This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
File: F305F43270E711EF8573CF71C4F9AE02.roa (raw, json)
Hash identifier: tqumfro95QWKEzub+U10L7d/fzctz6OjGxGeZOQWgb4=
Subject key identifier: FE:1B:08:5C:64:AE:E1:5A:E0:37:62:11:EA:FF:17:FC:44:67:C3:92
Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Certificate serial: F1
Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
Signing time: Wed 17 Dec 2025 05:24:07 +0000
ROA not before: Wed 17 Dec 2025 05:24:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 133453
IP address blocks: 160.187.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:18:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA5B, serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Validity
Not Before: Dec 17 05:24:07 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69423e77-f11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:94:0b:d6:30:78:c5:2e:7f:ec:89:4b:08:
d6:64:74:fc:5e:c7:ab:87:8a:55:4d:7b:21:03:96:
00:51:2f:a8:ea:eb:bf:b1:d0:30:16:4f:11:7e:41:
af:7e:1e:b9:04:53:0b:7b:0d:ed:fd:bb:b4:07:81:
3f:ac:74:97:a8:a8:ad:5c:99:d5:3c:a0:ca:86:60:
b0:ee:22:d3:99:ac:aa:4a:05:25:91:ff:57:cc:d3:
43:01:43:67:09:f3:77:8a:aa:46:3f:4a:65:9c:4f:
98:0f:72:c2:d7:a7:fd:12:b4:6d:5f:b3:77:20:d6:
93:1e:18:0e:70:c3:1c:be:57:7e:70:d6:38:bc:1c:
96:41:f3:e1:bc:9a:7a:f4:03:00:ec:91:1a:e3:96:
7b:eb:01:fc:57:fb:d4:4f:37:5c:d5:80:56:e5:a6:
61:41:3b:48:6f:9d:06:16:b6:73:57:b0:09:25:ba:
56:35:27:ed:51:4c:7e:f7:40:bf:bb:5e:98:09:a1:
ff:7a:29:bf:21:a8:89:9a:70:7b:27:80:df:1c:96:
c4:8d:19:0c:ca:19:f8:67:bf:15:df:81:25:c1:e7:
16:12:71:cf:c2:5e:cb:91:d2:30:20:52:86:92:5e:
40:ac:c3:77:55:36:9a:13:25:54:89:23:28:16:90:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1B:08:5C:64:AE:E1:5A:E0:37:62:11:EA:FF:17:FC:44:67:C3:92
X509v3 Authority Key Identifier:
keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.40.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:d0:7f:c6:e0:3d:d4:76:e6:9e:9b:94:95:9f:68:cb:82:41:
78:2d:be:e5:5b:28:e1:45:ad:71:40:59:ec:4f:19:1e:7f:77:
7e:8c:e4:1e:89:12:25:f4:18:b3:25:53:1c:cd:20:45:ae:ec:
05:b8:55:8e:bf:2b:1a:49:3a:be:cd:66:53:18:b1:c1:d0:f3:
c0:78:ee:69:b0:41:06:4e:68:10:37:f5:56:f9:f0:be:d0:1d:
ce:0c:42:50:c9:44:de:36:5c:31:09:3b:3e:31:67:bf:f2:01:
14:f6:34:58:aa:ad:53:10:44:b6:c8:ef:39:98:2d:fc:e7:6a:
fd:ba:5d:06:b2:70:4e:dc:59:46:03:60:ed:43:b6:00:d6:06:
18:f8:5a:76:42:28:29:a8:c1:e5:45:d6:da:fc:be:29:e6:cf:
65:78:75:f0:83:93:31:56:64:fb:c2:51:7c:d5:f3:98:1c:35:
25:7d:8c:9f:0d:e0:f1:f2:52:19:97:68:1f:4a:1d:62:22:0c:
fb:7d:ee:e5:fa:2f:ab:2b:f2:ec:02:a5:af:71:dd:d6:91:d2:
45:7d:b9:5b:b8:0d:54:53:f9:dc:53:3d:0e:06:65:70:c3:d4:
06:41:4a:88:5a:8b:68:33:01:0c:f8:13:81:f8:f4:4a:bc:f3:
29:16:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 11:42:11 2025 by rpki-client