This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/872F5E22835A11EE9FFEC146C4F9AE02.roa
File: 872F5E22835A11EE9FFEC146C4F9AE02.roa (raw, json)
Hash identifier: Gxb81WEDuKgKYb/kB2EbaeJp1wDucnhaIiz4gjnkszI=
Subject key identifier: E9:0B:2A:A2:5C:2B:D0:F6:8D:11:77:ED:F7:91:53:7B:09:4E:51:0E
Certificate issuer: /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial: 0186
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/872F5E22835A11EE9FFEC146C4F9AE02.roa
Signing time: Sun 07 Dec 2025 02:12:11 +0000
ROA not before: Sun 07 Dec 2025 02:12:11 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55435
IP address blocks: 202.134.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 03:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Validity
Not Before: Dec 7 02:12:11 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6934e27b-d1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:b3:bf:99:ff:24:30:bb:20:04:e2:f8:fc:
ae:c5:81:dc:fe:ec:77:c5:1b:d8:7d:6a:51:46:76:
45:2b:be:c2:83:9a:09:f8:70:5b:c8:ab:f2:85:32:
44:5d:15:06:79:97:1c:97:6c:c5:8c:2b:e5:65:40:
c2:a6:21:71:e4:54:c2:d6:08:e9:d7:4a:9e:c0:f8:
34:3f:9e:6c:15:42:f2:22:00:78:e0:d2:fc:6a:f7:
98:23:bb:a0:00:44:40:47:af:04:b0:e5:9a:ce:38:
b9:6c:54:72:cc:e5:19:7b:17:20:57:10:d2:86:41:
13:7f:dd:07:7a:ea:e1:9a:4c:e5:90:9d:15:a9:95:
c1:ab:3d:18:55:4b:df:87:f5:47:b4:29:dc:2b:8a:
df:dc:b2:7d:9a:6d:dd:fc:4d:3f:20:be:6a:7a:9e:
8d:3f:14:8e:b1:0b:55:7e:eb:94:2c:21:36:da:11:
57:b4:08:01:b8:a8:1e:95:bd:e4:8a:b0:67:d9:4a:
63:69:4a:6a:4f:ae:52:ab:c1:96:28:20:0e:7a:30:
d6:ed:7a:a3:09:2a:71:32:ed:2a:09:6b:0f:d9:53:
3e:12:ec:50:c5:b6:c0:45:19:b5:b8:9d:00:81:7c:
40:f4:b6:ae:5e:15:bb:6a:ea:9b:06:74:3f:5a:0f:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0B:2A:A2:5C:2B:D0:F6:8D:11:77:ED:F7:91:53:7B:09:4E:51:0E
X509v3 Authority Key Identifier:
keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/872F5E22835A11EE9FFEC146C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.53.0/24
Signature Algorithm: sha256WithRSAEncryption
17:bc:a3:3b:2a:25:fe:f1:e2:45:6a:35:4b:4e:3e:e8:b4:26:
0e:78:df:3f:7a:bb:af:fd:bb:6d:1b:3b:ac:3f:c8:03:48:f0:
5e:b7:47:39:05:01:9f:44:30:bf:6c:fb:00:29:85:ec:5b:33:
c9:f4:9f:b7:11:27:34:6d:f9:27:94:4c:eb:f0:b4:1a:01:cb:
cd:4b:eb:9c:c2:97:70:25:61:a4:24:88:97:fb:2e:d7:0f:2e:
cf:c6:b1:ed:ec:a4:6e:42:3e:d9:63:79:20:24:e3:7a:32:b2:
35:96:3a:a3:7e:51:75:a7:85:ce:93:a0:da:f7:e1:71:bf:2d:
47:7a:30:05:3e:4e:31:b0:d4:03:30:af:e6:23:9c:b1:13:77:
9b:11:15:ca:bc:11:05:37:e3:f9:59:14:85:02:6d:cc:5d:57:
c2:d4:58:e8:6b:2e:c1:e4:77:5e:ea:25:19:28:dc:ec:3c:76:
5d:4d:c3:b2:1d:a9:f8:f3:10:9f:84:85:14:e3:c8:c6:fe:8f:
86:0a:86:e0:39:f0:a6:74:fb:fe:0a:7b:3f:f0:62:5b:12:19:
42:a1:a9:b3:75:07:0b:ad:af:20:78:42:59:19:a2:cf:20:85:
58:41:f6:e4:72:f1:0e:64:93:27:5b:b1:f7:5c:b0:3a:6d:7b:
af:d6:d0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 16:52:46 2025 by rpki-client