This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/B8CCCFC8FE4711EF9822D46AC4F9AE02.roa
File: B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (raw, json)
Hash identifier: w8qjowphXmL3PeFkL+vLq5jeZxo5de+/HBCWCnByUF4=
Subject key identifier: B6:71:34:32:2F:B0:70:06:FA:2F:9A:1E:28:AD:8C:C5:57:E4:8F:2C
Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial: 023A
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/B8CCCFC8FE4711EF9822D46AC4F9AE02.roa
Signing time: Fri 05 Dec 2025 01:11:00 +0000
ROA not before: Fri 05 Dec 2025 01:11:00 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141153
IP address blocks: 43.224.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Validity
Not Before: Dec 5 01:11:00 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69323124-c8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:70:5e:2e:f9:1e:b5:4a:59:2b:b0:10:fa:
5e:27:ff:1d:19:63:7c:26:8f:4b:e6:9c:26:05:52:
b4:04:b4:94:29:65:56:31:c7:84:6f:87:17:0a:bc:
5c:12:8f:16:d4:76:c5:15:95:95:9f:44:36:89:c0:
e5:7d:77:c9:fe:71:80:a1:15:f8:47:1c:e0:98:2b:
6d:d0:de:d6:a4:60:81:04:e1:10:25:a8:67:5b:7c:
28:6e:96:a2:aa:78:1f:ce:ec:99:97:b4:e5:5b:2a:
bc:5f:39:61:96:cd:b7:0a:24:d0:37:c2:5d:f1:0b:
0e:0e:73:b9:75:e3:58:4a:71:c1:40:6b:66:d7:24:
73:54:32:3d:0e:ba:5b:f9:65:c5:fd:95:f2:a7:86:
7f:5b:8b:b1:cc:48:86:56:e1:5b:53:0f:fd:78:ac:
27:5b:6f:73:ba:8e:b3:b4:3b:1d:27:28:99:f5:d0:
4d:1b:2a:98:06:53:96:27:05:ca:10:dc:d1:75:47:
6c:d4:1c:cf:6d:ea:b2:99:c6:df:e3:2e:82:32:29:
42:fa:f8:49:dd:b0:6d:9b:77:0b:96:71:6a:88:bc:
63:3f:e5:42:68:ef:b7:56:d6:14:8f:23:f8:cc:d8:
40:f9:6e:57:8c:e1:45:c1:4e:bc:20:af:b8:04:bc:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:34:32:2F:B0:70:06:FA:2F:9A:1E:28:AD:8C:C5:57:E4:8F:2C
X509v3 Authority Key Identifier:
keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/B8CCCFC8FE4711EF9822D46AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.148.0/24
Signature Algorithm: sha256WithRSAEncryption
83:61:27:3e:34:44:ca:9c:06:4b:56:b8:da:13:2a:1a:2c:3a:
40:97:ee:ae:fd:33:20:97:cb:90:18:ff:de:67:a3:11:ed:77:
a6:fc:f2:b9:a8:fd:d5:39:fa:1e:75:42:13:4f:16:59:fa:a8:
78:10:4f:c0:a1:13:2a:98:46:58:2e:17:dd:60:35:52:35:a4:
02:0e:ef:bc:8b:2a:ce:82:bb:48:09:cb:11:8d:4d:a9:8b:4c:
5d:c3:14:c0:41:47:eb:2a:5e:b3:97:bf:c1:0b:d2:6b:ba:65:
ad:27:05:5f:48:dc:9c:02:85:1e:13:7d:de:c8:0c:e2:4e:db:
ad:e6:f4:96:cd:44:73:00:af:28:4f:25:97:18:cd:06:b2:ce:
1d:65:00:61:a4:ed:53:ac:75:f7:b9:81:56:8e:de:e0:20:87:
8c:49:ea:aa:a0:66:10:ff:71:c0:d0:d9:7d:18:e9:cc:67:17:
77:a1:ff:7d:43:d0:73:de:28:b6:e6:d9:18:2e:c5:08:e5:52:
36:df:04:18:98:12:c4:d7:45:5e:93:b7:28:c0:98:35:24:8a:
ed:9f:27:c7:90:20:85:c5:99:1f:ed:b1:d4:3d:52:7c:79:fd:
7b:f8:00:9b:6f:4f:70:3d:4f:1c:b1:b0:5a:a5:8a:d2:75:fc:
2c:75:69:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:01:08 2025 by rpki-client