This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/5F47B232DF0711F0899AA5EF5C6F56BC.roa
File: 5F47B232DF0711F0899AA5EF5C6F56BC.roa (raw, json)
Hash identifier: SauP6nDooiqlWIoLNHqPCC3v5Fx+lq8e50AU0GvqpMo=
Subject key identifier: 25:9B:D0:11:44:5E:5D:7C:D4:C9:10:08:48:9B:AE:BB:2C:69:FB:B3
Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial: 0B8F
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/5F47B232DF0711F0899AA5EF5C6F56BC.roa
Signing time: Mon 22 Dec 2025 07:32:38 +0000
ROA not before: Mon 22 Dec 2025 07:32:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9371
IP address blocks: 58.84.5.0/24 maxlen: 24
103.197.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 08:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2959 (0xb8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Validity
Not Before: Dec 22 07:32:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6948f416-3512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:65:82:36:c7:5f:87:22:77:7d:d8:db:13:
1f:af:d4:51:17:de:4f:e9:a7:08:8f:07:d6:bf:e2:
9f:9a:96:87:0b:b1:55:72:25:d0:db:e3:1b:4b:cc:
78:dd:dd:0e:78:82:ce:0e:d2:66:02:d9:f5:f5:6f:
9b:69:2f:24:91:06:cd:8f:4a:a2:0d:9f:f1:fb:31:
0d:ae:b5:ed:1e:93:95:c7:ed:19:2b:13:9b:8a:42:
87:ec:01:8e:dd:dc:d8:61:e5:bf:6d:a2:98:4c:b3:
00:00:21:88:ad:14:2d:50:f7:5f:e1:c9:58:2c:39:
73:a6:22:16:4e:0c:52:08:29:75:67:79:6d:9c:08:
b0:16:34:23:e7:5d:63:a0:37:7e:2f:be:d0:b6:84:
d8:e3:06:14:60:aa:ba:17:65:01:e0:81:2d:f0:2d:
ba:28:06:84:2a:41:6f:cb:1b:48:53:53:37:86:08:
fd:e7:c8:93:10:b2:85:38:c7:7b:0e:e0:14:5e:72:
16:20:d0:eb:d6:9f:62:cd:c9:44:b8:5e:36:16:ce:
f0:a2:2c:f2:e1:a8:ff:10:36:42:b7:0b:d5:35:16:
a9:e3:07:a3:10:13:26:77:33:63:c6:15:d3:e4:dc:
e6:79:2d:85:f2:31:54:b3:ed:58:60:03:93:f3:42:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:D0:11:44:5E:5D:7C:D4:C9:10:08:48:9B:AE:BB:2C:69:FB:B3
X509v3 Authority Key Identifier:
keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/5F47B232DF0711F0899AA5EF5C6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.84.5.0/24
103.197.5.0/24
Signature Algorithm: sha256WithRSAEncryption
85:78:ef:78:9f:ad:7e:b1:08:24:2c:fb:be:6d:8a:17:84:33:
1e:32:6e:c9:cf:62:72:55:e9:bd:fd:10:03:b3:96:3d:4a:47:
01:85:6c:b5:74:38:9a:59:96:92:9e:e9:c0:c5:d9:13:27:11:
fb:09:10:60:c7:20:fd:24:74:3b:7d:55:a6:31:51:4c:6e:12:
fc:26:dc:ce:f4:cd:e6:d6:97:13:47:1b:22:d6:8f:82:ec:6c:
36:7e:44:ff:10:8a:b2:22:39:1e:f2:a3:7c:49:80:4c:1d:c9:
3c:99:f5:2a:ce:89:8b:bb:bb:a0:6e:31:84:06:19:5b:45:27:
84:d2:b0:42:88:86:1e:3d:f2:79:1c:3e:87:58:98:e8:c4:02:
01:b3:7f:4d:d9:94:25:37:9d:bf:57:67:3e:52:c7:c8:11:5a:
68:6b:19:dc:8d:b8:f9:26:fb:1b:22:c9:aa:53:6f:19:80:f5:
fc:87:43:65:24:a4:5f:70:49:df:88:9d:c8:ec:bd:6e:08:6b:
78:03:c7:7f:74:c0:09:77:96:b2:1e:18:5b:8c:25:e2:8d:37:
06:74:c5:5d:75:da:3e:c7:d0:2f:c4:66:93:25:0e:16:50:49:
aa:57:1a:bb:a8:96:c3:65:2f:83:ca:2c:79:e4:69:9c:e2:2f:
4f:a7:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 17:44:18 2025 by rpki-client