This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
File: DB120D6EC34A11EB9559E184C4F9AE02.roa (raw, json)
Hash identifier: /m3np215OehHUCdDTNchzJpCWnkgfvYQ66txJ67HLU4=
Subject key identifier: 16:9D:DF:4C:80:F8:0E:0E:06:15:E0:C8:41:23:3B:A9:3D:26:36:6B
Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial: 08E3
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
Signing time: Tue 02 Dec 2025 21:25:41 +0000
ROA not before: Tue 02 Dec 2025 21:25:41 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 142143
IP address blocks: 202.83.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Validity
Not Before: Dec 2 21:25:41 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f5954-c5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:58:d5:42:dd:45:05:e6:07:9d:3e:fb:4c:
a8:fc:26:a4:ec:53:30:b5:2e:3b:6e:a4:c9:b4:4b:
85:a7:0e:72:05:a7:40:5b:e9:82:30:a0:34:81:3c:
9f:51:f6:18:42:85:a5:77:ab:22:ef:b8:86:25:07:
12:3d:41:a5:dd:bc:8f:77:33:87:aa:dd:09:64:9e:
36:ec:76:f5:cc:dd:55:62:12:32:5e:d5:9a:a4:ca:
20:5f:f9:f7:66:a3:a2:de:96:4e:07:6f:bf:1e:a1:
ec:ad:a6:33:a3:be:09:b6:93:b2:9a:f5:95:61:24:
bd:02:d4:77:12:07:b7:aa:2d:77:17:3c:43:57:94:
a8:a3:be:47:f0:7f:b5:97:2c:5f:8e:1d:76:c8:71:
76:82:eb:12:00:94:4b:a4:07:eb:9e:58:16:ec:04:
b3:49:b7:52:74:b6:14:e9:ce:49:4b:95:ce:25:c6:
96:38:2a:9e:79:bd:f3:0e:55:07:6c:89:91:db:e9:
d5:43:b8:b0:d1:7e:ff:78:de:39:97:e5:d9:3b:10:
89:05:3e:f0:78:0c:e1:d4:7e:c7:02:b5:64:c8:eb:
47:a8:56:19:dd:50:7a:40:ff:30:54:6e:50:30:40:
93:14:89:92:b0:7e:60:af:a5:0f:7f:f1:7b:94:f3:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9D:DF:4C:80:F8:0E:0E:06:15:E0:C8:41:23:3B:A9:3D:26:36:6B
X509v3 Authority Key Identifier:
keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.83.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:21:d5:fe:48:c8:03:21:6e:fa:dd:82:88:2d:de:e3:3a:0c:
08:09:e0:51:68:60:5e:42:74:84:c8:ab:fa:d1:38:95:bc:0e:
b0:c0:55:e3:cf:6e:43:1d:d6:60:15:8b:4e:07:3f:09:ff:93:
3c:1e:19:a4:d0:56:ab:ca:6a:d4:af:86:a5:64:63:06:41:18:
7d:01:cc:55:b0:37:a3:bf:5d:67:d3:57:80:b0:c1:9c:8c:ee:
2a:89:3b:af:81:87:22:d7:31:37:27:ed:52:6a:e8:39:21:57:
4c:96:02:f9:3b:32:f3:1d:12:e6:3b:01:a0:a3:13:72:d4:3a:
6e:81:af:cd:1c:27:a0:77:8a:ac:35:2b:28:38:ad:e4:f2:36:
80:fd:ae:74:82:f1:f9:a1:f3:c7:80:b9:b6:04:18:22:98:bb:
0b:fa:19:d5:2e:26:f7:db:52:93:50:8a:87:e3:2a:a9:a0:07:
1d:18:5b:6d:ac:51:b8:38:2e:90:79:c0:af:5b:79:1d:7a:38:
59:a6:b2:fd:fc:18:16:00:82:8a:76:f8:2a:bc:6e:28:a4:17:
2c:7a:8f:bc:e4:d1:1e:59:f1:31:1a:5c:f0:e3:a2:46:ef:79:
1b:6a:87:2e:87:31:3f:3e:15:17:75:1f:36:c5:b2:ac:ab:7e:
ea:30:83:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:55:19 2025 by rpki-client