This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/763018B4D29811ED8CDDB83AC4F9AE02.roa
File: 763018B4D29811ED8CDDB83AC4F9AE02.roa (raw, json)
Hash identifier: gY3dwR5+r1G24a+7Zdvb4cHyMdDeob3RTrrDa7nI1A4=
Subject key identifier: FB:50:3C:CA:30:3B:62:12:6C:8F:ED:64:05:A8:35:C3:D6:E7:8B:F1
Certificate issuer: /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Certificate serial: 01ED
Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/763018B4D29811ED8CDDB83AC4F9AE02.roa
Signing time: Thu 13 Nov 2025 01:18:17 +0000
ROA not before: Thu 13 Nov 2025 01:18:17 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45352
IP address blocks: 58.84.40.0/22 maxlen: 22
58.84.40.0/24 maxlen: 24
58.84.41.0/24 maxlen: 24
58.84.42.0/24 maxlen: 24
58.84.43.0/24 maxlen: 24
103.197.56.0/22 maxlen: 22
103.197.56.0/24 maxlen: 24
103.197.57.0/24 maxlen: 24
103.197.58.0/24 maxlen: 24
103.197.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDADE, serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893
Validity
Not Before: Nov 13 01:18:17 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691531d9-8fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:c2:47:fc:74:22:66:88:94:a1:02:1b:c2:
25:28:6d:3d:c6:04:47:33:b7:27:46:da:14:93:fb:
49:36:2d:cd:f4:16:b2:bb:bc:a9:41:cb:4f:1d:cb:
c9:3f:c7:6a:0b:8f:10:d4:2d:67:18:35:0e:86:9b:
a2:e5:db:15:16:09:ee:9c:1c:45:95:0f:73:65:93:
2e:2b:aa:60:81:67:7f:cb:cd:f0:90:3f:de:70:13:
87:67:66:39:d0:d4:79:dd:d5:28:da:47:6c:2c:33:
a9:5e:2b:cf:1f:31:83:a2:45:74:5d:65:41:d6:c9:
07:80:a8:ea:76:e4:ed:d0:4a:8a:6d:33:40:f8:78:
92:b0:d7:96:0f:35:41:2a:85:df:98:24:ae:30:34:
5f:62:1c:4e:b9:59:5c:e9:f5:fe:2c:b8:73:12:24:
b7:85:68:51:e5:ac:90:55:bf:ae:3f:13:1a:40:5a:
52:65:44:53:b5:35:dd:1c:90:67:ae:74:18:33:87:
c3:9d:96:fd:c1:15:35:8f:74:bd:7b:d6:22:14:f2:
c3:4e:e7:ac:fe:1b:72:da:4f:23:fe:53:de:c0:47:
ae:1a:9d:c7:6c:f2:e5:2f:67:55:ca:d9:50:c8:90:
0b:a3:cd:0c:c0:bc:1b:e0:ca:af:8c:fb:09:05:de:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:3C:CA:30:3B:62:12:6C:8F:ED:64:05:A8:35:C3:D6:E7:8B:F1
X509v3 Authority Key Identifier:
keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/763018B4D29811ED8CDDB83AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.84.40.0/22
103.197.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:35:a3:2d:20:33:02:56:0e:69:ac:a8:7b:87:c6:74:25:9f:
cd:09:d2:2e:9c:81:8c:d3:9c:ca:0d:19:b6:5e:0a:38:af:45:
e7:d3:b0:9e:4a:9e:e8:98:aa:06:be:aa:16:50:25:79:c3:44:
08:84:bf:95:ee:bb:8c:13:30:8e:53:d7:b1:9b:a5:31:30:62:
47:5b:8e:cc:47:3e:54:11:b3:f6:a6:ca:e4:96:66:2a:81:5e:
58:e5:4d:54:4c:7f:22:29:75:03:43:aa:98:0c:3c:ad:80:ff:
fc:39:ec:91:0a:ce:ab:1f:2c:f2:75:be:e4:7e:fd:bd:e9:51:
38:8f:45:a9:4e:8f:54:fc:6d:56:ae:0f:3d:e0:5c:89:87:27:
60:d5:ba:62:63:46:7d:e3:7a:85:fb:55:d7:2b:ac:0a:35:d7:
cc:3b:f0:2c:cc:e6:84:be:70:32:6a:c3:e1:10:97:88:6a:78:
5d:25:32:cc:76:38:ad:00:fd:a7:6e:f7:64:7c:4a:e1:24:a0:
a3:b2:1a:1b:cb:b7:cf:14:03:6a:98:27:17:f0:0a:b4:1f:f6:
cb:2b:73:04:ec:60:16:64:d4:d2:07:ef:6b:84:85:51:00:74:
d0:97:06:49:81:99:e2:9e:08:6f:b8:da:a1:d2:1d:67:a0:30:
9c:d0:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:10:56 2025 by rpki-client