This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/DCF8D39EB53311F0B2CCCF26C4F9AE02.roa
File: DCF8D39EB53311F0B2CCCF26C4F9AE02.roa (raw, json)
Hash identifier: rvfasAZK15JCBP7WlWL0KZXVYWFRsa4IJlRiC7/KwjQ=
Subject key identifier: 42:50:FB:8D:D5:7A:33:B3:D4:BF:C8:6B:70:FA:C4:96:15:48:F4:7A
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 0685
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/DCF8D39EB53311F0B2CCCF26C4F9AE02.roa
Signing time: Thu 30 Oct 2025 01:58:00 +0000
ROA not before: Thu 30 Oct 2025 01:58:00 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 133481
IP address blocks: 14.207.160.0/24 maxlen: 24
14.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Oct 30 01:58:00 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6902c628-557d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:e5:9a:ed:4d:d8:ac:f0:a9:6b:7c:4a:b8:
b0:65:f8:38:82:91:8a:37:a6:19:1d:9d:4b:92:a3:
3f:5c:ed:bc:c9:c6:fd:ec:da:36:e2:66:c0:c6:0a:
06:38:75:d2:0a:64:15:3d:72:fa:ec:a5:65:17:0a:
f2:b6:9f:f9:8b:77:49:53:2e:e0:42:73:5e:70:a9:
1d:38:64:17:4d:91:23:83:ff:c7:c3:f2:a7:c8:d2:
43:bd:6d:02:00:10:7b:dd:62:e9:1b:2c:f0:ca:10:
5a:9d:0a:74:c9:68:c9:94:20:4d:ae:05:f3:02:d7:
e0:05:98:6c:bf:10:34:4c:fa:1f:d9:ab:6b:71:36:
70:5d:f4:9b:59:39:9d:25:44:ab:87:20:56:2c:d7:
37:36:75:f4:61:96:b1:b9:e5:41:26:4c:db:57:20:
6b:d4:be:3c:cf:97:ae:6c:1e:55:f4:f6:fe:1d:15:
ca:24:d9:15:4a:74:1f:4a:5e:63:07:4b:d2:b7:4d:
a0:b1:4a:8e:c2:5d:cc:11:2b:75:31:d3:ed:c9:f0:
c2:52:93:13:8c:0a:47:38:09:48:18:16:5a:7d:d9:
6d:66:91:d5:61:b8:fa:93:9e:f8:00:fa:18:04:52:
6b:69:d6:b5:f1:e8:06:37:b5:cd:c1:cb:a5:00:4f:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:50:FB:8D:D5:7A:33:B3:D4:BF:C8:6B:70:FA:C4:96:15:48:F4:7A
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/DCF8D39EB53311F0B2CCCF26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.207.160.0/24
14.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e3:73:c8:eb:34:08:09:b0:dd:a5:8e:02:0f:08:11:cb:0a:
d2:66:45:a8:02:28:14:56:63:f2:4c:f0:17:fb:df:78:08:e6:
00:31:0f:71:88:2c:d7:f3:fd:02:61:e0:17:8c:ad:b1:c9:1f:
80:92:cd:7d:c5:19:31:a6:e5:7a:77:0e:57:26:f2:17:f1:27:
09:93:49:6c:9f:08:4a:45:f8:3d:ac:ae:18:04:6f:49:cc:c0:
4f:26:ed:8d:6d:b1:07:0f:50:49:65:28:1d:ea:e5:44:23:4e:
4f:8f:4e:24:31:fa:47:30:b9:89:70:65:fd:b0:74:c7:78:6b:
55:09:40:18:da:ec:e9:db:36:f2:0f:8a:d9:c8:c0:83:9c:35:
7d:3a:23:50:71:00:32:d7:0e:1f:dd:a5:b3:70:f6:cc:73:4d:
13:1f:55:bf:fe:56:d7:cf:3d:73:8a:35:cf:cf:f1:b5:1e:78:
6d:b7:5e:6a:92:12:b6:cd:12:d7:9b:98:52:70:0f:20:ec:dc:
3e:02:12:31:03:fa:45:c1:ea:5e:0d:cd:3c:9f:52:29:c9:c6:
b6:5e:6f:f4:ae:1b:ec:9f:c8:2f:02:ac:f0:4c:a8:a8:3e:b1:
15:a7:fd:f0:ee:7a:f5:a7:8f:f0:0a:bc:a7:20:7e:26:12:85:
63:7f:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:44:24 2025 by rpki-client