This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/091435C84FA911EFB86F4D40C4F9AE02.roa
File: 091435C84FA911EFB86F4D40C4F9AE02.roa (raw, json)
Hash identifier: UDYOsBhZuGxPbiC3JStIpRl29abp1z9bfR4dnN93V5Q=
Subject key identifier: 09:AC:F5:8B:A6:DB:23:67:C1:92:37:B1:E9:75:E7:F1:46:19:95:D5
Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial: 16F4
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/091435C84FA911EFB86F4D40C4F9AE02.roa
Signing time: Thu 04 Dec 2025 16:45:48 +0000
ROA not before: Thu 04 Dec 2025 16:45:48 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139021
IP address blocks: 43.224.152.0/22 maxlen: 24
103.43.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5876 (0x16f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Validity
Not Before: Dec 4 16:45:48 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6931babb-8386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:9c:a7:c2:c4:b8:21:e0:c1:b1:c7:58:28:
fd:d6:46:95:ac:b0:e6:73:cc:98:0e:60:18:11:2b:
cf:fa:b4:0c:b9:48:dd:87:c7:52:b2:27:3a:67:e0:
06:27:64:b2:81:38:af:9f:dc:0c:74:67:24:0b:12:
09:92:42:d5:7d:aa:99:5e:20:b5:26:62:40:a4:5b:
f1:25:a2:8f:2d:a5:f6:fa:2d:ba:e5:08:4c:f8:23:
4c:e9:3e:72:59:62:98:6f:40:4a:e9:90:34:e2:63:
88:62:a6:81:e0:79:63:60:c9:38:74:2e:2a:7c:56:
9e:0d:37:03:53:d0:1f:e2:35:45:20:c1:df:a2:6a:
3f:0f:a4:7e:43:23:0c:9b:a8:4f:07:e8:ae:b1:b0:
c2:e6:51:cb:66:47:ca:78:e1:96:62:a4:01:1a:b5:
e0:ad:86:42:f0:03:b3:44:f3:6b:2d:cc:75:6b:ab:
97:9f:06:69:c7:be:9c:19:be:2d:08:9e:29:ce:b1:
54:4e:82:a3:1c:e2:c3:34:47:d5:12:84:ca:f5:e8:
50:b1:d3:b6:b8:64:e2:2b:98:32:33:2b:18:92:20:
5a:e7:8f:ca:88:ad:db:67:26:83:7a:46:e1:a3:ee:
08:1c:40:1c:02:87:95:37:40:ff:ed:47:a7:0c:fc:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AC:F5:8B:A6:DB:23:67:C1:92:37:B1:E9:75:E7:F1:46:19:95:D5
X509v3 Authority Key Identifier:
keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/091435C84FA911EFB86F4D40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.152.0/22
103.43.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:9d:33:0b:fc:d4:26:c6:8e:60:35:66:6f:7b:29:da:32:e4:
20:30:6e:22:88:5e:db:f7:41:f5:f6:31:84:9c:3a:38:0a:87:
ab:fb:e0:ff:01:80:f3:c0:bf:cf:ce:7d:05:81:ae:0f:b6:da:
83:75:e5:22:1b:59:cd:f1:f9:dd:2c:24:8b:36:99:cc:d0:f4:
f0:ee:3f:c0:54:a7:e4:92:41:ab:dd:60:99:86:9c:e3:f9:66:
f4:a6:42:79:d2:08:26:e7:03:5e:82:aa:12:a4:2b:31:c0:c7:
45:b3:5c:70:7a:d8:00:47:b0:e4:e7:2a:d5:db:25:7e:f7:80:
9d:ba:7e:3d:20:83:d5:c1:4a:a5:72:dc:e5:30:88:ad:93:d2:
3d:40:23:8b:c0:5e:08:56:54:be:49:97:dd:47:6a:78:4f:88:
cb:18:75:4a:b4:6e:d7:d0:38:2e:c6:3e:30:12:f4:c6:4a:01:
8d:39:36:fa:b0:6a:53:33:ca:cf:1a:15:16:c3:32:4c:a0:7a:
f7:f3:66:47:0c:1f:9b:ea:95:4b:85:92:0f:5b:12:eb:63:13:
20:85:0f:6c:a2:4a:ed:9f:c1:ba:e4:79:3e:1b:7d:ee:63:3f:
76:ff:a2:0c:92:11:39:19:2b:0d:0b:8c:5f:11:c7:75:bc:a2:
cd:73:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:45:52 2025 by rpki-client