This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa
File: 1D98617687B311EFB4972044C4F9AE02.roa (raw, json)
Hash identifier: QgMj3I5bGTGmmj+YPUJfTzhJ0oh+U+bAGWMsBoGH6bk=
Subject key identifier: D7:95:50:94:9B:07:AD:07:5C:6B:43:87:5B:7B:34:65:E8:84:2A:B3
Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Certificate serial: 01D0
Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa
Signing time: Fri 19 Dec 2025 03:22:58 +0000
ROA not before: Fri 19 Dec 2025 03:22:58 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137453
IP address blocks: 203.99.144.0/24 maxlen: 24
203.99.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Validity
Not Before: Dec 19 03:22:58 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6944c512-06bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2a:62:3a:98:fb:de:98:90:fd:08:d2:ed:6a:
9f:04:1a:5c:45:ff:7d:6b:85:2c:53:e0:35:30:7e:
1e:3b:6f:4e:5a:c1:0b:95:5d:06:06:da:bc:60:da:
99:32:4f:b7:28:8b:16:97:15:7b:14:8c:32:b1:9c:
49:d5:60:27:db:c4:04:2e:a6:f3:fc:7f:66:be:b3:
d9:cc:2d:4e:74:62:c8:d7:c4:cf:e2:df:02:13:10:
5c:0e:ab:d4:9c:66:85:fc:7f:22:51:f9:4f:3a:9e:
e9:2b:c8:7a:65:a6:d0:22:cc:e8:4a:2f:d6:e6:80:
7d:53:d9:4d:01:12:73:b1:69:d8:6b:f5:db:19:3b:
7c:94:bd:75:d5:66:67:21:86:fe:94:95:f4:a6:30:
18:43:d8:1d:fa:da:b6:05:9a:09:c5:03:be:a4:cc:
4b:9e:69:16:5e:59:70:63:ee:d6:99:18:53:ae:81:
9c:cf:c8:4d:7f:2d:45:98:76:19:1b:1c:9d:2a:ee:
b3:c3:0c:da:82:96:b4:d7:47:5b:ce:d0:12:fd:2a:
02:24:a9:f2:68:5a:0a:00:b9:19:47:2a:4a:ff:32:
97:f0:5e:a9:91:70:b9:da:e5:7a:34:b8:43:22:db:
5c:ac:f4:64:a1:97:b8:fb:35:06:84:a3:17:64:eb:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:95:50:94:9B:07:AD:07:5C:6B:43:87:5B:7B:34:65:E8:84:2A:B3
X509v3 Authority Key Identifier:
keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/1D98617687B311EFB4972044C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.99.144.0/23
Signature Algorithm: sha256WithRSAEncryption
87:94:2e:20:5d:a1:d2:c9:f6:0b:83:67:5d:53:f5:3a:8f:1a:
fa:c0:2d:fb:00:30:7f:f3:a8:fb:47:9b:6f:b5:65:59:a2:9c:
76:1e:0e:23:ed:b6:c5:50:ce:0e:34:a3:75:b3:5a:d7:f7:40:
98:b9:25:b8:fe:31:c4:cb:f4:db:eb:0e:d2:84:81:71:01:8d:
66:c5:c8:ef:94:53:70:1a:62:00:e5:54:15:86:a0:2d:04:79:
52:7b:e1:d8:5c:f9:34:d5:85:57:37:ca:ff:59:b9:e6:0b:14:
c9:db:c3:42:16:fc:cb:23:cb:b4:cc:58:93:28:99:e5:9d:92:
ce:5c:7d:8f:58:23:f0:f1:37:c6:27:b8:05:ac:85:d2:31:5a:
c2:29:f2:53:a2:b9:86:88:32:d1:03:1e:19:fd:f6:b8:b7:84:
c9:98:c9:cb:fc:5f:a5:1b:69:cc:de:1b:0f:80:f3:9f:37:08:
2c:fb:5a:62:78:43:67:f0:f2:79:29:23:07:a6:cc:43:9d:bb:
61:48:42:85:13:18:ef:5c:31:e0:04:eb:50:e4:8a:61:1e:61:
9d:74:ff:e4:2d:46:f5:b4:2d:49:67:65:30:d1:4f:df:4d:6e:
58:3c:e0:de:84:df:6b:3e:3e:b1:b4:d9:12:cd:71:72:85:72:
7f:7d:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:08:16 2025 by rpki-client