This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa
File: 94EC9E22BEF311F0A6F14E84C4F9AE02.roa (raw, json)
Hash identifier: YVtST4vMUYXukdvRwVNc/YgxZwNEf2C/1tkRXtme8vo=
Subject key identifier: 33:11:C1:B4:9F:F0:2A:E3:81:C7:25:08:CB:50:93:65:6F:84:F4:90
Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial: 08B8
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa
Signing time: Tue 11 Nov 2025 11:43:03 +0000
ROA not before: Tue 11 Nov 2025 11:43:03 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 198504
IP address blocks: 116.0.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232 (0x8b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Validity
Not Before: Nov 11 11:43:03 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69132147-fe08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:50:51:00:ab:1f:98:9b:bf:ea:35:3c:60:
b7:90:21:f5:6c:a8:c1:46:a2:30:c7:05:80:f4:15:
35:40:5f:22:f9:e1:55:c5:db:dc:7f:8b:05:9c:1a:
2c:81:50:41:de:61:3b:7f:5b:25:29:09:38:f9:18:
45:69:12:e3:2e:44:8d:23:9a:7f:26:c6:00:2c:9b:
02:b3:7f:7c:79:30:50:13:51:fa:49:9e:62:b5:cd:
86:7a:49:59:8b:c7:d0:7b:5f:58:14:e6:11:9c:7b:
02:57:8a:4f:10:30:17:f8:ea:fa:07:35:ca:0c:d5:
d6:3d:82:88:d7:04:ac:df:09:fd:10:32:e7:08:a5:
1f:8c:4d:f8:0a:8b:16:32:a0:07:e4:b5:a0:1c:d2:
67:96:3a:06:a7:7a:9a:05:5d:da:7a:4d:e6:98:11:
41:f7:4b:1e:e5:82:53:d9:77:88:85:01:d5:c4:a0:
fc:d6:b4:34:c2:cc:e6:c5:4a:49:b8:a0:13:34:09:
2e:1d:7c:2a:50:cd:68:44:5e:22:a9:ab:87:3f:6a:
b0:17:31:46:05:d4:a0:d2:11:2a:55:70:ed:c2:b9:
ad:85:96:52:e8:74:cb:41:4c:d3:65:ce:9b:03:b3:
0e:fb:48:b2:e3:5a:26:b2:4d:2a:2b:e2:5d:47:7d:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:11:C1:B4:9F:F0:2A:E3:81:C7:25:08:CB:50:93:65:6F:84:F4:90
X509v3 Authority Key Identifier:
keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.0.47.0/24
Signature Algorithm: sha256WithRSAEncryption
69:36:3c:3e:b6:a4:cb:98:13:76:c3:df:4f:4b:22:95:57:09:
da:62:7e:84:d5:a2:88:87:db:50:0f:e3:ea:fe:eb:aa:9c:d0:
b7:c9:c1:31:00:42:fe:3a:10:d1:30:c9:a3:9d:e3:9b:ce:7d:
c7:5c:a0:fa:53:5b:b7:d6:cb:75:2f:e7:5a:fc:b7:93:06:64:
5c:f7:0e:9a:bb:46:82:de:25:0d:48:a2:d0:5f:4e:e8:5c:27:
f6:e0:14:f9:15:7e:14:90:eb:02:54:8f:7b:ae:81:7c:51:6b:
2a:37:2e:15:8c:62:70:97:da:4d:dd:a0:17:1f:95:7f:3b:5b:
47:09:b3:b6:0d:94:77:68:d1:3f:63:bc:37:1d:64:b9:a0:88:
c8:76:66:4b:0e:d0:d8:cb:40:1b:12:3a:fa:d8:2f:aa:e5:36:
ff:3a:a0:3a:2b:2d:23:5a:ef:2b:9e:d9:58:8e:0c:28:e7:87:
da:19:cb:38:74:ce:bf:62:6b:12:f2:e6:15:31:b4:fd:24:66:
c7:ff:68:26:2c:a2:14:9c:9b:c0:49:a3:40:f9:cd:3a:19:98:
8d:ee:f1:6e:f5:49:0c:c9:2b:48:3a:ed:44:72:75:00:45:78:
e7:19:ef:0c:62:25:4d:3c:60:e5:d1:cb:62:c3:28:74:a8:95:
46:73:47:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:23 2025 by rpki-client