This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/71921B808DBD11EBB4566432C4F9AE02.roa
File: 71921B808DBD11EBB4566432C4F9AE02.roa (raw, json)
Hash identifier: w9Ld0KkWk+HSLE94pTgnMmO75l3YO/TEPXrwE1OHV3U=
Subject key identifier: 95:94:91:C7:D0:84:DD:79:D6:88:C8:FF:C3:DA:7E:6D:2E:9C:9B:60
Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial: 08E2
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/71921B808DBD11EBB4566432C4F9AE02.roa
Signing time: Tue 02 Dec 2025 21:25:40 +0000
ROA not before: Tue 02 Dec 2025 21:25:39 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137536
IP address blocks: 123.200.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274 (0x8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Validity
Not Before: Dec 2 21:25:39 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f5953-47ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:7d:f3:4d:1e:7a:30:70:f5:05:9a:29:b1:
57:c8:06:05:a0:63:e5:09:9e:63:de:7b:dd:aa:86:
ba:43:e3:42:8f:d9:6f:0d:64:40:97:72:85:50:5f:
c9:d7:c4:cf:61:1c:58:09:af:07:cf:3f:55:c5:cf:
a9:f4:3c:0b:6c:2e:ae:11:9d:a2:d5:ce:31:35:00:
af:b3:8d:be:48:5d:e3:60:f0:f2:63:ce:4c:00:c2:
bb:22:4f:5c:3c:0a:0a:45:43:4c:a5:70:bd:be:8b:
40:ba:cc:da:b2:89:6e:c8:81:66:8a:43:2c:d6:26:
a8:b8:d9:a3:5e:fc:b5:c0:8f:24:02:f4:0d:43:a7:
a4:14:9d:1e:f1:f9:06:5b:bd:6e:90:ae:d1:fa:0f:
5c:d4:50:72:fc:f7:5d:df:df:a8:01:a0:11:40:87:
e4:6e:fc:1a:91:f6:20:7b:82:ea:d8:32:a8:2d:34:
84:6b:6f:e4:6d:f2:ec:28:65:09:1f:48:6e:a6:f4:
cb:c4:8f:c4:8d:86:bd:ab:47:19:b4:95:ba:6f:97:
3e:e1:17:2b:2a:2d:c1:f9:7b:aa:b9:3f:c8:f6:ab:
d7:fe:6c:ab:53:1f:31:ff:dd:b0:76:5a:2c:f7:7c:
0d:3f:ea:55:3f:eb:4d:7c:86:b2:f6:50:1f:ea:6c:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:91:C7:D0:84:DD:79:D6:88:C8:FF:C3:DA:7E:6D:2E:9C:9B:60
X509v3 Authority Key Identifier:
keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/71921B808DBD11EBB4566432C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.200.136.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d6:0a:77:ac:78:df:8b:22:02:b9:d1:1d:5f:2f:c6:a7:d7:
1c:8b:16:92:44:a0:f0:fb:d4:87:4b:ac:22:73:d6:66:2e:e8:
d8:df:ae:7f:b2:da:bc:10:5f:d4:b3:ec:3c:af:8b:0c:62:fd:
2c:0a:43:a5:01:01:3c:15:24:cd:0e:fa:01:b4:aa:4a:fc:52:
b2:fc:80:13:14:1d:75:4b:25:9d:67:90:91:b7:04:62:6a:42:
16:e7:fd:4a:1f:c0:df:9c:12:51:52:e6:8b:27:92:2b:c1:c9:
27:54:6f:a0:b5:16:e9:88:e6:bd:31:9e:e5:4c:bd:a4:e3:f2:
5e:aa:8e:1a:af:92:1d:31:bf:fb:87:ab:70:7b:4d:71:d5:5b:
4d:29:9c:55:2a:3b:7c:f0:53:2e:5c:92:2c:37:e3:cd:3a:ba:
74:1e:6c:4f:d5:66:bc:4c:47:c2:88:ff:b0:16:b8:0b:b0:0f:
c2:dd:30:b4:47:43:07:91:97:43:b8:ea:98:9e:01:0c:7d:09:
0e:0a:24:0f:41:46:36:fb:5e:23:25:28:e9:c9:bf:8d:5c:16:
0a:20:9a:8f:19:12:04:bd:bc:93:aa:9f:68:34:c1:b3:cf:61:
d4:0c:85:b8:5b:20:01:94:7e:3a:a4:ba:a1:98:c2:a0:c2:19:
25:45:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:15:30 2025 by rpki-client