This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/08C1C86EC44811F0A783F54FC4F9AE02.roa
File: 08C1C86EC44811F0A783F54FC4F9AE02.roa (raw, json)
Hash identifier: LQee+XhKOJkAia9gXyqy0jgcw8paskB+oVbYCpcaQvU=
Subject key identifier: 68:79:C0:C8:78:19:95:B8:EC:96:FD:8A:0E:8C:CB:A0:93:41:0A:0F
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 22AD
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/08C1C86EC44811F0A783F54FC4F9AE02.roa
Signing time: Mon 15 Dec 2025 06:11:57 +0000
ROA not before: Mon 15 Dec 2025 06:11:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137235
IP address blocks: 180.210.222.0/24 maxlen: 24
220.158.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8877 (0x22ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Validity
Not Before: Dec 15 06:11:57 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=693fa6ad-9293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:77:73:01:e8:0e:50:a9:0a:db:0a:35:20:
a6:0f:1e:e0:2c:41:e6:14:a8:cb:6a:aa:90:c6:cf:
bd:10:07:0c:01:8c:3d:38:1e:93:5a:13:92:dc:f2:
41:cb:08:d6:67:08:f5:66:d9:58:bf:9a:ba:5c:4e:
39:2c:4e:ae:d3:33:f0:d6:3a:4a:9a:8e:6a:44:b7:
8a:a7:f1:46:45:77:a7:af:aa:c7:69:10:28:78:16:
fa:58:78:04:de:e4:4b:73:00:cd:ae:e8:6a:15:3e:
ad:69:a4:45:7a:25:89:c2:aa:47:86:ac:7f:27:ab:
bb:f4:bd:d8:6a:f2:49:a4:fc:bd:e6:a7:ea:ef:50:
92:f0:a4:19:be:4b:97:09:d9:43:95:f7:3c:e4:bc:
97:a5:24:2b:04:51:38:ed:74:27:72:df:5a:62:c3:
b2:4f:69:c4:24:fe:84:eb:f7:ab:9e:f3:2b:b2:ba:
72:eb:21:54:f9:71:71:8e:82:40:83:08:46:6e:19:
3e:c6:bd:d9:79:c6:4f:88:b9:4c:cf:b8:e7:41:36:
ad:66:cf:ee:ff:89:b0:7f:91:e8:97:47:4e:ef:e5:
f9:7f:ef:bd:60:67:6c:77:f0:80:bf:e9:3e:ce:b1:
b4:71:64:89:4a:a6:8b:f1:c1:a0:81:d4:b7:ef:f5:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:C0:C8:78:19:95:B8:EC:96:FD:8A:0E:8C:CB:A0:93:41:0A:0F
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/08C1C86EC44811F0A783F54FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.210.222.0/24
220.158.204.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7a:80:61:2d:97:56:ab:2a:fe:6f:16:1d:f4:2f:62:57:42:
a2:20:05:74:c2:59:82:f7:71:60:71:73:7a:4c:55:11:9e:09:
32:a9:a6:91:fd:11:bf:2f:2e:e9:c7:15:71:77:59:f2:7b:52:
77:51:4f:a1:fa:a9:03:34:4f:23:0a:11:cd:c1:f7:d0:8f:89:
cd:9a:b6:1e:0b:8e:5c:ba:ac:69:78:69:6b:e9:f6:4d:ab:79:
a2:a9:db:ce:93:2f:79:cd:dd:ac:53:4f:85:02:74:fb:a6:86:
37:dd:fe:ed:83:5d:a8:2a:83:84:74:9b:50:35:6a:56:bc:77:
8d:a7:cc:80:e1:e3:a7:2d:60:34:65:3b:21:10:9c:b5:ac:01:
d1:46:de:91:9f:19:aa:7c:67:df:a4:c2:4f:07:1e:e1:07:54:
b0:6d:a6:6d:a9:94:29:1b:77:b9:9a:43:53:06:be:16:b1:43:
9e:92:7d:86:60:4d:51:21:b0:55:18:60:fb:e0:17:36:54:7c:
e1:c2:2e:4b:c5:e3:e2:da:b3:2c:5f:ab:a4:b4:8b:46:8c:3c:
34:08:3d:b1:5d:29:45:ff:b1:22:00:d3:75:1b:34:bd:7b:fa:
3b:5c:1e:31:a4:84:eb:0a:49:e1:a1:a3:0c:20:67:c7:89:5b:
5e:7d:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:25:14 2025 by rpki-client