This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/6470410AABD811F08E1F646DC4F9AE02.roa
File: 6470410AABD811F08E1F646DC4F9AE02.roa (raw, json)
Hash identifier: dPDIVkMTdtOEZEGNrrSKg00cxdj3q2OK74zNJlVoHRk=
Subject key identifier: 2B:21:B6:48:77:4A:9E:D7:5B:AA:4F:A2:0A:11:85:4E:AE:F4:50:0E
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 128B
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/6470410AABD811F08E1F646DC4F9AE02.roa
Signing time: Thu 04 Dec 2025 16:46:54 +0000
ROA not before: Thu 04 Dec 2025 16:46:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 400618
IP address blocks: 124.108.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4747 (0x128b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Dec 4 16:46:54 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6931bafe-a8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:b4:08:af:ac:82:b4:04:45:4b:f0:ba:b4:
4b:c8:43:c8:24:27:2d:7e:96:71:b1:7e:97:a6:72:
65:73:65:a7:f1:11:47:d0:28:a0:32:9c:62:79:8c:
10:57:99:55:62:51:01:bb:84:00:25:ca:c6:f8:66:
06:29:3c:20:88:bf:60:e5:51:18:5c:94:f3:97:42:
e1:e9:9e:ec:3b:75:28:50:76:d8:48:7b:c3:7d:10:
64:44:47:fd:94:00:0f:b4:13:a7:8b:87:dc:c3:56:
4d:58:6b:29:1d:4d:88:fa:27:83:01:3e:b9:69:a7:
71:e9:b6:24:a2:33:1b:e9:c9:65:46:ea:3d:6d:1a:
ca:1f:c2:2e:bc:00:fe:c6:e2:ae:c0:47:96:38:df:
13:40:fa:b6:8e:2f:e3:39:db:da:35:4a:5e:21:f2:
1d:69:7a:e7:9e:98:d7:2e:d9:6e:20:ef:d0:73:c0:
ce:ab:e5:da:60:d6:a6:5f:7a:b7:e4:75:69:d6:9e:
86:9b:68:cf:39:f6:92:77:c6:b4:99:80:97:73:3b:
58:eb:e9:a6:49:91:67:d1:06:01:96:74:61:96:9f:
60:b3:c8:21:88:39:2a:3e:33:d4:5c:9b:c1:22:30:
43:0d:e5:6e:7e:cb:0e:0b:a2:5a:b9:97:08:7a:00:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:21:B6:48:77:4A:9E:D7:5B:AA:4F:A2:0A:11:85:4E:AE:F4:50:0E
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/6470410AABD811F08E1F646DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.108.22.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:73:ba:a6:54:2d:b7:5a:ea:9c:a9:d2:57:7b:67:14:77:a4:
50:e2:5e:3b:96:52:e9:88:dc:3a:6c:eb:5e:ef:b7:6c:3e:62:
81:6f:52:6f:6a:6a:93:7f:98:62:96:85:b3:62:fb:44:8c:19:
9a:c6:11:ea:9b:3c:3b:f1:1c:a8:ad:e0:d4:0a:14:cb:c0:6a:
0b:15:68:b5:64:11:4d:f8:05:c5:c0:7d:b5:ce:dd:7b:67:78:
9f:ec:ab:6b:a5:6a:41:9a:b8:31:34:0a:15:45:cd:89:a0:8a:
45:b1:75:e8:0a:e6:a8:7b:f6:4e:ad:e7:c5:df:f4:b8:44:d6:
0e:3f:5d:52:b0:75:3e:f4:bf:16:76:b1:9f:f6:31:de:ba:f4:
12:7a:8d:5d:08:a0:00:75:11:21:ec:0b:5d:60:c2:0f:31:b9:
44:f8:f4:f5:a7:24:96:12:55:f9:76:e6:a0:28:03:0c:d7:dc:
7f:97:b0:78:e5:84:7d:f4:28:85:c6:e6:66:9d:cc:74:cb:51:
be:e1:29:31:52:a8:85:e2:65:5c:40:ec:4d:7b:d7:e0:32:ec:
0f:9d:da:c4:57:89:be:9c:f9:46:06:42:b4:ae:e1:af:ab:f2:
cd:ca:d8:24:72:1d:24:85:a5:ef:9e:4a:86:0d:45:ee:d0:3a:
ef:a9:52:e1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB
QUJENDAyNzEwHhcNMjUxMjA0MTY0NjU0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxYmFmZS1hOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx260CK+sgrQERUvwurRLyEPIJCctfpZxsX6XpnJlc2Wn8RFH0CigMpxieYwQ
V5lVYlEBu4QAJcrG+GYGKTwgiL9g5VEYXJTzl0Lh6Z7sO3UoUHbYSHvDfRBkREf9
lAAPtBOni4fcw1ZNWGspHU2I+ieDAT65aadx6bYkojMb6cllRuo9bRrKH8IuvAD+
xuKuwEeWON8TQPq2ji/jOdvaNUpeIfIdaXrnnpjXLtluIO/Qc8DOq+XaYNamX3q3
5HVp1p6Gm2jPOfaSd8a0mYCXcztY6+mmSZFn0QYBlnRhlp9gs8ghiDkqPjPUXJvB
IjBDDeVufssOC6JauZcIegAkhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCshtkh3
Sp7XW6pPogoRhU6u9FAOMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB
MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjZFNzMvRjQxRDQwRjJFQTA5MTFFOEFEQTJFRDBDQzRGOUFFMDIvNjQ3MDQxMEFB
QkQ4MTFGMDhFMUY2NDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAF8bBYwDQYJKoZIhvcNAQELBQADggEBAKpzuqZULbda6pyp
0ld7ZxR3pFDiXjuWUumI3Dps617vt2w+YoFvUm9qapN/mGKWhbNi+0SMGZrGEeqb
PDvxHKit4NQKFMvAagsVaLVkEU34BcXAfbXO3XtneJ/sq2ulakGauDE0ChVFzYmg
ikWxdegK5qh79k6t58Xf9LhE1g4/XVKwdT70vxZ2sZ/2Md669BJ6jV0IoAB1ESHs
C11gwg8xuUT49PWnJJYSVfl25qAoAwzX3H+XsHjlhH30KIXG5madzHTLUb7hKTFS
qIXiZVxA7E171+Ay7A+d2sRXib6c+UYGQrSu4a+r8s3K2CRyHSSFpe+eSoYNRe7Q
Ou+pUuE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:14 2025 by rpki-client