This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/F8071E24DC1111EC80AE816DC4F9AE02.roa
File: F8071E24DC1111EC80AE816DC4F9AE02.roa (raw, json)
Hash identifier: PFuingXxJbCOLfO1PJLeoU0/1sSC/bFas5mcjNMMakg=
Subject key identifier: 78:E9:1D:34:04:49:45:DD:6E:26:B8:B2:56:6E:9F:A8:DC:A2:C5:B2
Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial: 03F5
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/F8071E24DC1111EC80AE816DC4F9AE02.roa
Signing time: Mon 24 Nov 2025 07:48:19 +0000
ROA not before: Mon 24 Nov 2025 07:48:19 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 135097
IP address blocks: 103.233.8.0/22 maxlen: 24
2001:df5:f580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1013 (0x3f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Validity
Not Before: Nov 24 07:48:19 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69240dc3-346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:50:30:21:e1:53:a2:01:5f:66:46:53:46:
54:e6:f7:70:96:27:ee:88:3c:47:fa:be:83:07:26:
a2:66:20:c9:58:fe:35:fc:b8:49:d6:4e:6d:59:c1:
3d:66:71:df:71:a8:d9:f9:6d:2b:42:64:b1:07:40:
b0:fc:05:54:35:d7:27:87:57:8b:a7:c2:4d:2d:51:
36:be:fb:98:70:bc:3a:41:24:09:42:9f:a2:4b:1d:
fb:0b:1b:ec:00:9e:e9:65:78:47:77:61:d5:a7:00:
ce:67:31:29:f4:e6:f1:99:55:e2:fe:67:e4:11:a3:
a3:f9:c3:6a:d9:1a:0a:fb:fa:b7:23:7a:65:5e:67:
e6:27:8c:14:d2:8f:a4:6c:78:d2:8c:73:9e:92:c8:
70:42:57:d7:98:c9:5b:ba:cb:f1:cf:a2:eb:96:79:
a3:88:d9:42:11:bc:9f:29:d5:84:f4:44:77:db:e8:
0f:ac:94:d1:4a:6d:1e:10:4e:0e:fd:b4:36:f1:84:
e8:73:21:49:2b:32:92:0e:95:29:1d:5e:cd:24:fb:
9e:4a:fe:9b:f6:35:40:69:22:7e:7b:8f:b0:00:8a:
24:b2:29:8d:77:78:36:c1:75:bb:56:a8:d8:f4:7e:
1c:14:e5:1e:6e:5d:77:98:e3:93:35:e3:28:d2:b1:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E9:1D:34:04:49:45:DD:6E:26:B8:B2:56:6E:9F:A8:DC:A2:C5:B2
X509v3 Authority Key Identifier:
keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/F8071E24DC1111EC80AE816DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.233.8.0/22
IPv6:
2001:df5:f580::/48
Signature Algorithm: sha256WithRSAEncryption
15:03:8f:fd:c2:8b:27:ff:26:e9:19:7b:39:56:d0:16:33:e7:
cb:cf:fb:38:2a:ec:90:71:c8:87:d3:4d:42:06:c4:d6:39:d5:
57:8d:6d:ad:91:b6:d4:b2:5c:4a:d2:a9:91:a5:c1:b0:f8:46:
43:ec:e5:4b:2f:24:93:63:3c:3e:b2:96:55:b6:e0:82:76:ce:
61:58:1a:d3:19:d1:99:ac:69:67:fc:bf:49:9b:02:13:93:5a:
0c:c8:52:dd:37:b9:c4:d0:09:1a:e9:2c:31:b0:66:1e:4b:5a:
0f:93:26:65:74:85:f3:69:59:bc:cf:c6:d1:7b:e5:c4:b3:60:
c2:d5:37:cb:a3:5d:15:c8:8c:6b:ac:05:6e:cc:67:57:35:33:
81:dd:d1:2b:86:69:c2:ba:db:03:e4:97:ed:3d:39:e1:6e:bd:
1c:06:eb:28:74:5e:e8:de:4f:22:25:aa:be:ff:a1:ec:39:e3:
39:db:58:f3:80:b5:4d:31:b2:8f:b9:ca:8f:44:57:e8:52:e4:
50:5f:06:fd:64:70:4f:43:bd:ba:18:25:fa:74:98:75:d0:62:
1a:57:a8:43:46:10:dc:e5:fe:2f:0d:4d:17:64:43:ed:32:c8:
57:e4:b8:db:53:69:83:32:a2:d3:a2:8b:e6:2e:46:d4:62:be:
c0:c1:cf:45
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4
RjIxQkI1OTMwHhcNMjUxMTI0MDc0ODE5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI0MGRjMy0zNDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAys5QMCHhU6IBX2ZGU0ZU5vdwlifuiDxH+r6DByaiZiDJWP41/LhJ1k5tWcE9
ZnHfcajZ+W0rQmSxB0Cw/AVUNdcnh1eLp8JNLVE2vvuYcLw6QSQJQp+iSx37Cxvs
AJ7pZXhHd2HVpwDOZzEp9ObxmVXi/mfkEaOj+cNq2RoK+/q3I3plXmfmJ4wU0o+k
bHjSjHOekshwQlfXmMlbusvxz6LrlnmjiNlCEbyfKdWE9ER32+gPrJTRSm0eEE4O
/bQ28YTocyFJKzKSDpUpHV7NJPueSv6b9jVAaSJ+e4+wAIoksimNd3g2wXW7VqjY
9H4cFOUebl13mOOTNeMo0rGPPwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHjpHTQE
SUXdbia4slZun6jcosWyMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG
NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU3RDkvMDcxN0U5RUU5RjVEMTFFQ0JCQ0E5NjE4QzRGOUFFMDIvRjgwNzFFMjRE
QzExMTFFQzgwQUU4MTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAJn6QgwDwQCAAIwCQMHACABDfX1gDANBgkqhkiG9w0BAQsF
AAOCAQEAFQOP/cKLJ/8m6Rl7OVbQFjPny8/7OCrskHHIh9NNQgbE1jnVV41trZG2
1LJcStKpkaXBsPhGQ+zlSy8kk2M8PrKWVbbggnbOYVga0xnRmaxpZ/y/SZsCE5Na
DMhS3Te5xNAJGuksMbBmHktaD5MmZXSF82lZvM/G0XvlxLNgwtU3y6NdFciMa6wF
bsxnVzUzgd3RK4ZpwrrbA+SX7T054W69HAbrKHRe6N5PIiWqvv+h7DnjOdtY84C1
TTGyj7nKj0RX6FLkUF8G/WRwT0O9uhgl+nSYddBiGleoQ0YQ3OX+Lw1NF2RD7TLI
V+S421NpgzKi06KL5i5G1GK+wMHPRQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:04:59 2025 by rpki-client