This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/F6935C8EB35911EF96C43242C4F9AE02.roa
File: F6935C8EB35911EF96C43242C4F9AE02.roa (raw, json)
Hash identifier: UOAVUtsa6x5VUPKAokEwHbl/QIwI3V+wZbzBmuwD0PQ=
Subject key identifier: CA:1D:57:20:35:6E:9D:F6:73:9D:47:7D:44:C4:36:C4:46:EE:9B:DC
Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial: C3
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/F6935C8EB35911EF96C43242C4F9AE02.roa
Signing time: Wed 17 Dec 2025 06:24:38 +0000
ROA not before: Wed 17 Dec 2025 06:24:38 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 153472
IP address blocks: 203.33.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Validity
Not Before: Dec 17 06:24:38 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69424ca5-a162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:54:3e:6f:40:32:1b:07:87:b3:14:0b:df:34:
4d:5b:99:50:9e:65:da:36:2f:e6:3b:c0:03:6b:c4:
dc:23:40:eb:eb:28:e6:07:d8:47:2e:e7:75:14:0c:
11:01:23:2b:e3:dd:ac:1c:b4:42:cc:c0:7a:06:13:
b0:26:f9:24:f1:07:f0:f3:87:3b:42:c9:9c:28:54:
9b:4f:4a:21:24:f7:d6:b2:99:3a:c8:92:b3:00:3d:
f3:65:ed:8b:ed:49:48:20:d6:38:cd:5c:fe:61:a0:
a7:5e:e8:c8:fb:0c:3a:72:da:36:6a:a4:96:ef:88:
46:d0:db:95:b1:25:53:f9:32:33:2e:89:47:32:a7:
a8:61:74:fc:4f:9c:05:ec:72:00:be:36:99:dc:b3:
44:bf:c8:5a:b3:4e:9a:29:e3:60:67:98:0a:44:a9:
c4:44:00:55:57:e1:d9:be:b0:84:7d:dd:73:77:09:
3a:1a:f0:7c:92:ab:5b:e2:3e:e7:56:c9:c8:d2:88:
9f:35:f4:0f:e7:38:4a:77:dc:6a:2c:dd:f5:4c:1d:
93:91:52:24:5f:c8:66:01:82:a3:a5:38:53:f7:81:
fe:3e:d1:54:84:53:5b:80:06:34:b6:c4:82:72:c4:
b2:8b:b4:91:f1:dd:b7:de:61:c9:85:ac:6e:c9:fc:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1D:57:20:35:6E:9D:F6:73:9D:47:7D:44:C4:36:C4:46:EE:9B:DC
X509v3 Authority Key Identifier:
keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/F6935C8EB35911EF96C43242C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.33.72.0/24
Signature Algorithm: sha256WithRSAEncryption
69:45:92:02:b3:89:f5:64:78:dc:6c:a0:ab:fa:87:ec:80:0f:
74:0b:aa:98:4f:64:fb:e6:80:bd:d5:91:28:82:00:84:af:9e:
83:aa:38:ab:29:c5:70:05:58:ea:82:11:2c:d5:a1:3e:29:e0:
cc:8b:76:31:5f:14:cc:3f:86:5f:11:23:bc:3e:ec:df:94:3c:
9d:15:49:4e:93:5d:d8:2c:98:27:87:c4:5e:33:da:e9:08:8a:
35:cc:d0:b6:b9:d8:8b:aa:70:4c:12:48:21:88:1a:84:63:bc:
67:29:41:ea:99:30:6f:11:c8:a4:74:1c:2b:2f:8f:9a:38:84:
c8:40:11:c6:14:6d:35:ab:2c:fb:52:2b:09:c0:ab:b6:e1:54:
fb:0c:8e:72:d5:88:63:ae:63:d9:37:1c:25:6a:53:c4:8c:27:
6d:23:c2:8c:0e:27:23:81:ed:81:8e:78:64:1a:96:68:2e:08:
18:3f:68:75:7d:ac:21:94:ef:94:f1:98:35:ba:9a:ab:1e:ab:
00:34:06:3b:09:b5:3f:87:23:95:db:ba:84:fb:ac:39:c9:ba:
e7:38:5f:24:e7:61:40:57:34:87:5d:68:15:d3:8e:69:d0:50:
df:0e:d1:dd:89:ab:4e:ab:50:3e:0d:61:24:27:c6:d1:29:43:
91:c4:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:51:13 2025 by rpki-client