This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
File: E2256F74D97011F0A26925FA9AD3641D.roa (raw, json)
Hash identifier: TI44+NsGD7V8BTrwcUhxiq64WHAzH6NcxXdWKxOfCZU=
Subject key identifier: 33:6C:7C:2E:BC:99:18:24:0F:0D:66:0C:2C:21:F0:54:2D:66:69:A2
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 0591
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
Signing time: Mon 15 Dec 2025 04:45:30 +0000
ROA not before: Mon 15 Dec 2025 04:45:30 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 31715
IP address blocks: 103.204.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Validity
Not Before: Dec 15 04:45:30 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=693f926a-f084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:f5:d7:19:89:7d:f4:f5:c7:ff:46:55:1b:
c7:91:56:be:b8:c8:b3:31:39:d5:84:98:8d:19:ac:
67:13:93:cd:60:4a:8c:fc:73:3b:a2:b2:b0:98:76:
d7:ca:7b:13:ce:a7:93:46:83:33:ac:9b:67:2e:6e:
74:0c:bd:b6:7d:08:14:5f:38:86:c0:56:18:f9:72:
d2:aa:75:9f:7e:3e:3d:29:5c:d2:06:a4:56:98:d9:
4a:18:a9:5a:11:eb:98:70:0a:61:e9:70:be:b5:b8:
45:7b:89:fe:e7:32:d8:42:21:f4:50:8c:10:1d:b1:
45:f4:f3:dc:60:d4:46:1e:9d:ca:ae:8f:ec:7b:95:
97:61:70:74:56:37:49:01:c0:07:b6:70:b1:07:38:
b1:71:6d:55:29:b4:7e:86:45:8c:98:b1:70:0e:fc:
b5:da:c8:df:d0:1d:ff:c5:31:60:d5:b3:d7:ab:d1:
a6:22:74:65:cd:ff:1d:08:e2:f9:79:85:0e:19:98:
cb:3f:76:ca:a0:ab:64:b3:03:98:12:ad:d8:d9:9f:
28:ce:79:c5:40:0d:db:a5:00:1a:9d:d4:89:3b:8f:
97:77:21:b5:ec:41:08:f5:78:74:a2:f1:48:13:7d:
5c:1e:8f:3f:4a:2d:d5:05:82:c1:68:ae:37:2d:79:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6C:7C:2E:BC:99:18:24:0F:0D:66:0C:2C:21:F0:54:2D:66:69:A2
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/E2256F74D97011F0A26925FA9AD3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.23.0/24
Signature Algorithm: sha256WithRSAEncryption
66:15:e4:96:fd:42:51:75:1e:65:79:3d:de:00:95:02:c3:4b:
e0:a0:7e:6d:1a:29:e4:22:95:39:37:80:28:ed:80:a0:b7:d2:
bf:a5:84:f2:1c:3b:03:b9:02:5c:60:9e:51:96:95:86:63:56:
c8:75:74:2c:f3:75:31:8e:18:ba:dd:41:de:6d:ce:44:61:d6:
37:91:df:03:30:b4:55:ae:28:ff:9b:a7:07:46:3a:37:c6:38:
76:2a:49:dd:5a:cb:53:01:30:54:0e:54:78:2f:bb:ed:7f:b7:
92:cd:46:40:68:06:25:5d:0d:4f:4c:c8:f0:77:22:eb:b2:24:
94:23:b0:01:99:1b:e5:c3:c4:a9:9a:6a:a8:49:2c:b3:4a:19:
e2:84:88:cb:a5:53:fe:e8:28:a6:8b:57:9f:90:c8:57:62:b2:
6e:bc:60:e2:53:d0:c0:f5:62:37:f1:9e:fe:62:06:19:fc:f8:
8f:63:a0:a1:8a:86:39:3d:0e:a0:d7:65:15:26:00:df:43:b2:
ae:6f:76:b5:24:f5:c4:17:b3:e6:4b:0a:3c:80:76:d4:83:54:
7f:cd:57:db:0c:b9:48:e6:8b:1b:e8:02:7c:6a:dd:59:e2:f8:
1f:7c:66:df:c3:d0:d0:fd:db:70:46:94:ca:7f:e8:7c:0d:28:
a2:ba:f5:23
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5
RkEwNjA4QTcwHhcNMjUxMjE1MDQ0NTMwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTNmOTI2YS1mMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyv/11xmJffT1x/9GVRvHkVa+uMizMTnVhJiNGaxnE5PNYEqM/HM7orKwmHbX
ynsTzqeTRoMzrJtnLm50DL22fQgUXziGwFYY+XLSqnWffj49KVzSBqRWmNlKGKla
EeuYcAph6XC+tbhFe4n+5zLYQiH0UIwQHbFF9PPcYNRGHp3Kro/se5WXYXB0VjdJ
AcAHtnCxBzixcW1VKbR+hkWMmLFwDvy12sjf0B3/xTFg1bPXq9GmInRlzf8dCOL5
eYUOGZjLP3bKoKtkswOYEq3Y2Z8oznnFQA3bpQAandSJO4+XdyG17EEI9Xh0ovFI
E31cHo8/Si3VBYLBaK43LXlgxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDNsfC68
mRgkDw1mDCwh8FQtZmmiMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx
RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvRTIyNTZGNzRE
OTcwMTFGMEEyNjkyNUZBOUFEMzY0MUQucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnzBcwDQYJKoZIhvcNAQELBQADggEBAGYV5Jb9QlF1HmV5
Pd4AlQLDS+Cgfm0aKeQilTk3gCjtgKC30r+lhPIcOwO5AlxgnlGWlYZjVsh1dCzz
dTGOGLrdQd5tzkRh1jeR3wMwtFWuKP+bpwdGOjfGOHYqSd1ay1MBMFQOVHgvu+1/
t5LNRkBoBiVdDU9MyPB3IuuyJJQjsAGZG+XDxKmaaqhJLLNKGeKEiMulU/7oKKaL
V5+QyFdism68YOJT0MD1Yjfxnv5iBhn8+I9joKGKhjk9DqDXZRUmAN9Dsq5vdrUk
9cQXs+ZLCjyAdtSDVH/NV9sMuUjmixvoAnxq3Vni+B98Zt/D0ND923BGlMp/6HwN
KKK69SM=
-----END CERTIFICATE-----
Generated at Fri Dec 19 21:48:01 2025 by rpki-client