This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6FEAD74CCFD811F0B57A1784C4F9AE02.roa
File: 6FEAD74CCFD811F0B57A1784C4F9AE02.roa (raw, json)
Hash identifier: 9G7Ca8WBU6EEfKzdu0Bkld0FZMyzLphLiqMX9DXSlU0=
Subject key identifier: 6B:79:F5:40:A7:F4:BC:6E:EB:2E:9B:E5:8D:36:52:63:E9:39:58:ED
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 02DD
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6FEAD74CCFD811F0B57A1784C4F9AE02.roa
Signing time: Mon 15 Dec 2025 00:20:45 +0000
ROA not before: Mon 15 Dec 2025 00:20:45 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 202.134.230.0/24 maxlen: 24
202.134.231.0/24 maxlen: 24
202.134.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Dec 15 00:20:45 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=693f545d-b28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cf:b1:9b:df:b6:d5:1c:b6:80:aa:50:f5:ee:
63:0f:27:ff:d3:e1:3c:dc:28:48:ee:62:a9:b7:1d:
4f:72:3a:e8:70:4c:69:0e:3d:43:e3:25:9a:3c:00:
c0:26:aa:32:df:2d:0e:fb:8d:30:b9:89:a0:81:ab:
d9:35:82:1c:bf:c5:a5:e5:07:d0:e5:29:17:ed:6f:
37:a2:b4:60:cb:7d:12:88:7b:b8:3f:79:e3:f3:5f:
5e:a1:15:41:e3:df:7b:9f:55:e5:60:45:87:82:b9:
3b:3b:c3:98:5a:80:9c:fe:16:a1:d8:8e:b6:d9:c2:
42:44:35:db:86:f2:f3:83:7e:07:5b:7f:69:40:af:
47:7a:08:c1:7f:e7:83:94:aa:f8:83:32:b1:c5:16:
56:d5:75:2c:7e:74:fd:ab:05:0c:67:1f:ef:ab:46:
51:cf:f7:47:36:73:a1:ae:05:95:a3:29:75:48:18:
a6:b6:21:04:c9:82:a5:e3:59:cf:16:0c:65:00:43:
d7:5b:04:e9:1f:b1:5e:7e:21:0f:5d:41:64:53:7c:
72:29:8d:9c:54:92:3f:2e:00:05:9c:24:b0:b2:bc:
3b:fb:32:f2:aa:30:ef:c1:48:46:7d:41:c8:75:17:
ad:b3:d3:91:b4:c6:98:60:ac:3f:3d:50:1a:1f:60:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:79:F5:40:A7:F4:BC:6E:EB:2E:9B:E5:8D:36:52:63:E9:39:58:ED
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6FEAD74CCFD811F0B57A1784C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.230.0/23
202.134.253.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b1:66:b6:92:8f:57:33:cd:63:eb:8f:30:4a:6c:84:1c:8c:
37:c3:d0:bc:23:bf:5a:a8:32:33:a5:38:16:0d:be:44:11:94:
86:f5:22:21:86:43:63:62:e3:06:69:89:4f:76:34:d4:47:de:
05:2f:27:9e:24:ca:4e:57:87:87:88:4c:97:90:e2:81:c0:31:
55:32:00:1b:8f:92:94:27:42:78:a4:21:fb:e2:c9:4c:17:0e:
71:fd:24:e7:f6:80:85:a3:cf:5f:56:13:75:df:7b:10:25:69:
d5:5b:8a:22:c6:05:ad:aa:29:71:de:6f:fe:29:7b:3a:54:0a:
19:89:cb:6e:b1:36:5d:a8:8c:b8:04:7e:fe:fc:87:c6:58:8c:
34:71:c2:e9:78:8e:a7:de:00:02:33:63:bc:75:9e:96:de:17:
25:86:7a:a7:85:ca:e8:3b:5e:3d:66:68:3f:6f:8d:1f:c2:10:
90:6d:17:47:5c:36:d4:7c:b9:02:75:f0:a5:fc:8c:9f:20:09:
d5:1a:99:dd:7b:af:d7:23:d3:d9:c4:4d:07:f5:3d:cc:ca:be:
77:ec:63:15:4f:d9:8f:3d:dc:0b:88:ea:9b:2b:2e:56:59:45:
3a:5f:c0:a7:02:ef:ae:73:6f:3a:93:a2:c3:90:77:e5:0e:c4:
15:71:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:33:25 2025 by rpki-client