This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa
File: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (raw, json)
Hash identifier: XMlKN3xoWR211awSFj7o4wXNUVPU6g4tGLZ46VoBBkc=
Subject key identifier: 16:D9:2B:8B:56:B1:CD:12:4F:E1:79:68:59:1D:1B:49:C7:1F:FA:29
Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial: 08E4
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa
Signing time: Tue 02 Dec 2025 21:25:41 +0000
ROA not before: Tue 02 Dec 2025 21:25:41 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45411
IP address blocks: 58.87.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2276 (0x8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Validity
Not Before: Dec 2 21:25:41 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f5955-6507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:66:1d:91:d8:ff:8e:bb:65:e4:3c:1c:b3:
62:1a:5e:3b:2a:85:8d:13:0a:80:b4:e1:e2:8f:c1:
b2:f1:0a:98:95:a5:d7:de:d6:62:d8:a5:7c:ad:26:
1b:38:7a:45:b9:bb:db:73:85:00:fb:6e:97:ac:16:
b6:18:68:e3:93:a7:37:70:e7:4d:9f:1c:71:31:d9:
0c:21:42:0c:b7:7d:08:2d:1a:43:2b:46:9b:2c:5a:
42:88:6a:9d:f5:6c:79:a8:bd:fc:78:07:d1:53:aa:
8a:d7:9a:4c:4e:25:3e:9b:e5:7d:43:2b:2c:7e:62:
91:ed:67:66:a4:88:2f:82:37:c6:3c:98:14:38:50:
dd:d5:57:43:2a:4b:cf:dd:ec:11:4c:d7:43:97:b5:
71:6e:92:a0:ec:33:41:68:78:86:de:9a:66:b9:e2:
52:75:7a:58:a8:5d:3b:de:e4:03:d2:b3:6f:d7:a2:
6e:b7:df:11:7a:22:47:07:77:83:3e:2b:22:89:3f:
34:13:5a:67:15:9f:01:03:4a:f0:b8:33:48:61:90:
4d:51:80:02:08:3a:ec:c0:d9:f7:a5:10:88:39:10:
d0:c6:64:1d:ea:e2:ca:e7:ef:35:19:24:64:0b:f5:
01:13:8f:a8:19:98:a8:ba:01:6b:7d:b6:64:05:0d:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:2B:8B:56:B1:CD:12:4F:E1:79:68:59:1D:1B:49:C7:1F:FA:29
X509v3 Authority Key Identifier:
keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/5A034FE6BD9011EF8EBE9D64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.87.4.0/23
Signature Algorithm: sha256WithRSAEncryption
02:5d:29:a9:68:8d:b6:aa:44:ce:84:13:30:80:9f:1b:5d:60:
49:5b:19:6e:3b:06:64:20:9b:66:f3:de:65:09:e9:a7:86:3d:
6e:00:42:e7:30:29:2a:fb:e6:64:dd:52:84:5c:e7:11:ca:81:
40:4c:98:a9:74:bc:99:3a:26:4f:20:e6:89:31:89:bd:35:47:
08:e2:1b:14:25:52:e6:71:63:03:18:b9:de:21:05:ae:c9:35:
4d:f9:dc:86:7f:96:8a:e0:fa:cf:ce:1b:70:e6:a7:2d:95:f0:
fb:66:5c:f8:21:b2:90:b3:42:6d:dd:e1:12:69:38:1c:80:8b:
d4:f9:17:ac:a7:60:0f:0f:2b:dd:ac:26:50:59:e2:7a:c5:e9:
79:ce:4a:4d:a9:0d:d5:57:90:1b:f9:0c:03:39:9e:b2:27:f3:
e2:20:00:d0:c0:ec:df:e6:f7:d7:e3:81:e9:2b:6f:9c:6a:16:
ce:bf:90:a3:32:de:95:54:a9:21:fe:8e:b9:e0:6a:9d:50:0b:
4a:f7:e2:2f:57:84:2c:71:9e:02:30:d3:18:c2:e0:cb:ef:c2:
7c:9b:c4:72:94:db:dc:7c:33:7d:58:f3:de:9e:ad:6f:58:21:
a4:e0:f4:2b:40:0f:9c:8b:ff:0c:42:d8:86:90:56:32:6c:12:
07:46:18:d0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy
NDE3ODMxNzkwHhcNMjUxMjAyMjEyNTQxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJmNTk1NS02NTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpBmHZHY/467ZeQ8HLNiGl47KoWNEwqAtOHij8Gy8QqYlaXX3tZi2KV8rSYb
OHpFubvbc4UA+26XrBa2GGjjk6c3cOdNnxxxMdkMIUIMt30ILRpDK0abLFpCiGqd
9Wx5qL38eAfRU6qK15pMTiU+m+V9QyssfmKR7WdmpIgvgjfGPJgUOFDd1VdDKkvP
3ewRTNdDl7VxbpKg7DNBaHiG3ppmueJSdXpYqF073uQD0rNv16Jut98ReiJHB3eD
PisiiT80E1pnFZ8BA0rwuDNIYZBNUYACCDrswNn3pRCIORDQxmQd6uLK5+81GSRk
C/UBE4+oGZiougFrfbZkBQ2L3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBbZK4tW
sc0ST+F5aFkdG0nHH/opMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1
RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI0RkUvQ0Y0QTEwRUE4NUUxMTFFQkFGQjUxRTg0QzRGOUFFMDIvNUEwMzRGRTZC
RDkwMTFFRjhFQkU5RDY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAE6VwQwDQYJKoZIhvcNAQELBQADggEBAAJdKalojbaqRM6E
EzCAnxtdYElbGW47BmQgm2bz3mUJ6aeGPW4AQucwKSr75mTdUoRc5xHKgUBMmKl0
vJk6Jk8g5okxib01RwjiGxQlUuZxYwMYud4hBa7JNU353IZ/lorg+s/OG3Dmpy2V
8PtmXPghspCzQm3d4RJpOByAi9T5F6ynYA8PK92sJlBZ4nrF6XnOSk2pDdVXkBv5
DAM5nrIn8+IgANDA7N/m99fjgekrb5xqFs6/kKMy3pVUqSH+jrngap1QC0r34i9X
hCxxngIw0xjC4MvvwnybxHKU29x8M31Y896erW9YIaTg9CtAD5yL/wxC2IaQVjJs
EgdGGNA=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:44:42 2025 by rpki-client