This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4D5247EEA4C911E782854F50C4F9AE02.roa
File: 4D5247EEA4C911E782854F50C4F9AE02.roa (raw, json)
Hash identifier: Q4QnXloRUzx2A7Tu4hex2E+VF8wZbHiTAEA4RdwhS1w=
Subject key identifier: 17:BF:CD:CE:A0:9D:48:3C:A5:C3:92:0B:6C:D3:82:24:E5:1E:B1:36
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 3667
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4D5247EEA4C911E782854F50C4F9AE02.roa
Signing time: Tue 02 Dec 2025 14:41:52 +0000
ROA not before: Tue 02 Dec 2025 14:41:52 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7544
IP address blocks: 111.125.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13927 (0x3667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: Dec 2 14:41:52 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692efab0-0472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:81:05:fa:41:99:b8:12:c9:da:a7:d5:0b:
c1:2d:40:01:7b:d9:7f:01:75:52:00:ae:e3:3b:e6:
2e:20:5d:e4:65:6c:d9:4d:25:a9:4c:af:8c:3f:60:
78:27:79:1c:a2:f3:85:6a:1b:0a:bb:ce:52:cb:dc:
c1:45:60:4b:e5:de:e5:01:4b:d0:85:ee:6a:c8:6b:
84:72:79:5d:c6:b4:78:4c:2b:b6:96:f3:3a:10:a8:
ce:d1:f6:55:52:f9:ec:55:14:71:75:78:15:20:c7:
6e:7e:bb:85:5c:2d:65:d3:6f:d7:09:ee:d1:50:15:
6b:e6:66:bf:1b:1a:8b:fa:3f:4b:9a:1a:7c:9e:d9:
8f:01:a6:6f:78:5e:05:de:72:24:c1:5a:a6:a1:72:
d5:6e:5d:50:cf:cb:a5:a9:29:86:d5:42:eb:d8:a3:
08:63:9c:63:85:a9:6f:e5:1c:73:cf:76:ec:f5:20:
7d:9c:41:9b:a3:79:79:32:37:08:62:ff:c3:fd:6a:
88:ed:a4:f4:fd:75:57:8d:f9:10:0e:1b:1a:9d:e8:
dc:75:db:e5:3f:b8:df:95:0f:12:95:33:cc:41:ff:
d4:67:d3:9e:6f:cd:8c:a3:da:d9:70:00:b6:c3:17:
36:8b:2a:7f:7a:65:e2:a6:3b:9a:e7:e9:2c:a3:b0:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BF:CD:CE:A0:9D:48:3C:A5:C3:92:0B:6C:D3:82:24:E5:1E:B1:36
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/4D5247EEA4C911E782854F50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.125.127.0/24
Signature Algorithm: sha256WithRSAEncryption
94:28:3b:64:cc:c5:49:2a:1a:af:1d:1f:9d:dd:0a:be:19:97:
31:a6:8d:63:a9:a4:b1:77:dc:93:a6:dd:54:7d:1a:da:a2:1e:
bc:4d:44:c0:af:ca:8f:b3:4d:70:64:15:66:e2:b6:83:2d:88:
04:9b:47:d8:65:57:fd:7b:61:40:68:65:1a:63:99:a8:1d:60:
74:73:7e:7c:e6:bc:ff:b4:16:97:34:90:79:69:fe:5c:24:c9:
d4:96:bc:86:c4:fa:73:8b:69:a8:3d:f6:7f:f4:26:0c:38:00:
d9:d9:b8:91:5b:98:2a:ef:c5:a4:49:09:41:d7:a7:86:2f:f5:
13:57:18:1f:5a:60:cd:a6:a3:0a:39:ec:b0:8a:bd:82:5e:23:
67:67:e8:90:6a:dd:82:e2:e7:bc:d7:ec:fb:ba:ca:7f:b3:fb:
32:4a:a5:6e:f6:de:64:0f:b7:df:9c:c9:c6:2b:e9:fb:97:c2:
0b:8e:b8:7a:40:b0:e5:de:74:59:f1:0b:9c:94:b8:b0:25:fc:
0b:84:43:d5:77:f1:b6:ca:d0:02:b3:4e:10:47:51:5b:3e:ff:
42:61:5d:63:04:ab:49:5c:e9:5d:97:96:b7:72:92:15:14:a9:
93:3d:4c:40:88:58:49:28:ee:bf:19:c4:1d:19:76:4d:f5:13:
8b:8b:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:13:52 2025 by rpki-client