This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
File: 15F2CAD0D0AD11F08058D727C4F9AE02.roa (raw, json)
Hash identifier: /PKG8wIjekSYApgOkwbdLrLLH3ha9coEuDnaItwW/mA=
Subject key identifier: 89:CE:D6:6B:64:93:8A:7A:51:F5:49:4A:D1:F0:1A:98:71:55:56:30
Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Certificate serial: 01F2
Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
Signing time: Thu 04 Dec 2025 01:03:47 +0000
ROA not before: Thu 04 Dec 2025 01:03:47 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 134143
IP address blocks: 157.85.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Validity
Not Before: Dec 4 01:03:47 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6930ddf2-a6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:6f:1d:17:bc:c4:fa:08:5a:c2:75:74:18:
30:73:e8:05:dc:f4:54:94:04:e8:ef:dd:b1:0c:52:
cb:40:91:cc:8d:1b:42:93:78:fc:8c:ce:c0:45:21:
27:b9:8f:73:e5:79:c4:bc:c5:6c:98:42:29:54:35:
c1:eb:7b:ab:2c:f3:09:86:1a:49:ba:6e:d5:a6:f9:
b9:bb:02:37:56:cd:bf:12:37:c5:86:bf:91:08:9f:
9f:29:f1:9f:a2:4a:6f:16:53:42:b0:77:c9:08:af:
6b:e5:f3:4a:16:48:bc:fd:52:9a:73:34:55:3a:2e:
b9:de:51:3a:9b:82:c4:66:ae:f1:b2:e2:b9:c9:75:
fa:73:eb:58:1d:4d:23:b4:af:98:64:30:86:0e:8c:
cb:3a:b0:b0:5f:0f:6c:68:fd:99:68:04:ce:17:93:
90:d8:e2:e2:ed:3b:a0:4a:1c:7e:e8:77:31:ae:81:
51:43:d6:e0:a3:18:c6:8e:09:55:e1:ce:52:c7:12:
85:73:57:b7:3c:fe:5d:cb:c0:20:55:ad:c7:e2:9a:
ae:3e:46:08:67:a5:dd:37:17:07:95:ef:57:79:5e:
f1:40:d6:4d:65:bc:f4:06:14:ec:c9:49:3b:1a:10:
14:ee:18:20:2a:f0:d4:b3:8f:b5:a7:8c:f5:7a:f4:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:D6:6B:64:93:8A:7A:51:F5:49:4A:D1:F0:1A:98:71:55:56:30
X509v3 Authority Key Identifier:
keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.85.72.0/21
Signature Algorithm: sha256WithRSAEncryption
48:11:0e:26:c5:17:8c:4a:e1:09:d7:92:76:93:89:e3:1f:09:
9f:7e:98:a8:c2:d0:d7:83:4d:b0:e0:c3:0b:5d:64:ff:92:85:
ce:08:55:d3:68:1a:c8:bd:10:32:c0:84:fa:61:87:4e:b9:10:
08:eb:58:bf:3c:41:db:26:21:e7:ab:a9:77:24:4e:51:94:8c:
2a:b7:ed:da:87:96:1d:f8:97:c4:ff:81:c2:61:cf:6c:1c:67:
95:20:6f:b9:ff:1a:76:ea:cc:70:c2:ea:68:e4:ca:42:df:df:
32:dc:a5:b6:ad:6e:ec:c7:df:11:67:ad:5b:90:11:e3:af:d0:
4b:ea:86:d4:2f:59:d1:fe:92:db:e8:32:c1:46:c7:e4:21:57:
17:b9:e4:cb:b9:2a:58:97:66:67:f0:ae:40:62:1c:ba:9b:4c:
b2:36:3c:9e:8d:d8:d7:a3:b0:c0:b9:05:16:5c:ad:be:53:fd:
24:3d:2c:49:81:25:fa:57:91:e8:dc:f3:4c:b8:72:c3:d1:3a:
70:fd:25:c7:9d:c1:8a:ff:39:36:56:26:45:fd:75:4d:ec:be:
76:64:4d:5e:b1:79:79:fe:98:2e:c3:1b:f9:4a:12:6e:34:3a:
a6:3c:a7:f6:2d:f8:8d:b4:51:89:71:f4:93:95:f0:5f:c0:0c:
59:c1:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:13 2025 by rpki-client