This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/A60C101AFB8411ECB7FF456FC4F9AE02.roa
File: A60C101AFB8411ECB7FF456FC4F9AE02.roa (raw, json)
Hash identifier: Qqe/3yjVxw2fDJJe2KN34hOiy8f6bsKaNvFnKDvrg90=
Subject key identifier: 5D:83:6C:2F:C4:5B:8D:46:AE:10:BD:FA:1A:00:67:4E:6D:AE:43:76
Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
Certificate serial: 0306
Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/A60C101AFB8411ECB7FF456FC4F9AE02.roa
Signing time: Tue 18 Nov 2025 23:46:09 +0000
ROA not before: Tue 18 Nov 2025 23:46:09 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38286
IP address blocks: 122.252.176.0/21 maxlen: 24
2401:cb00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl
rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E15EA, serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E
Validity
Not Before: Nov 18 23:46:09 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691d0541-0cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:6f:cc:c0:ce:b9:ec:2d:a1:6b:de:2a:b0:
d6:51:b1:5c:e5:0a:b5:9e:eb:9a:4c:95:aa:38:ac:
1c:8b:83:18:41:17:5a:ee:3c:2a:fa:3c:b3:d5:af:
b3:e5:e4:b7:60:a5:68:b9:30:33:50:68:87:75:fa:
e9:19:eb:2b:12:a1:af:0b:82:d1:cd:fe:b5:05:9b:
48:3e:26:95:7e:f0:dc:ba:35:48:55:9a:bd:41:e9:
fc:2b:ce:43:44:58:5e:89:fc:69:f9:f4:63:83:f2:
4a:e7:bb:58:00:cb:0f:1b:6d:b0:10:f3:80:25:ed:
91:7b:bb:18:20:ed:bf:03:86:87:74:56:e4:32:28:
7a:60:37:d7:5f:5b:62:6f:23:b4:f4:76:d5:50:19:
e2:82:c7:61:8d:9c:87:1d:cc:53:80:16:01:da:fd:
40:c2:87:4b:6d:f7:c5:e9:ee:47:09:ff:b3:34:66:
c4:89:9a:6a:b8:cc:d6:da:8f:57:44:68:1f:fc:b7:
23:9d:a8:5a:78:8d:29:cc:a4:29:b0:cb:12:ed:69:
71:7e:ae:7c:0c:18:b9:42:4c:e9:51:71:5c:21:c8:
d4:99:d1:04:9b:72:2a:ef:0e:2a:1b:d7:ff:f3:42:
3d:f6:df:5c:08:54:85:df:1a:66:54:4a:91:2e:c0:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:83:6C:2F:C4:5B:8D:46:AE:10:BD:FA:1A:00:67:4E:6D:AE:43:76
X509v3 Authority Key Identifier:
keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/A60C101AFB8411ECB7FF456FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.252.176.0/21
IPv6:
2401:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
91:4d:7f:ca:21:9a:86:d4:ea:1c:56:e1:3d:86:d8:0d:2a:91:
47:e5:b2:50:9a:55:c0:8b:0c:6e:f9:d4:9d:61:8f:b3:00:7e:
7a:58:92:c9:8a:73:1e:2b:f7:5b:b7:bf:1d:28:08:e7:48:d0:
38:7e:a9:8c:83:ce:b0:82:69:ad:55:ee:87:92:8a:cb:43:b7:
9b:23:20:c4:c6:4d:a8:2a:3f:a7:34:f6:66:bf:80:fd:2c:fa:
25:bf:c6:b4:94:24:63:73:3d:49:02:db:a6:c4:51:8a:4d:c7:
02:30:f6:bc:7e:15:48:96:a7:12:bf:53:8e:21:98:4f:31:89:
89:5f:c6:1f:52:5d:80:91:7d:8b:42:75:41:c7:23:9b:10:ed:
18:92:e9:3a:b6:46:38:11:83:30:74:73:82:37:6d:f9:4d:79:
a6:94:b5:f8:d6:fc:8c:58:f5:b6:cd:77:38:93:b3:88:0e:29:
12:25:e9:99:35:bf:f7:70:fc:8f:09:34:1b:01:59:6b:95:3a:
53:2d:42:f0:ad:c1:24:ae:8e:20:8c:75:b4:c0:3a:f8:59:77:
fc:9b:c2:ed:04:fb:7d:f8:c1:41:cc:c7:2b:d2:aa:10:f0:ff:
9e:32:d4:52:6f:df:b8:36:54:0f:90:3c:ee:9b:9a:35:8b:c5:
71:c6:a6:49
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD
RjhCNzc2MEUwHhcNMjUxMTE4MjM0NjA5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFkMDU0MS0wY2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVBvzMDOuewtoWveKrDWUbFc5Qq1nuuaTJWqOKwci4MYQRda7jwq+jyz1a+z
5eS3YKVouTAzUGiHdfrpGesrEqGvC4LRzf61BZtIPiaVfvDcujVIVZq9Qen8K85D
RFheifxp+fRjg/JK57tYAMsPG22wEPOAJe2Re7sYIO2/A4aHdFbkMih6YDfXX1ti
byO09HbVUBnigsdhjZyHHcxTgBYB2v1AwodLbffF6e5HCf+zNGbEiZpquMzW2o9X
RGgf/LcjnahaeI0pzKQpsMsS7Wlxfq58DBi5QkzpUXFcIcjUmdEEm3Iq7w4qG9f/
80I99t9cCFSF3xpmVEqRLsCPaQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFF2DbC/E
W41GrhC9+hoAZ05trkN2MB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC
ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE1RUEvRjFBN0UyRjRGQjgxMTFFQzlDNDEyNjQ0QzRGOUFFMDIvQTYwQzEwMUFG
Qjg0MTFFQ0I3RkY0NTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAN6/LAwDQQCAAIwBwMFACQBywAwDQYJKoZIhvcNAQELBQAD
ggEBAJFNf8ohmobU6hxW4T2G2A0qkUflslCaVcCLDG751J1hj7MAfnpYksmKcx4r
91u3vx0oCOdI0Dh+qYyDzrCCaa1V7oeSistDt5sjIMTGTagqP6c09ma/gP0s+iW/
xrSUJGNzPUkC26bEUYpNxwIw9rx+FUiWpxK/U44hmE8xiYlfxh9SXYCRfYtCdUHH
I5sQ7RiS6Tq2RjgRgzB0c4I3bflNeaaUtfjW/IxY9bbNdziTs4gOKRIl6Zk1v/dw
/I8JNBsBWWuVOlMtQvCtwSSujiCMdbTAOvhZd/ybwu0E+334wUHMxyvSqhDw/54y
1FJv37g2VA+QPO6bmjWLxXHGpkk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:44:47 2025 by rpki-client