This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa
File: 7390E6C4B69011EEA6557474C4F9AE02.roa (raw, json)
Hash identifier: RpJsOjpuCxYF6bekPV53tCm5UNC5uLvQYSmca4wHins=
Subject key identifier: 63:CD:BB:83:56:5F:FB:6E:CC:7D:4E:34:70:38:3A:8B:BE:30:86:3C
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0741
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa
Signing time: Tue 16 Dec 2025 09:10:34 +0000
ROA not before: Tue 16 Dec 2025 09:10:34 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 63737
IP address blocks: 144.79.12.0/23 maxlen: 24
157.10.48.0/23 maxlen: 23
157.10.50.0/23 maxlen: 23
157.66.156.0/23 maxlen: 23
157.66.158.0/23 maxlen: 23
160.25.76.0/23 maxlen: 23
160.25.168.0/23 maxlen: 24
160.25.234.0/23 maxlen: 23
160.30.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 14:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1857 (0x741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Dec 16 09:10:34 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6941220a-411e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:5f:84:67:7b:97:5f:ba:03:4c:a6:bc:ec:
ca:94:a0:fc:e1:67:c3:9c:f3:6b:e4:0a:db:79:32:
c1:6b:fa:0a:7c:0a:d8:cb:91:3d:ff:d4:b4:0d:01:
57:86:63:21:e1:cf:56:96:80:02:53:83:a3:17:8f:
cb:dc:23:45:45:c1:c1:18:c8:11:03:8e:06:c8:49:
d8:40:7c:de:d0:6b:d8:38:e2:7d:a2:bd:1d:d3:b9:
49:58:d5:20:67:27:1e:12:70:af:cc:57:9e:2c:a9:
22:29:d2:e4:a6:07:b0:df:d8:df:96:23:a2:c7:66:
2f:35:0b:5a:01:32:24:32:de:cc:b7:4a:70:88:11:
0f:bb:60:94:e0:c6:a0:66:b1:03:ad:de:ce:c8:bc:
e4:2f:53:c9:83:f5:96:26:40:6b:3f:ef:1c:3b:32:
92:50:73:6c:08:5e:1b:30:f6:63:b9:19:dc:59:88:
0c:58:e5:c0:5b:94:5b:fe:7c:b9:65:61:d1:1e:10:
49:32:ef:6d:f4:82:6b:09:c9:e3:62:23:ee:b7:f6:
a5:a8:df:f0:93:1e:65:f1:c3:e4:ea:03:7f:c6:ce:
fe:f3:67:7d:50:a9:05:60:69:55:bb:ba:a6:db:6b:
87:17:38:4f:50:eb:be:dc:99:ea:a7:07:7c:91:fb:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:BB:83:56:5F:FB:6E:CC:7D:4E:34:70:38:3A:8B:BE:30:86:3C
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
144.79.12.0/23
157.10.48.0/22
157.66.156.0/22
160.25.76.0/23
160.25.168.0/23
160.25.234.0/23
160.30.204.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:5d:e9:31:b3:11:f7:61:4b:99:f1:07:a2:21:32:f5:ca:40:
e2:91:b2:1f:f3:0d:a1:9d:ce:8a:e7:4a:7a:7f:38:06:81:44:
84:66:e8:28:4d:d9:e5:2e:ce:47:92:fc:a9:7d:af:34:4c:be:
cc:78:96:20:bc:45:3c:3e:8a:3b:da:99:e6:ba:2a:42:f3:c7:
2d:84:19:17:d7:24:ec:dc:f7:71:ca:33:5a:0a:f5:4d:eb:97:
3b:53:3e:d4:cd:80:11:f5:d9:7b:69:dc:ec:7e:53:5a:fd:fc:
da:4f:48:3b:e3:e5:94:19:18:f8:3f:b1:a3:9c:d5:44:08:8b:
57:c9:07:15:b6:b5:be:50:d0:cf:29:cd:39:1a:36:80:dc:18:
af:b5:a4:89:4e:a0:64:b0:23:3a:ff:22:5c:79:fe:78:53:cc:
d4:79:02:fc:5d:9a:3c:44:0c:9b:7a:66:bf:db:d3:68:2b:d9:
e8:57:6a:91:08:1b:af:9f:5f:7e:f8:03:7d:d5:ea:76:d2:20:
56:27:b7:ed:e9:24:b7:ad:2f:2b:58:f1:fe:24:aa:1c:d5:1b:
6d:69:ff:18:99:93:fe:32:cd:2f:2c:f0:70:61:da:9d:7d:49:
fb:61:59:24:f1:f3:f6:38:22:14:ab:bc:8f:38:3c:b3:11:2c:
78:07:4b:51
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUxMjE2MDkxMDM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTQxMjIwYS00MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlyxfhGd7l1+6A0ymvOzKlKD84WfDnPNr5ArbeTLBa/oKfArYy5E9/9S0DQFX
hmMh4c9WloACU4OjF4/L3CNFRcHBGMgRA44GyEnYQHze0GvYOOJ9or0d07lJWNUg
ZyceEnCvzFeeLKkiKdLkpgew39jfliOix2YvNQtaATIkMt7Mt0pwiBEPu2CU4Mag
ZrEDrd7OyLzkL1PJg/WWJkBrP+8cOzKSUHNsCF4bMPZjuRncWYgMWOXAW5Rb/ny5
ZWHRHhBJMu9t9IJrCcnjYiPut/alqN/wkx5l8cPk6gN/xs7+82d9UKkFYGlVu7qm
22uHFzhPUOu+3Jnqpwd8kfvgiwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGPNu4NW
X/tuzH1ONHA4Oou+MIY8MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNzM5MEU2QzRC
NjkwMTFFRUE2NTU3NDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E
NDAyMDAEAgABMCoDBAGQTwwDBAKdCjADBAKdQpwDBAGgGUwDBAGgGagDBAGgGeoD
BAGgHswwDQYJKoZIhvcNAQELBQADggEBAI5d6TGzEfdhS5nxB6IhMvXKQOKRsh/z
DaGdzornSnp/OAaBRIRm6ChN2eUuzkeS/Kl9rzRMvsx4liC8RTw+ijvamea6KkLz
xy2EGRfXJOzc93HKM1oK9U3rlztTPtTNgBH12Xtp3Ox+U1r9/NpPSDvj5ZQZGPg/
saOc1UQIi1fJBxW2tb5Q0M8pzTkaNoDcGK+1pIlOoGSwIzr/Ilx5/nhTzNR5Avxd
mjxEDJt6Zr/b02gr2ehXapEIG6+fX374A33V6nbSIFYnt+3pJLetLytY8f4kqhzV
G21p/xiZk/4yzS8s8HBh2p19SfthWSTx8/Y4IhSrvI84PLMRLHgHS1E=
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:25:03 2025 by rpki-client