:c1:b7:59:
05:ba:af:06:6d:6a:8e:d2:f8:76:15:67:c5:ff:41:
f2:2c:f0:18:a6:c1:94:5e:80:9c:66:1f:b6:41:ac:
78:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DF:A4:C7:82:6D:1E:92:E9:1E:AD:50:B1:AB:99:84:BD:72:7E:2E
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/2DDAF496ABD811F08750DA6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.200.114.0/23
Signature Algorithm: sha256WithRSAEncryption
01:12:8d:bd:56:1b:2c:9f:bd:6e:94:1c:c6:9a:88:d5:59:af:
63:94:fc:3f:86:d8:6e:f9:a7:8f:ee:c5:00:ea:d9:52:98:88:
7f:d1:d9:68:77:94:ec:be:bf:25:b2:c6:8b:33:de:3e:4b:01:
e1:8e:b2:1d:04:62:fc:d3:94:c7:6f:46:6f:1b:d1:85:70:6d:
cc:b0:9e:36:64:18:de:ee:34:d2:50:43:d1:66:a8:5b:6b:51:
e3:b1:d1:84:cd:d5:a2:c7:de:d0:86:65:4b:03:d2:76:d5:bd:
8e:04:c6:5a:b0:ae:66:04:38:c1:f3:e2:a3:8c:a3:ea:36:b9:
d6:23:c1:6f:fc:0d:af:a7:f3:39:07:54:2b:78:ac:a3:ca:ef:
f6:a4:aa:39:04:c1:49:90:de:ab:b4:d3:b6:fb:39:56:ef:06:
42:e9:25:05:43:a1:f4:7d:ff:54:36:fb:36:94:72:25:c6:60:
43:fb:26:a3:d3:fb:da:b0:5d:5c:fe:79:bd:08:e6:7a:74:8f:
8e:e0:fb:2d:97:3b:98:9d:5c:81:c3:ef:c4:ff:df:79:e2:ed:
cd:53:0e:0f:04:75:19:d8:17:a4:3e:c1:65:7d:cb:9a:66:36:
3f:e7:9b:29:b5:8f:f3:1d:37:08:8c:36:41:02:18:6a:e0:ff:
7d:ca:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:53:27 2025 by rpki-client