This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/058EA22EDB0A11F080DEC20382D3641D.roa
File: 058EA22EDB0A11F080DEC20382D3641D.roa (raw, json)
Hash identifier: IqDiDqFtVjIRopdlZHPBabUajsPyIoKHoBOGPIyEc5w=
Subject key identifier: FC:7C:F7:87:AC:94:4D:26:5B:32:93:F8:F9:4B:16:8F:E7:03:CB:C0
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 0565
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/058EA22EDB0A11F080DEC20382D3641D.roa
Signing time: Wed 17 Dec 2025 05:34:14 +0000
ROA not before: Wed 17 Dec 2025 05:34:14 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.73.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1381 (0x565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Dec 17 05:34:14 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=694240d6-d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:5d:27:8a:9d:c1:8f:ad:9f:db:68:d4:c9:
58:2b:b4:d3:4c:fa:b9:f9:4b:e7:47:10:d5:b3:78:
80:cf:bb:f7:36:72:13:21:9b:c3:d9:e9:65:a7:b8:
4d:7d:e1:2e:83:0c:7a:84:5f:bc:06:c2:df:56:4a:
30:f3:e3:b4:3a:55:f4:95:70:a6:92:96:43:5e:3d:
6c:c5:e5:fa:08:da:34:85:30:bc:24:1f:a1:58:29:
1d:f5:7b:ab:fc:8c:04:53:fd:44:26:ad:a0:25:b8:
6b:7d:1a:f4:6c:ab:e2:cb:f7:70:34:86:17:92:ca:
10:90:2e:d9:f9:a3:f6:4c:c7:b9:0f:98:e4:27:56:
9b:c0:1a:36:39:d3:72:44:fb:38:e4:02:f4:1e:62:
e2:49:04:8f:d3:58:69:c4:04:2e:b9:8a:65:91:2a:
c3:d3:2d:f2:af:65:c0:b1:df:f2:62:fe:2d:1b:b2:
8e:f3:07:d1:91:72:28:9d:fd:27:6c:d7:10:b9:6b:
2a:e6:5c:91:ea:a0:3b:2b:8e:a8:39:c4:9d:30:d1:
bf:3e:3f:32:e6:97:2a:a4:e7:7c:0b:23:d9:99:e0:
04:76:e3:2f:c0:49:38:9d:21:f6:ad:13:db:d2:77:
dc:c5:c8:34:69:a0:b5:f1:e2:ab:ae:61:22:d0:9d:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7C:F7:87:AC:94:4D:26:5B:32:93:F8:F9:4B:16:8F:E7:03:CB:C0
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/058EA22EDB0A11F080DEC20382D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.221.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f7:c0:42:d6:be:fe:40:9d:6b:a1:81:b8:20:e0:c5:66:fb:
55:53:63:40:f9:49:9e:2a:df:52:be:5b:be:bf:6d:a5:94:29:
fa:88:e5:d7:a7:d1:6b:d6:6d:c2:a2:bd:77:0b:d0:4d:dd:30:
64:db:46:79:58:4e:4b:28:73:01:9b:4f:f9:e0:c8:0b:e5:4d:
aa:91:83:66:d6:4d:f4:ff:4a:c8:1c:a1:ee:1f:db:a6:cb:39:
bd:99:c3:b8:9b:56:6a:2c:16:92:b9:b7:de:42:84:ce:a8:44:
2e:a9:7c:cd:09:45:9e:c6:f9:11:2c:03:e1:89:3e:3f:6d:21:
df:b3:c8:85:b3:b2:ed:e0:f0:2f:7f:d2:54:38:18:5c:8f:aa:
6b:c3:b9:26:c9:15:fb:ee:e7:73:d5:38:2a:d5:f3:72:ba:c7:
49:d7:98:c8:b9:07:5c:5e:9d:cd:d7:cf:a7:a9:ee:11:54:25:
9e:98:2c:fd:80:db:03:9b:25:41:9d:98:a4:49:ca:36:80:39:
dc:e7:bf:9f:61:a7:e0:bd:34:02:37:53:3f:de:56:74:a4:73:
41:7c:2c:7e:15:36:df:e5:49:4f:e0:ce:1f:60:cd:1a:b2:1f:
9a:65:71:c1:35:ca:40:e8:06:b8:bb:37:57:ba:ac:3d:3b:3f:
a2:30:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:18:38 2025 by rpki-client