This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/14A07422D45E11EEB37CB639C4F9AE02.roa
File: 14A07422D45E11EEB37CB639C4F9AE02.roa (raw, json)
Hash identifier: JhgDE5ETFIhEXBruI39DaKib1cXEXGZCzHT5TsRcHiM=
Subject key identifier: 05:51:3F:68:2F:DC:3C:06:82:A9:CA:3E:51:AA:B8:16:51:F6:EE:C3
Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Certificate serial: 04EF
Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/14A07422D45E11EEB37CB639C4F9AE02.roa
Signing time: Fri 14 Nov 2025 22:44:26 +0000
ROA not before: Fri 14 Nov 2025 22:44:26 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 131495
IP address blocks: 103.175.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Validity
Not Before: Nov 14 22:44:26 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6917b0ca-5f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:e6:b4:93:5d:b8:f0:ca:68:65:6f:e2:2b:
05:0e:1b:33:c7:d4:8c:ac:16:a8:e8:f1:9c:62:7d:
07:ea:f6:dc:37:d5:6c:23:1d:8f:28:3d:91:85:e0:
c8:20:79:1c:75:08:c4:99:15:64:ae:91:92:64:6d:
a7:11:87:00:ec:8e:86:a1:fd:3c:92:93:81:4d:f1:
d5:43:21:9f:3f:0a:0a:a7:09:89:54:60:01:d8:64:
3d:91:3a:70:d5:59:12:5f:19:ec:c6:71:0f:e3:fb:
6e:7c:a3:e2:93:70:5b:88:b8:3d:27:bb:cc:a3:79:
3f:02:b4:e5:a1:20:59:e5:3c:d9:65:93:2b:6e:3a:
a8:8c:23:7f:9e:5f:9b:6d:89:c9:43:7f:4b:1c:84:
97:b8:c4:c7:72:26:f9:ae:92:21:b2:bb:82:4a:7b:
15:5e:6c:9f:4d:1b:bf:9e:c9:9f:7e:ee:5c:25:e8:
75:a1:d7:10:b3:68:57:f1:bd:37:9d:33:20:c8:4b:
aa:28:86:96:c9:3b:74:cd:ad:2c:30:68:29:52:c6:
fa:e1:9c:89:52:38:db:af:44:6d:39:99:0f:62:d7:
77:2d:b7:9d:15:aa:f8:50:fa:73:70:c3:d3:de:32:
8e:77:e3:c4:30:21:98:af:44:82:17:e2:6b:d2:8c:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:51:3F:68:2F:DC:3C:06:82:A9:CA:3E:51:AA:B8:16:51:F6:EE:C3
X509v3 Authority Key Identifier:
keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/14A07422D45E11EEB37CB639C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.197.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a7:2b:59:46:b2:cf:5c:8c:a0:9f:6e:bf:45:c0:5e:da:47:
ca:f8:c7:7e:6a:39:b9:d6:28:ee:78:05:ee:18:51:21:2d:d6:
e5:7f:75:59:e4:08:0a:1e:e6:91:93:c3:7c:69:b8:90:bb:76:
50:79:c8:f8:37:2a:bd:ea:a3:a3:a2:f8:04:9a:91:33:56:1d:
51:e7:aa:13:73:10:bc:2b:6b:74:31:fa:d4:69:61:5e:f2:34:
86:ec:54:28:39:4c:5f:f9:95:b3:07:05:ec:92:bb:e2:66:b3:
08:5a:bb:6c:7b:ce:a3:92:7a:24:9d:b4:30:9e:07:b8:34:65:
4f:1d:25:e8:d5:6d:4e:83:77:b2:f3:34:a4:35:4f:c2:45:bc:
12:ba:17:80:a1:37:29:26:53:74:e1:e0:fd:7a:e2:e4:02:3b:
7b:86:3b:4c:ca:7d:06:73:11:28:97:45:8b:7d:c1:1a:b6:fc:
43:5c:4c:7e:4e:06:90:e8:49:fb:3b:50:6e:ad:55:b5:27:05:
8c:92:2c:33:11:7f:b6:41:39:b2:ea:93:4d:9f:85:14:f6:53:
ba:8d:39:db:36:f7:1a:4e:7c:c9:31:69:cd:5b:e9:b8:e6:d6:
10:67:66:82:96:be:97:53:27:75:02:40:5e:cc:ee:dc:95:4c:
c8:63:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:44:53 2025 by rpki-client