This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D166652A072211EF9AC24D5BC4F9AE02.roa
File: D166652A072211EF9AC24D5BC4F9AE02.roa (raw, json)
Hash identifier: sLM5FwTdAuw73CSCPgse3usHMaTriQRAMzmSo6I03pc=
Subject key identifier: E1:5F:57:83:BA:68:2E:73:CA:CF:9D:39:8C:8B:E1:4C:F5:CF:B4:F9
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3698
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D166652A072211EF9AC24D5BC4F9AE02.roa
Signing time: Fri 12 Dec 2025 14:30:40 +0000
ROA not before: Fri 12 Dec 2025 14:30:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150750
IP address blocks: 116.90.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 14:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13976 (0x3698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Dec 12 14:30:40 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=693c2710-2801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:bd:40:b3:52:c9:c7:f4:1c:79:08:8f:32:
c1:25:69:8b:3b:09:0e:df:82:59:15:22:73:9f:21:
6d:d0:d7:97:2f:28:11:da:46:c2:c7:3e:a1:ef:74:
dd:20:47:79:33:a1:2e:00:cd:2e:52:e2:9c:86:f7:
d2:1b:d4:2d:ab:05:99:62:cf:60:00:c5:52:9d:61:
c6:58:5c:f8:a6:8d:ae:d0:d9:9f:9e:97:4e:be:54:
5e:81:7f:a5:ee:a4:4c:13:50:ff:d1:e8:b3:74:e9:
b3:5b:61:ec:e0:82:c0:33:9f:a6:c0:91:0a:eb:74:
81:b8:46:28:40:7b:ef:ed:a8:91:f3:51:27:df:89:
3b:00:89:6f:e0:13:bd:41:70:12:9b:83:d7:48:c0:
00:b1:88:a9:1f:4d:68:0c:ae:b0:69:1e:cb:c1:f0:
0b:83:4a:ab:11:36:2d:55:6d:72:44:78:92:3d:06:
8e:24:f1:dc:44:77:7f:7e:90:aa:97:dd:1f:3d:a5:
65:63:d9:48:9d:d6:6a:03:55:00:36:64:ae:65:5c:
e9:43:20:41:79:38:60:b6:b3:c0:a1:fd:db:f0:44:
fa:36:20:d3:90:fb:ea:12:07:d0:94:33:e8:e4:df:
32:c0:5f:ef:75:26:05:6b:e7:28:43:a3:49:3b:47:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:57:83:BA:68:2E:73:CA:CF:9D:39:8C:8B:E1:4C:F5:CF:B4:F9
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D166652A072211EF9AC24D5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.121.0/24
Signature Algorithm: sha256WithRSAEncryption
27:50:b6:42:45:2f:cc:50:0c:14:29:02:25:10:3f:22:4e:67:
16:ad:da:8b:c3:b8:e2:e2:0c:5a:d8:37:56:83:0a:f2:39:52:
d8:04:86:90:4b:41:8d:c0:d0:a6:d8:61:1c:9b:0e:a0:ac:b0:
5e:43:fa:36:7c:45:2e:8e:4d:f7:2c:bf:0e:c5:ba:55:e3:c4:
8a:a5:96:24:af:46:9e:1d:54:3a:84:e5:ba:db:3f:c2:db:aa:
a0:3b:39:73:77:5b:3b:e6:20:65:c8:0f:fd:15:10:d5:d2:f3:
0d:80:80:b5:74:38:e5:72:69:bf:95:62:6f:2b:88:4d:ac:73:
d0:39:68:10:25:c4:18:95:be:2f:e0:f4:6e:58:20:fc:a1:b7:
7a:61:e9:f3:86:b5:0e:21:89:f2:04:a6:f4:21:ca:5f:ef:66:
7e:83:79:ce:ae:7f:8b:aa:b9:9e:9b:9e:9e:0c:4a:ab:52:19:
d7:99:18:23:15:29:c5:cc:99:2e:14:b9:f3:fc:73:cd:7e:a5:
f7:ce:f3:55:f2:37:ed:da:43:46:59:8f:40:5f:55:1c:98:f7:
7e:6c:35:d5:15:43:69:12:57:11:13:8b:29:f5:37:79:79:80:
68:d2:30:35:96:59:9d:97:15:92:2d:c4:d7:e2:ea:40:4f:53:
cd:05:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:52:56 2025 by rpki-client