This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
File: F5FC39B600F811F0BD702A69C4F9AE02.roa (raw, json)
Hash identifier: z5pNn5MCpBCUyinVeJo6KP/NY4KOLsdKNCmIbn+dSOY=
Subject key identifier: BF:AC:28:0D:0D:4D:AB:97:75:C6:2B:0D:80:4D:3D:5B:F1:61:89:06
Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial: 96
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
Signing time: Tue 25 Nov 2025 18:09:15 +0000
ROA not before: Tue 25 Nov 2025 18:09:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32135
IP address blocks: 163.223.40.0/23 maxlen: 23
163.223.40.0/24 maxlen: 32
163.223.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Validity
Not Before: Nov 25 18:09:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6925f0cb-af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:99:c5:f4:07:26:63:98:49:4a:65:a4:82:
a5:e7:ce:57:02:ec:b2:81:68:6e:20:ef:68:9f:72:
93:c5:cb:7d:92:3d:a0:f9:75:f8:ec:52:e2:3f:ac:
6b:11:a8:7b:25:41:bf:99:9e:33:49:7c:bb:14:ab:
d0:51:b4:80:c6:80:8d:7a:66:1c:5f:7b:28:00:99:
5c:75:c3:70:90:38:8c:98:73:75:c9:c6:1d:7b:e6:
b7:16:ab:e2:16:24:1d:9d:0e:de:b5:31:1a:27:a2:
cc:6d:e8:ac:f1:db:47:2b:34:0a:0f:f2:1d:3a:c1:
c9:be:64:8f:2b:88:3f:f1:e2:ad:89:96:b8:35:57:
ca:f0:a3:ba:03:a8:0c:b9:02:7f:ef:2a:71:86:77:
e1:0e:9e:fd:ca:0a:b3:82:dc:52:26:92:e3:6e:4c:
7b:40:6f:a7:1e:77:fe:4f:a0:d7:b5:5a:00:b0:fa:
d3:4f:f5:f8:dd:98:79:30:fc:c0:f7:24:6a:dc:10:
42:c0:52:5c:d9:34:59:94:bf:54:8e:3d:41:d7:93:
da:5b:c9:1a:9d:3e:2e:8b:fa:74:4e:48:e7:43:3e:
fe:21:8c:74:df:47:72:42:b0:d7:60:d9:66:e9:44:
6f:88:ca:13:a0:46:c6:63:95:92:47:e9:48:11:f6:
6c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AC:28:0D:0D:4D:AB:97:75:C6:2B:0D:80:4D:3D:5B:F1:61:89:06
X509v3 Authority Key Identifier:
keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.40.0/23
Signature Algorithm: sha256WithRSAEncryption
29:76:4a:d4:a7:70:f6:98:48:e5:df:05:90:77:cf:04:15:c0:
8f:90:29:2b:02:b0:f0:2b:ad:cf:fe:8e:c4:e6:91:6e:ea:d5:
b2:00:a9:80:2b:a0:55:04:37:c3:5f:e4:e0:b0:c6:aa:10:88:
dc:43:bb:d6:32:4d:bc:bc:fb:ca:f9:f1:47:c1:29:6f:a4:90:
28:2f:66:22:59:05:c9:35:e9:7b:bb:fa:b5:37:6a:90:78:e8:
00:04:d5:db:af:7d:76:47:ca:33:ff:7b:e5:be:5a:37:e1:eb:
2c:a6:db:ae:36:5e:6e:97:0c:3b:07:49:77:d0:57:17:7d:c0:
48:9e:8a:a5:29:41:1d:56:60:4a:0d:a2:02:8a:b4:b7:10:31:
56:9d:1a:0b:c0:37:32:71:0a:3c:77:c9:87:bc:b6:f0:08:dd:
3c:fb:62:44:8f:e1:8f:ba:61:3b:22:f0:87:bc:f8:a0:7a:c2:
71:24:4e:b2:19:68:3e:2a:62:72:67:5a:9d:78:79:ef:18:b5:
24:a3:2d:67:bd:da:56:68:29:c9:e0:21:70:68:6a:4e:16:53:
d0:10:35:0e:cc:81:b6:b6:98:d0:4d:fb:9d:7b:7c:d4:fa:37:
ff:de:e0:23:00:4c:84:e1:26:b5:4c:03:77:3a:c4:1e:5b:53:
ab:06:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:18 2025 by rpki-client