This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/6B7CC19C73B811F08DDFF784C4F9AE02.roa
File: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (raw, json)
Hash identifier: n+54z7fslNXJ7in5uQGFK69nm0/AotBzwzG1jXO7P88=
Subject key identifier: 13:4B:E6:2C:91:8F:7B:70:A9:22:57:2F:3B:C8:68:4D:E2:E4:8A:77
Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Certificate serial: E8
Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/6B7CC19C73B811F08DDFF784C4F9AE02.roa
Signing time: Tue 25 Nov 2025 03:51:51 +0000
ROA not before: Tue 25 Nov 2025 03:51:51 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 153379
IP address blocks: 160.191.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Validity
Not Before: Nov 25 03:51:51 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692527d7-46f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:1f:fd:04:d8:d9:e4:89:dc:4b:3e:3a:c9:
0b:ae:3d:77:dc:28:75:50:c2:c2:5b:43:45:27:66:
7d:4a:87:49:b3:81:e8:74:60:86:13:47:87:33:db:
71:e1:9a:ec:50:41:5e:16:09:31:a4:20:0f:27:f1:
31:7d:c9:7c:b7:c1:3d:3e:c7:ca:68:5e:f1:e7:43:
c2:17:5d:80:f8:06:8b:4e:75:fd:29:23:f6:31:d1:
38:ea:fa:c5:e9:8a:b0:12:16:a5:a3:33:bf:34:50:
2b:8d:ad:46:9a:69:75:3d:12:59:a9:b0:d7:65:f6:
2f:cb:6b:d9:3c:20:ca:98:83:61:89:73:9d:a7:55:
28:7e:33:2c:6b:d9:95:37:6c:8d:e4:02:f9:d1:ca:
0e:d0:0d:47:e3:11:0f:2d:db:44:63:07:55:6b:18:
0b:75:52:b6:e0:16:6a:63:11:5d:83:cf:d9:de:00:
c5:70:77:8b:97:c2:f2:45:1b:6c:58:03:05:3c:fa:
d0:77:0d:fb:60:a3:31:e4:a3:bd:f5:ae:41:e4:d7:
67:a6:b0:5a:7b:30:ff:c7:ba:49:74:d1:63:af:36:
49:99:dc:26:62:6c:01:99:7d:23:c5:9d:83:24:9b:
48:93:7d:df:1b:ae:76:2c:9a:cf:d3:ea:b2:15:ee:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4B:E6:2C:91:8F:7B:70:A9:22:57:2F:3B:C8:68:4D:E2:E4:8A:77
X509v3 Authority Key Identifier:
keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/6B7CC19C73B811F08DDFF784C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.115.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1a:11:59:58:cc:8c:9a:4b:05:59:cb:8c:29:38:14:7e:dc:
46:f5:b0:4c:02:22:66:43:c7:63:7f:c4:b8:d5:b1:db:5e:b1:
a3:5e:3c:a2:29:28:ff:9c:29:14:a0:87:0a:6f:0d:f0:c6:54:
ff:96:ff:15:a0:e5:99:66:d9:13:b4:83:06:0d:71:f5:96:b6:
c2:eb:87:1e:3c:17:a6:c2:bb:22:35:76:f9:d4:f9:13:38:16:
e8:d1:c5:e8:8a:c2:f5:52:9b:52:a9:6a:a7:37:e9:c4:bd:ad:
8e:89:98:84:26:85:11:3c:82:3a:68:e7:5e:b3:35:e1:bd:da:
c1:fb:2e:b9:ce:4f:0d:8f:47:e1:54:95:b6:13:53:ed:66:2f:
f6:e1:26:1c:a1:e2:4f:b9:a3:7e:5c:85:7c:6e:5c:66:ce:7f:
23:a2:d5:ba:09:d1:b2:0d:93:3b:37:f5:32:10:9b:44:59:bb:
f7:11:72:28:14:df:8f:c7:4e:57:38:34:f1:d2:2f:b2:2e:66:
cb:6d:c7:63:41:54:a5:ed:9a:93:8e:9d:6f:c4:5f:f7:ed:97:
f7:9e:57:5c:21:34:33:4b:26:7e:e9:65:d5:34:85:9b:a7:9c:
7a:48:01:b5:51:33:2a:d6:f3:a1:42:d2:4a:ed:04:10:b6:63:
ed:d8:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:09:38 2025 by rpki-client