This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/AF73E1423D2011F0ACC34F2BC4F9AE02.roa
File: AF73E1423D2011F0ACC34F2BC4F9AE02.roa (raw, json)
Hash identifier: G7XJUNE6LKzi0QYOkaYPQ7Vy0KiOQLYThr8A3Z0e3Ho=
Subject key identifier: 09:88:14:83:13:3E:1B:CF:5B:EE:D8:32:3A:56:37:4B:7E:A7:4B:35
Certificate issuer: /CN=A91E7656/serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Certificate serial: 0C79
Authority key identifier: A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/AF73E1423D2011F0ACC34F2BC4F9AE02.roa
Signing time: Sun 14 Dec 2025 18:15:27 +0000
ROA not before: Sun 14 Dec 2025 18:15:27 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4859
IP address blocks: 203.207.96.0/21 maxlen: 21
203.207.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7656, serialNumber=A20C57F52CE98C8848F636250E4A4670811B5076
Validity
Not Before: Dec 14 18:15:27 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=693efebf-48ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:3f:dd:03:e6:9f:7f:b2:3d:2a:e0:7f:9c:
0e:91:ce:4e:8a:55:67:f7:43:93:2e:f6:dc:06:33:
05:de:42:87:7a:9d:06:8e:f7:6a:76:7b:cf:d6:d8:
9e:c3:d1:1e:d0:80:50:09:99:2e:04:ea:fd:e8:e3:
7e:72:da:6a:90:d8:7f:76:fa:dd:38:9c:05:04:36:
47:74:e3:08:b7:de:b3:09:64:ad:2a:86:7c:a8:77:
cc:ce:a3:27:02:23:b9:95:ff:5b:e0:ad:95:c6:77:
b0:5d:15:6a:c6:53:34:79:59:07:e7:d2:90:ff:55:
bf:ce:bc:36:b1:55:97:17:c8:aa:d1:f9:7a:1e:63:
86:55:9b:57:84:7c:ba:b0:ab:fa:eb:5c:4f:96:74:
d0:f5:a8:79:2d:64:4d:af:9c:5b:20:19:54:cf:c2:
65:06:57:11:30:6c:8a:35:5a:d9:06:73:5a:27:45:
fe:0b:04:a0:38:1b:7c:09:25:d7:a5:f3:c7:f1:09:
77:bb:5a:cb:1d:fe:00:ef:01:9b:ea:9a:65:eb:61:
9f:75:c0:0e:f1:0c:c9:24:85:36:68:87:60:b8:5c:
df:cf:26:75:ac:15:90:1f:7f:85:8f:84:5a:eb:b5:
0c:e8:99:db:c7:12:df:8e:f3:fd:67:81:fd:4b:ae:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:88:14:83:13:3E:1B:CF:5B:EE:D8:32:3A:56:37:4B:7E:A7:4B:35
X509v3 Authority Key Identifier:
keyid:A2:0C:57:F5:2C:E9:8C:88:48:F6:36:25:0E:4A:46:70:81:1B:50:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/ogxX9SzpjIhI9jYlDkpGcIEbUHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogxX9SzpjIhI9jYlDkpGcIEbUHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7656/0EE3A5BC0CD611EABF562553C4F9AE02/AF73E1423D2011F0ACC34F2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.207.96.0-203.207.107.255
Signature Algorithm: sha256WithRSAEncryption
5d:8e:59:a4:8b:10:63:bc:36:11:8d:ef:62:ca:83:79:66:21:
bc:cf:36:7d:ad:0e:53:e5:da:69:07:ac:b2:f5:aa:57:02:ff:
6f:07:2b:b4:34:29:f3:42:dc:53:7f:01:6c:7c:78:13:1c:b3:
bd:1c:e0:18:ed:d5:bc:21:75:0a:88:09:8c:d6:5d:4e:dc:ba:
79:45:b2:26:bb:a1:f7:09:35:9a:33:69:85:f2:0b:ef:c0:f0:
60:f2:15:22:ca:5c:58:27:2f:61:65:4f:51:45:d0:24:34:00:
2b:a0:82:48:72:fd:33:f8:0d:f5:2e:a7:62:e7:ea:93:1b:27:
f2:da:2a:63:e6:89:26:ed:80:21:36:5d:cc:54:7c:f6:5e:a2:
a1:85:61:e5:f5:0d:d8:c8:3a:e1:b7:0a:d2:67:de:16:6d:af:
ba:1d:d9:83:61:82:8e:90:08:65:72:85:8f:85:76:4e:1e:69:
16:77:20:8c:be:04:a0:62:2c:e5:30:60:68:4b:d7:4f:87:d5:
7d:a9:e6:67:5f:c5:e6:b6:ee:39:00:3f:0c:3c:73:1c:ec:e6:
64:6e:90:9c:ee:ba:de:41:00:64:94:57:e6:58:b0:cc:19:f3:
38:d8:41:4d:bc:9e:d6:97:95:84:8a:45:9e:90:e1:ef:09:cb:
17:30:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:37:52 2025 by rpki-client