This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
File: F305F43270E711EF8573CF71C4F9AE02.roa (raw, json)
Hash identifier: cNr+WwhZjmsOXR9T89SqJDdjcpnc9uLjzw+w7HDSYGg=
Subject key identifier: B4:1F:CA:C5:7D:84:27:7D:4D:31:8E:67:DE:EA:83:D1:85:AE:F8:F1
Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Certificate serial: E6
Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
Signing time: Mon 01 Dec 2025 04:02:00 +0000
ROA not before: Mon 01 Dec 2025 04:02:00 +0000
ROA not after: Mon 30 Mar 2026 00:00:00 +0000
asID: 133453
IP address blocks: 160.187.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA5B, serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Validity
Not Before: Dec 1 04:02:00 2025 GMT
Not After : Mar 30 00:00:00 2026 GMT
Subject: CN=692d1337-7a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:2f:94:52:05:7b:31:fe:e7:8e:75:2e:bd:
17:41:b1:82:bb:b3:be:36:54:e5:6b:29:9c:5b:bb:
60:18:df:27:4a:e7:07:73:9c:96:92:4e:f4:5c:97:
04:ce:1e:ec:c3:de:a2:a4:3a:21:3b:c7:7a:3d:6c:
0d:54:e4:35:78:88:d3:28:36:0c:4c:d0:b9:7e:c5:
17:58:cd:1f:65:cd:b0:98:1a:e3:b8:8e:31:18:f9:
5b:19:36:0a:42:e1:4b:ab:3f:e5:da:af:aa:b4:31:
3e:91:34:3c:d5:7e:d6:5c:e8:ff:77:78:65:60:1e:
c1:cc:4f:47:bb:44:70:b8:c6:f6:1b:a7:f7:20:a8:
6c:ab:62:f8:fa:e0:12:a0:7a:bd:37:7d:76:b3:90:
8d:9b:70:2b:60:19:92:40:90:30:3f:3c:1c:93:9c:
1b:88:39:5c:81:58:cf:27:a8:65:1a:75:02:99:21:
60:17:b8:22:69:05:c5:04:5d:db:cc:03:70:67:d2:
14:40:4a:79:cb:55:52:f2:9e:1a:7a:4c:1d:6d:4c:
4c:7c:e3:ca:71:02:32:70:e2:44:b9:37:e0:4b:9b:
cc:f1:7b:79:49:03:26:cf:d2:17:da:f5:91:8c:56:
88:ba:f9:e6:12:0d:f3:b3:ee:cd:bf:c9:99:6b:9f:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1F:CA:C5:7D:84:27:7D:4D:31:8E:67:DE:EA:83:D1:85:AE:F8:F1
X509v3 Authority Key Identifier:
keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.40.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:b0:38:ee:f4:55:34:76:51:f4:52:43:3b:74:0c:69:c5:5b:
62:06:1a:e0:31:a8:44:95:2b:21:2f:52:55:d4:9c:8b:35:d6:
15:c2:3a:2a:71:27:3a:87:cb:14:3d:ec:88:a1:58:08:02:99:
c8:d2:dc:de:8e:31:20:2b:cc:38:04:71:93:bf:8a:c7:59:cc:
09:5f:0d:00:4b:cb:41:b5:fe:6e:85:47:ba:82:ca:11:05:47:
1e:87:ff:6a:61:4f:cf:03:f8:c9:a7:f9:5a:64:72:09:59:b8:
91:42:60:e0:ba:91:79:e1:de:1f:75:99:22:7d:e2:e1:03:b5:
5a:29:95:7f:c2:cc:f9:8e:b5:4f:d8:1e:77:29:83:e9:74:23:
2f:83:ce:7f:7f:1f:31:c4:c0:43:50:61:91:21:90:1b:75:8b:
32:c8:c1:3b:3d:34:1e:60:43:22:3b:c3:7c:ff:d0:f2:b3:0f:
1b:37:4c:3e:60:58:66:94:f8:b1:4c:27:6f:97:0f:41:ac:27:
03:e9:3e:34:86:db:35:b0:6f:80:d5:b1:82:d9:1d:6c:7e:26:
f6:6c:98:40:19:88:f1:a5:a9:64:79:91:af:79:8e:59:80:39:
71:af:90:61:ec:3e:0a:9c:eb:c8:60:1e:41:a3:87:a6:14:ff:
ce:d0:10:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:16:08 2025 by rpki-client