This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/00606C184A3011EFBC542C18C4F9AE02.roa
File: 00606C184A3011EFBC542C18C4F9AE02.roa (raw, json)
Hash identifier: aOiSDYOcKoNPJK5dAvtJf70EvscXRCj0p7VI3j21/MI=
Subject key identifier: AF:AD:A7:4D:8F:21:6E:3A:BF:9F:18:C0:EC:49:C3:3F:E2:E6:9E:B9
Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial: F5
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/00606C184A3011EFBC542C18C4F9AE02.roa
Signing time: Fri 07 Nov 2025 01:10:39 +0000
ROA not before: Fri 07 Nov 2025 01:10:39 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24074
IP address blocks: 202.12.248.0/22 maxlen: 22
202.12.252.0/22 maxlen: 22
202.27.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Validity
Not Before: Nov 7 01:10:39 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690d470f-cfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:67:be:26:7b:60:d6:9e:27:41:27:39:23:
4b:40:44:45:8d:c9:76:11:bb:6e:46:65:85:1b:ed:
42:6b:cc:0e:45:cb:ed:1b:53:08:ba:fb:76:04:8b:
4e:b9:85:bf:46:33:d0:f5:7c:5f:9e:9e:94:c1:04:
55:e9:ac:bc:6f:c0:70:1c:24:f1:9a:4e:62:9f:89:
8d:10:14:b9:78:5a:95:39:a4:da:1d:1a:ae:70:cd:
57:0a:5b:76:8f:bc:0a:1a:da:b5:64:13:b5:fd:b2:
57:53:00:88:95:6f:a0:3e:f6:02:25:16:2c:14:14:
8b:25:96:bc:b1:62:d8:37:eb:1e:7c:8b:97:c7:cb:
45:25:cb:b4:52:bc:fb:94:14:35:f7:b1:62:c8:63:
cf:4c:f3:2a:eb:d6:7c:c8:56:fd:5a:70:60:17:60:
d4:ab:3d:3b:68:05:10:34:96:19:00:c3:2d:81:e6:
66:59:1f:2a:74:4e:51:ce:07:6a:35:a6:a1:66:c3:
58:76:3c:b7:04:ff:78:77:f9:87:ec:83:d6:14:d8:
d5:90:18:3a:9a:db:55:93:e5:93:be:a5:10:07:88:
8b:51:a0:c7:bb:cb:69:19:ea:4b:8f:8e:84:88:06:
fc:2a:40:15:3d:67:39:66:7a:1d:4d:bd:e9:f4:11:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AD:A7:4D:8F:21:6E:3A:BF:9F:18:C0:EC:49:C3:3F:E2:E6:9E:B9
X509v3 Authority Key Identifier:
keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/00606C184A3011EFBC542C18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.12.248.0/21
202.27.140.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:57:c7:b0:55:d7:af:a5:b6:c7:87:45:1a:d9:ac:be:91:e6:
a1:60:ac:31:1b:b3:18:41:ff:81:64:b9:9c:e8:55:50:97:17:
f7:72:2d:f8:97:ef:2d:50:68:be:e7:28:93:b0:39:c9:27:f2:
c3:86:28:5d:b6:ef:cd:2a:73:16:f8:b9:38:b5:28:31:78:97:
b0:ee:74:74:7e:08:25:0b:e8:a7:e2:d8:80:3e:31:02:97:be:
77:78:55:9e:42:f6:73:b5:d2:8f:5a:85:c2:53:05:6b:f4:78:
b6:21:49:60:ec:ef:3a:f2:4f:98:01:08:0a:c8:26:76:51:49:
37:de:56:e2:39:49:34:3d:9c:c5:d9:e3:d1:e0:7c:f2:cc:28:
24:93:c8:6a:ce:15:15:2d:2b:d9:09:93:b5:5d:3b:0d:e9:b5:
03:c1:42:de:29:7c:c1:8f:e4:87:fb:f6:9a:1c:a0:b7:69:e1:
50:ba:ea:a4:1d:b1:8c:0d:a2:81:46:1d:c0:f5:0e:5b:51:19:
55:9a:bc:18:ab:a1:4d:6f:52:d3:42:2c:57:fe:77:52:dd:fe:
28:b1:b2:0c:b4:b4:b2:a3:79:73:f4:d4:f1:de:85:45:b6:1b:
82:71:85:85:bc:90:59:51:fb:2e:2f:0c:a8:b1:d4:29:56:e2:
3c:b4:a3:3d
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyM0YxMTAvBgNVBAUTKENDRENGRjIxMkE2QjY5OUE1NzBCNEE5RDE3NUYxNjIz
NzE4MzJDQTUwHhcNMjUxMTA3MDExMDM5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBkNDcwZi1jZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz2tnviZ7YNaeJ0EnOSNLQERFjcl2EbtuRmWFG+1Ca8wORcvtG1MIuvt2BItO
uYW/RjPQ9Xxfnp6UwQRV6ay8b8BwHCTxmk5in4mNEBS5eFqVOaTaHRqucM1XClt2
j7wKGtq1ZBO1/bJXUwCIlW+gPvYCJRYsFBSLJZa8sWLYN+sefIuXx8tFJcu0Urz7
lBQ197FiyGPPTPMq69Z8yFb9WnBgF2DUqz07aAUQNJYZAMMtgeZmWR8qdE5Rzgdq
NaahZsNYdjy3BP94d/mH7IPWFNjVkBg6mttVk+WTvqUQB4iLUaDHu8tpGepLj46E
iAb8KkAVPWc5ZnodTb3p9BFIwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFK+tp02P
IW46v58YwOxJwz/i5p65MB8GA1UdIwQYMBaAFMzc/yEqa2maVwtKnRdfFiNxgyyl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjIzRi8zMzhCMkY0ODRB
MkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFacFhDMHFkRjE4V0kzR0RM
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pOel9JU3ByYVpwWEMwcWRGMThXSTNHRExLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkYyM0YvMzM4QjJGNDg0QTJGMTFFRkFFOTZDOTE1QzRGOUFFMDIvMDA2MDZDMTg0
QTMwMTFFRkJDNTQyQzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAPKDPgDBADKG4wwDQYJKoZIhvcNAQELBQADggEBAMlXx7BV
16+ltseHRRrZrL6R5qFgrDEbsxhB/4FkuZzoVVCXF/dyLfiX7y1QaL7nKJOwOckn
8sOGKF22780qcxb4uTi1KDF4l7DudHR+CCUL6Kfi2IA+MQKXvnd4VZ5C9nO10o9a
hcJTBWv0eLYhSWDs7zryT5gBCArIJnZRSTfeVuI5STQ9nMXZ49HgfPLMKCSTyGrO
FRUtK9kJk7VdOw3ptQPBQt4pfMGP5If79pocoLdp4VC66qQdsYwNooFGHcD1DltR
GVWavBiroU1vUtNCLFf+d1Ld/iixsgy0tLKjeXP01PHehUW2G4JxhYW8kFlR+y4v
DKix1ClW4jy0oz0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:19 2025 by rpki-client