This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa
File: DA45147EB35E11EE8EED0E37C4F9AE02.roa (raw, json)
Hash identifier: KFUQZMe5qLV6EEHqsboBmZ+XKCmzmQL5IdQuKz2/1pM=
Subject key identifier: 78:91:6A:10:6D:D9:C7:69:6D:F5:D3:AE:F8:0C:D8:28:D6:05:49:71
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 0750
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa
Signing time: Tue 02 Dec 2025 21:24:43 +0000
ROA not before: Tue 02 Dec 2025 21:24:43 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133073
IP address blocks: 43.251.118.0/24 maxlen: 24
43.251.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1872 (0x750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Validity
Not Before: Dec 2 21:24:43 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=692f591b-73aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:e4:80:34:1f:4a:ea:f6:d8:49:54:70:9e:
97:8b:d3:51:9f:c9:4e:fa:03:93:ff:22:62:b0:92:
3d:a1:2d:e3:f7:1a:8f:27:11:e0:7f:09:ea:49:af:
b1:fb:a5:1b:69:73:c0:9a:e9:ad:bd:aa:34:54:49:
26:ac:3c:5a:32:a7:54:ee:8a:39:f5:5d:2f:f3:fc:
c9:fb:5f:d5:54:52:b2:22:18:85:14:7e:cb:86:68:
50:67:c8:43:4a:f6:4c:bc:e9:51:35:ae:f8:d8:c9:
3c:34:b0:7b:80:1a:0a:05:13:f5:7e:79:91:ad:8f:
4b:43:35:4c:16:2b:5d:99:4a:1f:65:bc:cf:41:c0:
14:82:3e:13:f5:57:da:ef:ba:4c:b1:7b:f8:3a:68:
3d:6f:63:5a:36:bb:6e:20:18:fa:e1:70:21:46:2f:
32:02:cd:ad:f6:49:75:85:53:58:03:e8:c1:d7:3f:
81:22:4a:ac:8a:e6:0f:35:79:4e:42:65:bb:e3:67:
9e:ed:9a:80:45:9d:e4:08:84:a3:3f:89:ff:35:27:
1c:8e:3e:fc:10:4d:0a:18:e1:50:09:9a:d1:e9:9c:
4b:8c:12:79:05:a9:84:66:d5:37:ef:e1:f7:e5:9a:
88:48:08:5b:e5:31:4c:fe:35:e2:cc:3b:91:a4:44:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:91:6A:10:6D:D9:C7:69:6D:F5:D3:AE:F8:0C:D8:28:D6:05:49:71
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/DA45147EB35E11EE8EED0E37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.118.0/23
Signature Algorithm: sha256WithRSAEncryption
33:f2:24:44:f1:ec:45:2b:5e:40:3d:79:9f:ed:72:eb:cd:0c:
8e:18:97:03:04:81:28:34:9e:ed:d7:f6:45:e6:fc:1a:c9:00:
b3:7a:d2:68:b1:08:27:11:cf:93:a4:bb:ad:65:29:8b:93:a5:
0c:1f:2d:46:4f:84:eb:34:52:95:e1:77:fc:4f:cd:3f:c0:c3:
bf:3c:47:2c:1b:80:ff:f6:d4:05:a3:4a:71:d5:cf:63:02:a1:
dc:b3:fe:06:e3:a3:f2:74:cf:5b:d7:b9:e9:72:b1:11:b0:ad:
80:e8:9a:9f:44:9a:4f:0f:1d:fb:f2:ba:e3:f0:e5:ff:ef:9a:
98:fd:b4:4c:ba:ec:3d:3c:37:08:2d:cd:08:26:e1:bb:8c:1f:
a5:1c:f7:55:d0:a4:6c:a8:e2:73:2c:49:43:b5:98:d0:17:04:
88:50:69:82:1b:12:fa:1e:64:65:c2:5d:7c:d6:3a:9e:70:25:
95:86:8a:3c:ec:41:ba:4a:46:e9:d0:97:cd:59:4e:b6:d2:cf:
a1:96:8b:48:59:91:68:07:db:f9:47:ab:f8:f5:ca:68:30:55:
68:2d:0e:d6:d1:ac:2f:d8:9b:5b:b7:d2:78:45:5c:1a:64:08:
18:5c:e5:9f:22:78:af:d4:a4:32:aa:b6:fc:4a:f7:08:84:3c:
45:ee:84:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:12:33 2025 by rpki-client