This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/5462D9FECF7C11F099CF1F43C4F9AE02.roa
File: 5462D9FECF7C11F099CF1F43C4F9AE02.roa (raw, json)
Hash identifier: 004AtrOuTefMPuXTTWiollgx+cVpx+/Sf/ZzYxXYME8=
Subject key identifier: CE:DB:0A:EA:75:99:F7:A7:3C:9E:F9:70:10:45:29:FD:E2:05:31:4B
Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Certificate serial: F2
Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/5462D9FECF7C11F099CF1F43C4F9AE02.roa
Signing time: Tue 02 Dec 2025 12:42:15 +0000
ROA not before: Tue 02 Dec 2025 12:42:15 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 149287
IP address blocks: 160.191.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Validity
Not Before: Dec 2 12:42:15 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692edea7-8031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bc:3b:40:46:0f:59:f5:26:df:9d:a0:ba:4d:
2f:9c:b7:a2:a7:2f:33:61:4c:e3:c4:d0:5a:01:24:
12:25:60:9c:73:e2:f7:4f:89:95:7e:e5:82:44:50:
7f:79:79:60:e3:13:01:ca:21:9c:b8:19:fd:31:fe:
18:b2:ac:24:11:f3:4d:f1:86:6f:3b:46:69:0f:f6:
83:fc:ed:e6:4e:11:4e:be:07:fc:80:b1:ba:2e:50:
ee:84:5b:58:3e:47:d7:b3:8a:ad:48:2b:71:fb:30:
b8:08:ea:fd:cc:d6:28:33:59:cb:c7:2f:6a:4e:24:
fc:64:86:be:88:69:62:2f:c9:60:3b:4f:60:d7:c3:
71:49:d0:b0:13:8b:73:98:05:25:92:91:85:9e:67:
47:c2:44:31:ee:89:f0:ee:1e:06:36:8d:ec:a4:3d:
0e:3b:41:30:51:dd:cd:ef:63:15:d1:a5:b9:c2:66:
09:20:e9:7c:9b:45:f8:ef:0f:2e:25:b3:93:27:21:
dd:2b:85:ca:99:97:22:40:05:49:b3:b8:1b:ff:69:
69:67:9e:40:16:50:fe:47:b9:84:33:7f:cd:b8:b7:
8f:86:12:8b:65:b3:5b:15:5e:49:75:86:f0:46:51:
df:31:aa:81:cc:81:36:90:39:6b:8d:bf:24:81:72:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DB:0A:EA:75:99:F7:A7:3C:9E:F9:70:10:45:29:FD:E2:05:31:4B
X509v3 Authority Key Identifier:
keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/5462D9FECF7C11F099CF1F43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.114.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0f:30:08:20:00:ac:d6:7e:2c:6c:56:cd:31:c1:e4:16:70:
a6:38:fd:ec:56:81:42:5f:e6:f9:47:c3:7b:48:6c:cf:83:ae:
4a:66:51:f4:c6:7e:fa:ee:12:1c:7e:32:ed:9d:5d:41:bd:cc:
01:f7:5f:2e:e5:c3:9f:3d:19:39:78:6c:0d:30:6a:a0:9b:20:
08:83:de:b0:27:5e:e8:af:b5:61:92:48:30:34:34:17:73:2c:
72:d1:c1:24:b4:02:41:ce:1b:78:b0:17:0a:0c:c9:f4:55:8c:
af:8d:75:b6:f1:9a:55:1b:5c:6d:d4:83:f1:1f:d1:cf:0b:49:
18:e4:3b:32:44:ec:98:05:13:a1:0b:bb:0a:12:b4:bc:5d:d9:
79:46:3e:31:e6:6c:8e:8d:71:4c:8b:69:9f:43:9a:24:2a:09:
ad:60:47:35:6d:0f:7c:c4:0a:f1:47:b5:9a:d3:8c:ad:09:3e:
f2:96:da:69:03:79:e5:f3:7d:58:b4:bd:67:6f:96:52:77:36:
2e:d3:f8:fa:e7:69:8a:b4:34:e7:7e:18:fb:0c:87:da:d1:bb:
e1:ed:97:f6:b3:fa:02:66:b3:28:b2:5c:05:1a:49:86:b6:70:
6d:b0:34:d2:02:fb:80:48:e8:7e:f7:4c:77:43:47:1d:4a:98:
1a:53:ac:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:30:28 2025 by rpki-client