This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/A6EF097068F911F092D77151C4F9AE02.roa
File: A6EF097068F911F092D77151C4F9AE02.roa (raw, json)
Hash identifier: CVgVNZzRg+yoeNSO5TmorciwKychjnQza4bd4ni3W/0=
Subject key identifier: 04:11:E9:18:48:01:FA:55:45:29:1E:38:EC:6F:72:63:7F:40:3E:98
Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Certificate serial: 0599
Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/A6EF097068F911F092D77151C4F9AE02.roa
Signing time: Fri 25 Jul 2025 01:49:50 +0000
ROA not before: Fri 25 Jul 2025 01:49:50 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 133934
IP address blocks: 111.125.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl
rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1433 (0x599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C
Validity
Not Before: Jul 25 01:49:50 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6882e2be-6c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:70:93:98:0f:a7:9a:b3:88:7b:36:04:48:9d:
07:34:50:87:0f:ce:76:8c:f1:1c:f1:b7:ec:8c:35:
f0:b8:ad:da:9f:1c:8f:7e:63:fa:97:fd:ea:3c:2d:
18:61:93:44:2b:8b:e9:8a:83:36:91:5f:88:f9:b2:
1a:aa:19:74:9f:18:2a:1d:0a:ee:fd:26:04:63:64:
9a:57:dd:92:8a:88:63:d8:29:aa:cf:d9:56:dd:71:
a8:fe:e2:f6:87:b5:7f:bf:f6:31:cc:0b:ca:e9:96:
e6:e1:13:55:44:ad:72:58:2e:6f:b5:d2:f9:80:45:
c8:9a:e1:7a:ad:91:ac:d8:2a:6b:49:70:4f:37:a5:
82:3e:13:bc:95:be:13:21:ea:5c:c4:ec:26:0b:01:
df:b3:fa:ac:de:26:b1:9e:aa:93:1f:3b:78:c9:44:
d7:f4:db:37:fa:62:58:44:30:9d:e2:a4:08:1c:1a:
74:64:a3:89:64:ee:6e:fe:ab:ae:99:f0:92:bc:80:
cb:58:74:25:78:ca:b6:09:75:fe:08:49:e3:c9:4f:
54:c5:e7:54:18:23:eb:9b:f4:45:b8:83:c0:b5:f6:
bf:c5:1d:10:cf:5d:99:a8:64:a2:60:56:39:77:f3:
10:bd:d0:b7:d8:dc:cd:03:f1:97:5e:3b:01:23:41:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:E9:18:48:01:FA:55:45:29:1E:38:EC:6F:72:63:7F:40:3E:98
X509v3 Authority Key Identifier:
keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/A6EF097068F911F092D77151C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.125.188.0/22
Signature Algorithm: sha256WithRSAEncryption
08:93:d2:8c:d1:08:4c:50:68:b1:03:18:21:1c:22:c3:e7:cc:
6f:04:69:de:a8:e0:cf:ad:86:7c:a3:6f:9e:b9:1a:56:b6:b6:
b6:1c:d4:60:be:5f:d9:04:44:9a:e9:52:f6:5c:58:09:88:f9:
34:33:02:fe:97:c0:36:92:ec:59:29:e7:e0:a2:db:0c:58:8f:
13:0c:ba:83:a8:51:ad:35:48:0c:c4:d1:00:1b:75:ae:c9:83:
da:75:ea:20:9b:fa:f8:51:6f:88:67:05:c3:cb:a5:9e:19:03:
7d:dd:cb:40:24:73:61:94:9a:ec:1d:85:d2:cc:e1:d1:68:1c:
ac:ff:d8:71:46:21:d5:ce:56:2c:57:03:82:c1:89:94:ab:ec:
ba:1a:06:1d:e6:4c:74:0b:0f:73:e7:e0:f8:da:b1:e9:32:d0:
85:69:fa:63:79:84:cd:7c:f8:38:79:5f:28:c2:9e:09:6e:c9:
68:e0:63:01:f6:c8:2d:71:2b:39:99:7d:32:d2:f2:16:a6:0b:
b7:58:bc:dc:f9:22:e7:07:ac:8b:ea:68:83:12:1f:0d:1d:67:
b7:30:ef:3f:a7:43:78:93:88:5b:5f:5e:3b:84:62:98:d5:b8:
46:ab:a5:90:8b:68:55:2d:78:38:a1:06:96:ae:f5:61:23:f8:
87:24:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:22:42 2025 by rpki-client