This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/55D7D802475A11F0B3C02112C4F9AE02.roa
File: 55D7D802475A11F0B3C02112C4F9AE02.roa (raw, json)
Hash identifier: mV1bCNXfD7w4ttjCRjT99a/5iAZCupAPYyeXcu8Us3k=
Subject key identifier: DC:83:81:A8:E3:63:8C:18:B0:29:E7:2E:BB:AD:80:06:2B:76:3A:37
Certificate issuer: /CN=A91D2ACF/serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB
Certificate serial: 0A72
Authority key identifier: C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/55D7D802475A11F0B3C02112C4F9AE02.roa
Signing time: Wed 12 Nov 2025 19:09:26 +0000
ROA not before: Wed 12 Nov 2025 19:09:26 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 149175
IP address blocks: 103.144.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl
rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2674 (0xa72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2ACF, serialNumber=C9ED4B7676E3F5A5B1F8A6A0DD7E221B63E534AB
Validity
Not Before: Nov 12 19:09:26 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6914db65-0c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:5c:55:9f:95:78:09:e9:f3:85:42:69:76:
37:3c:30:c9:fa:87:65:cc:0e:59:7d:13:f0:39:dd:
e5:7f:ad:d1:ee:d8:b7:81:bc:cb:fe:c3:19:19:6f:
70:11:99:c9:d8:6f:79:f8:62:4e:77:12:93:e1:40:
5d:f4:ce:bd:f6:73:8e:3a:f9:2b:22:e6:82:02:54:
4b:3f:16:dd:06:e4:d5:46:0d:7c:e2:20:03:cd:79:
80:79:c7:f2:56:fe:cb:46:9a:73:8c:bb:b5:ca:13:
f4:08:8f:31:6e:f3:55:25:7b:77:ac:91:34:50:3d:
d1:95:21:60:09:55:9c:4e:08:3d:32:8e:1b:12:38:
b5:73:65:89:f0:de:50:24:12:d9:24:97:c5:39:d0:
4f:44:e7:86:67:c0:bc:10:3e:17:61:7b:41:7a:d4:
64:07:e5:a3:61:95:a2:fc:6d:37:87:66:ae:d8:ae:
39:a0:94:3a:d5:de:6c:f7:24:58:78:c0:4e:b7:f6:
55:91:a6:bb:94:30:80:f5:6d:6d:f2:e3:67:e9:66:
8f:66:61:9a:26:d2:8a:21:b9:f4:43:1b:3b:5f:77:
ad:d5:6b:cd:dd:1b:5a:5e:ab:1e:e3:ac:f2:7b:83:
f7:ee:48:29:25:5c:20:c2:ec:7d:a3:0b:97:d4:07:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:83:81:A8:E3:63:8C:18:B0:29:E7:2E:BB:AD:80:06:2B:76:3A:37
X509v3 Authority Key Identifier:
keyid:C9:ED:4B:76:76:E3:F5:A5:B1:F8:A6:A0:DD:7E:22:1B:63:E5:34:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ye1Ldnbj9aWx-Kag3X4iG2PlNKs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ACF/5AC62B2A73E311EA9B59436EC4F9AE02/55D7D802475A11F0B3C02112C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e6:6f:f0:a0:34:75:b6:82:40:bc:80:72:c0:80:18:bd:e9:
8d:bb:01:82:99:04:48:f4:24:8a:80:16:25:e1:54:bd:59:89:
07:a2:57:7c:eb:f8:fe:1f:46:6d:d8:ca:23:34:19:c6:a9:7c:
d5:85:71:80:71:e3:20:f3:b1:a1:93:47:94:f6:75:cd:37:f5:
4f:20:c1:98:60:96:22:7a:3e:51:0c:1c:9e:f5:1e:ed:6e:46:
a0:f1:28:7c:59:72:e9:bc:9a:f8:e4:c5:f2:83:07:a0:78:26:
43:de:9e:6f:ba:d9:fa:45:c1:b3:b2:89:de:ed:4f:01:a7:94:
82:78:dc:df:20:28:44:fa:62:8f:e1:0e:0b:4c:20:2c:5a:93:
2d:c2:e1:f8:29:ee:33:9d:52:c1:95:46:80:81:e5:1a:ff:c3:
8b:6c:5a:5c:aa:70:fa:38:a6:5e:53:9f:c5:e1:d3:73:6b:15:
f6:43:6f:33:65:39:46:64:40:38:fa:b7:68:c9:8b:5d:5e:76:
90:9b:20:27:9b:cd:53:0a:e7:eb:b6:4e:30:2d:a8:ee:b7:fb:
8f:54:d3:29:f1:55:74:43:3c:a6:95:57:ed:1a:d9:9f:95:35:
37:c6:df:8d:4b:28:af:e4:68:49:fc:ef:6e:03:34:92:d9:22:
11:ae:79:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:08:13 2025 by rpki-client