This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/32EE2B68005411F08A6FEB4BC4F9AE02.roa
File: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (raw, json)
Hash identifier: lmcfypgvF/mtoKjvnXLn6HPlmTzNJ54zQXihVqd1hIM=
Subject key identifier: 91:88:CB:E2:F3:58:64:CA:16:C3:B9:81:2F:CC:4F:8A:24:DC:59:68
Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Certificate serial: 86
Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/32EE2B68005411F08A6FEB4BC4F9AE02.roa
Signing time: Tue 25 Nov 2025 04:52:03 +0000
ROA not before: Tue 25 Nov 2025 04:52:03 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 36352
IP address blocks: 203.25.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Validity
Not Before: Nov 25 04:52:03 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692535f3-dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ad:a4:bb:4d:a1:cf:a3:50:f9:8a:1c:7c:4d:
80:a3:ce:ab:17:e8:a9:68:69:36:52:a2:88:74:7a:
04:29:5f:47:11:30:69:9b:77:00:c3:f2:4b:70:9c:
ba:16:0f:a5:00:55:86:02:32:ef:0d:1c:cb:07:0b:
40:40:5b:ec:f0:10:fb:ab:0c:bc:53:ac:49:a1:bc:
76:eb:3a:9c:da:03:61:16:02:d4:89:ef:17:e3:d5:
2d:bf:5d:8f:30:e0:f7:6f:b3:15:d9:1f:24:a8:f1:
b1:80:a3:f1:81:49:85:6b:c5:58:9b:89:59:b9:f9:
9b:0c:55:5a:3e:f5:e6:3c:a7:de:2a:2d:93:55:6e:
ff:13:64:9f:71:f4:77:39:82:ad:49:65:00:cf:92:
f7:60:aa:19:ef:5c:fe:ba:f9:cf:df:95:5d:7d:13:
63:3b:cc:60:64:27:ec:b3:f3:5d:bd:c6:67:25:7e:
b5:50:32:9f:8b:e0:a0:40:73:7c:68:dc:7a:20:1b:
4e:b5:5d:41:e7:e8:8d:a1:39:ea:2c:83:9c:0e:d1:
d1:3c:17:e1:27:26:e8:62:70:1c:15:2b:cd:38:31:
3e:73:48:da:57:7f:91:94:4f:23:e5:cd:c5:cf:8d:
33:6a:ac:32:e2:9b:f2:b9:aa:97:17:6f:d2:df:09:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:CB:E2:F3:58:64:CA:16:C3:B9:81:2F:CC:4F:8A:24:DC:59:68
X509v3 Authority Key Identifier:
keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/32EE2B68005411F08A6FEB4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.25.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cb:e5:f6:ef:30:0e:04:2f:61:cd:d9:d2:72:98:42:17:e5:
e3:44:9e:91:74:35:a1:0b:ba:85:c3:46:db:11:8e:f8:e3:a4:
2f:fc:40:01:72:1c:d7:0c:13:f3:87:2e:64:7b:9c:1e:d0:e4:
af:c4:6b:f4:ef:f3:f2:ec:36:04:57:84:7a:c3:b6:e1:cc:9b:
bc:d3:83:93:ac:64:9d:65:fd:e2:d5:31:6b:27:ff:03:9d:5a:
a3:93:9c:9f:0b:6a:27:95:8f:3a:df:ab:90:e5:f6:7f:b9:66:
1c:b8:77:56:1b:e5:d0:a3:8b:60:77:c6:7b:04:11:b9:2b:40:
1c:01:40:8c:1b:78:4f:1b:11:26:2d:c9:91:3a:d1:b7:1a:66:
a3:c6:e6:86:26:19:87:c8:80:13:58:3d:e0:3e:d6:61:ba:00:
a1:76:a5:6d:ba:ab:17:0a:a2:cc:5f:02:dd:81:c7:76:93:d9:
ed:57:70:38:27:cb:6e:30:5e:5e:42:f7:9b:b6:58:a4:a4:1a:
3e:94:fe:de:1e:6f:94:f2:2b:ff:a2:24:eb:3e:4c:63:56:04:
67:3b:2d:72:91:18:60:4d:37:fc:fd:d1:fc:9b:32:09:ac:41:
75:0d:4d:3e:00:47:d4:18:b7:ba:18:45:ac:1f:fc:48:b5:7b:
6e:70:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:11:51 2025 by rpki-client