This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/C61B734AB0AA11E580DBF725C4F9AE02.roa
File: C61B734AB0AA11E580DBF725C4F9AE02.roa (raw, json)
Hash identifier: 2XdDFumhJrXy6IXe/lYhN3ti1b3JjPjhpziW+Y/V7SA=
Subject key identifier: 6C:24:BC:85:E8:4A:77:FF:0D:48:C5:3E:EA:2A:DD:D1:AC:77:80:88
Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial: 2584
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/C61B734AB0AA11E580DBF725C4F9AE02.roa
Signing time: Sun 30 Nov 2025 15:43:03 +0000
ROA not before: Sun 30 Nov 2025 15:43:03 +0000
ROA not after: Mon 30 Mar 2026 00:00:00 +0000
asID: 17993
IP address blocks: 110.5.112.0/22 maxlen: 22
110.5.112.0/24 maxlen: 24
110.5.113.0/24 maxlen: 24
110.5.114.0/24 maxlen: 24
110.5.115.0/24 maxlen: 24
202.4.32.0/19 maxlen: 19
202.4.32.0/21 maxlen: 21
202.4.32.0/24 maxlen: 24
202.4.33.0/24 maxlen: 24
202.4.34.0/24 maxlen: 24
202.4.35.0/24 maxlen: 24
202.4.36.0/24 maxlen: 24
202.4.37.0/24 maxlen: 24
202.4.38.0/24 maxlen: 24
202.4.39.0/24 maxlen: 24
202.4.40.0/21 maxlen: 21
202.4.40.0/24 maxlen: 24
202.4.41.0/24 maxlen: 24
202.4.42.0/24 maxlen: 24
202.4.43.0/24 maxlen: 24
202.4.44.0/24 maxlen: 24
202.4.45.0/24 maxlen: 24
202.4.46.0/24 maxlen: 24
202.4.47.0/24 maxlen: 24
202.4.48.0/20 maxlen: 20
202.4.48.0/24 maxlen: 24
202.4.49.0/24 maxlen: 24
202.4.50.0/24 maxlen: 24
202.4.51.0/24 maxlen: 24
202.4.52.0/24 maxlen: 24
202.4.53.0/24 maxlen: 24
202.4.54.0/24 maxlen: 24
202.4.55.0/24 maxlen: 24
202.4.56.0/24 maxlen: 24
202.4.57.0/24 maxlen: 24
202.4.58.0/24 maxlen: 24
202.4.59.0/24 maxlen: 24
202.4.60.0/24 maxlen: 24
202.4.61.0/24 maxlen: 24
202.4.62.0/24 maxlen: 24
202.4.63.0/24 maxlen: 24
203.99.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9604 (0x2584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Validity
Not Before: Nov 30 15:43:03 2025 GMT
Not After : Mar 30 00:00:00 2026 GMT
Subject: CN=692c6607-7355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:6b:58:08:99:f6:39:4f:d8:93:ac:b6:df:
46:5f:ba:11:cc:cc:41:4c:0b:4c:56:2a:54:ac:3f:
d5:00:00:23:53:0b:b6:2d:66:cb:0c:d9:04:92:81:
ed:38:03:98:5a:d1:8b:49:2b:31:d5:33:d3:1c:03:
41:ac:96:3e:e3:34:7a:bb:05:7f:eb:c6:95:18:f1:
aa:dd:89:3a:a9:70:da:91:c1:15:fc:e4:8d:db:ca:
06:d5:91:32:91:c3:38:ed:05:6e:52:85:40:60:0c:
e9:82:6b:95:90:8d:8d:9d:9d:24:8a:8a:3b:4a:58:
f8:a8:4f:4d:54:d7:ed:05:e6:11:2a:0e:3b:b0:a4:
3d:df:1d:d7:8e:1b:84:4c:60:1a:0c:1d:7a:80:06:
02:b4:ba:4c:29:ba:34:1d:aa:25:be:9a:e6:72:3b:
9c:6c:d3:a6:d9:05:1f:ac:a1:e3:59:8c:28:a0:41:
80:6f:4e:22:13:b2:4c:36:eb:bd:0c:68:21:4e:29:
6c:1b:7b:f3:19:fe:9e:95:5e:60:83:3a:e1:75:a5:
5d:0b:2c:c4:b3:a7:05:59:93:6e:a3:a3:15:44:50:
36:76:3a:85:d5:27:dd:42:8e:65:8b:e1:89:2f:20:
59:ed:42:d0:d3:24:d3:a8:87:69:53:db:2d:9f:7b:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:24:BC:85:E8:4A:77:FF:0D:48:C5:3E:EA:2A:DD:D1:AC:77:80:88
X509v3 Authority Key Identifier:
keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/C61B734AB0AA11E580DBF725C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.5.112.0/22
202.4.32.0/19
203.99.255.0/24
Signature Algorithm: sha256WithRSAEncryption
22:48:53:06:90:1c:31:dd:e1:a4:50:af:20:89:62:20:0e:8a:
7c:00:d4:4d:d1:50:49:ba:4d:d4:0e:93:b7:71:5b:70:d5:07:
1d:bb:85:5f:92:fe:06:2e:a1:10:11:51:dd:f2:2e:66:da:08:
64:fc:16:ca:c1:a4:48:86:06:2f:18:1f:e8:b5:f8:12:b5:d2:
e7:50:6a:57:8b:51:70:1e:da:56:c1:66:d8:82:fe:81:86:78:
ea:d6:48:c6:61:58:89:35:e3:45:53:91:00:95:14:11:fe:a5:
6f:9a:54:08:4e:74:75:04:33:bd:28:13:bd:68:94:f2:d2:28:
82:9e:3b:3f:94:3e:0b:ee:dc:fa:b3:87:10:2f:de:05:1a:ab:
e1:b9:f8:10:4d:fb:38:15:bb:a1:ab:52:47:c5:ac:7c:cf:e0:
2e:e3:db:22:f6:91:56:45:0b:ca:96:c5:48:d1:c5:f0:75:3c:
f9:86:ca:c5:cd:06:9f:45:5c:19:ab:13:2d:69:97:4d:3e:65:
32:4b:8f:1c:9c:c0:c9:61:a0:be:c9:43:ce:e0:e8:16:53:4a:
c0:9a:10:3c:a8:84:9c:ad:5d:1f:4c:65:ea:9d:0f:e9:af:7a:
a2:0a:da:e2:99:6f:45:aa:42:b2:16:71:1a:cd:d9:99:07:63:
b9:85:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:02:22 2025 by rpki-client