This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/25ED44B41EE411EFA62B1335C4F9AE02.roa
File: 25ED44B41EE411EFA62B1335C4F9AE02.roa (raw, json)
Hash identifier: PPgHi4xJDW0BKQRIHTMdssQv8Q8vcJnoqHRhx2Hamts=
Subject key identifier: FA:B1:AA:87:66:80:DB:50:24:47:C0:1C:00:77:52:38:40:DE:11:74
Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial: 0168
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/25ED44B41EE411EFA62B1335C4F9AE02.roa
Signing time: Wed 17 Dec 2025 04:23:20 +0000
ROA not before: Wed 17 Dec 2025 04:23:20 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 202013
IP address blocks: 203.56.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Validity
Not Before: Dec 17 04:23:20 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69423038-6cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:77:7a:56:94:de:0d:08:2e:0e:4c:70:9c:
8f:8e:85:e5:c9:7e:27:df:bc:95:68:15:3c:22:b5:
db:3a:4c:a9:8f:b9:cd:6e:3d:47:e8:48:31:c5:00:
34:40:12:bf:89:79:51:38:e8:ac:9c:44:93:63:44:
f8:f1:73:07:ef:10:87:00:d2:6a:5d:5c:d0:c8:b4:
b5:46:e7:8c:29:8e:48:03:88:34:c5:ff:0f:46:26:
96:ea:f8:dd:ae:2c:2b:e6:12:88:26:8a:1c:e9:5e:
ed:dc:42:3f:73:5d:59:92:78:5d:35:9c:2b:6c:a5:
31:c2:df:d3:18:e3:3c:3b:85:8c:b7:98:80:f7:12:
cc:8b:98:fe:40:7f:d7:43:87:c8:16:03:b4:a2:5b:
0d:33:37:16:c3:3f:6d:9d:ed:97:61:75:57:75:75:
2a:e0:10:e4:dc:5a:08:9d:4a:42:14:1e:2a:93:e4:
af:ec:66:9d:2b:a4:4f:43:b8:d6:e3:ac:02:59:75:
19:cb:31:cf:e2:23:f2:a0:e9:5b:cf:94:e8:dc:f1:
82:15:c5:92:74:72:ff:bb:2a:5e:f6:36:fa:84:f6:
6c:ed:3f:57:64:ac:91:7f:87:fa:39:01:e1:d4:97:
ae:33:3c:9c:a6:c9:30:3e:e8:8e:1f:54:60:8d:85:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:AA:87:66:80:DB:50:24:47:C0:1C:00:77:52:38:40:DE:11:74
X509v3 Authority Key Identifier:
keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/25ED44B41EE411EFA62B1335C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.56.81.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:96:7f:b0:d8:b9:74:47:ff:ef:71:88:0e:49:80:4f:6d:47:
e8:be:22:09:05:7d:ae:f9:c6:6f:34:25:19:0b:68:d9:4e:b9:
52:1f:73:fc:74:2c:cf:bf:f7:88:b3:45:78:0f:1a:0c:52:ee:
30:a4:cd:d1:a8:48:e1:5d:26:b5:42:aa:b4:f5:2c:78:81:c5:
2c:75:89:40:27:24:db:7b:95:c4:8c:99:f0:9c:d4:73:3a:0b:
fd:6a:93:c7:c7:b1:cc:9a:6a:05:cc:3d:dc:f7:2d:fd:d3:21:
22:f1:ea:50:47:88:1d:fc:17:59:db:ec:7e:ac:e8:93:4a:ea:
2d:48:ee:54:a4:f8:85:46:38:c6:85:62:65:bf:e5:66:77:50:
2a:63:73:00:8e:0c:a6:22:a6:c4:41:c1:97:e4:f9:5d:98:8d:
c7:50:a3:47:60:99:5d:7c:d6:7c:05:c9:36:08:4a:ea:c4:40:
82:2e:cb:4b:bf:3e:8c:87:6d:94:af:cd:09:b2:44:aa:e9:b9:
44:ad:15:b2:6b:f2:9e:24:54:46:d4:08:35:b6:c6:9a:a6:6b:
4c:19:af:09:08:5a:40:ec:0b:58:c9:f3:a2:5b:0b:6c:52:cb:
e0:4d:5f:f3:cc:eb:e7:1a:68:13:5b:78:7a:4b:d6:4c:8e:7d:
bc:ef:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:50:58 2025 by rpki-client