This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/4AB6B736DA3F11F0A550B47F8ED3641D.roa
File: 4AB6B736DA3F11F0A550B47F8ED3641D.roa (raw, json)
Hash identifier: o21jgh9wurw+Q8rhFWS/mFvCRGzFGONSERAdmnvicAQ=
Subject key identifier: A8:D5:D5:F5:07:82:12:97:A0:A2:6D:93:EA:4D:F2:48:76:06:FA:D4
Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Certificate serial: 03
Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/4AB6B736DA3F11F0A550B47F8ED3641D.roa
Signing time: Tue 16 Dec 2025 05:23:02 +0000
ROA not before: Tue 16 Dec 2025 05:23:02 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 64050
IP address blocks: 43.226.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 05:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Validity
Not Before: Dec 16 05:23:02 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6940ecb6-fff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:55:b2:79:e9:55:2f:19:a3:0f:ff:c5:18:
e4:f2:4c:8e:9b:11:e0:8b:a1:31:b4:bf:ec:dd:cb:
c4:c4:b6:57:50:71:ad:95:09:b2:b2:68:fe:a1:ea:
fd:ef:29:0b:bb:1f:04:34:de:bf:3d:5a:a3:e9:1b:
59:6b:8b:24:29:f3:4c:7d:e0:4c:1b:f7:68:8f:fb:
fd:63:04:b6:f6:92:ae:41:d1:16:11:29:52:de:1b:
80:78:e2:cb:dd:7c:e2:9e:ee:5c:07:d5:c6:69:86:
fd:42:16:4a:2b:20:95:5f:af:93:40:39:42:02:12:
e8:e3:3e:65:6d:b6:1d:ad:7d:54:d0:2f:b6:80:94:
35:06:19:74:dc:3a:88:f3:67:0b:55:63:72:f4:64:
14:53:b4:9c:9e:24:04:83:48:ce:c9:66:17:b3:02:
19:cd:fd:68:61:f3:93:b8:ec:2a:de:0a:67:4b:f5:
63:bf:54:17:85:b4:23:fa:d4:3f:89:bb:5f:cc:d2:
47:44:d3:94:47:67:ec:7a:b6:0e:c0:bb:13:5b:31:
3f:ac:54:7c:44:f9:84:b4:f1:53:27:3f:45:4d:56:
c2:f2:51:8d:18:6d:2b:40:62:0d:3b:ce:08:a7:d1:
ce:02:ae:30:e8:8f:d6:a1:83:a5:07:f7:4b:f6:bb:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:D5:F5:07:82:12:97:A0:A2:6D:93:EA:4D:F2:48:76:06:FA:D4
X509v3 Authority Key Identifier:
keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/4AB6B736DA3F11F0A550B47F8ED3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b9:a5:25:b2:e1:de:e1:5a:2e:2e:e5:8c:34:db:d5:93:89:
ef:c6:8e:06:ae:4d:0d:f1:62:60:b2:a8:2d:38:d0:41:5f:14:
43:a0:f7:03:fd:98:b6:6f:ae:3c:0c:e9:f7:11:cb:e9:99:03:
13:3a:49:c8:30:be:b5:f1:16:8f:26:d3:03:67:56:fd:c3:a4:
db:4e:bd:1f:ff:21:d2:50:bf:2a:7e:68:6e:66:b3:9a:79:fa:
20:da:21:6e:c9:87:8a:54:21:b1:c6:79:02:b2:23:cc:45:52:
8f:56:6d:73:f9:b9:4e:ab:b3:3a:7f:ee:8e:97:3c:2f:6d:03:
2e:1b:4b:d4:b2:49:d2:37:b0:bc:f0:18:9b:d2:71:e3:c3:17:
ed:ea:6e:a4:f7:43:de:0c:cb:0b:12:c8:05:57:78:ee:85:ba:
62:75:45:84:9b:f8:7c:bc:be:15:04:bc:ea:4c:0b:94:4c:49:
98:ae:07:42:e6:da:c4:a5:12:b5:9a:52:e5:d7:69:d2:f9:26:
00:b7:7a:ca:e9:32:75:80:ea:bb:ed:df:fa:a2:a7:8b:c7:05:
e1:88:c5:64:03:dc:a8:c0:1d:38:32:2b:d0:9a:36:8c:65:21:
d0:cf:80:c2:e1:d4:c0:f1:b0:c2:bd:5f:ed:0b:1f:fc:21:e3:
bc:38:34:55
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3
N0JCMjRCRDAeFw0yNTEyMTYwNTIzMDJaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NDBlY2I2LWZmZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbLlWyeelVLxmjD//FGOTyTI6bEeCLoTG0v+zdy8TEtldQca2VCbKyaP6h6v3v
KQu7HwQ03r89WqPpG1lriyQp80x94Ewb92iP+/1jBLb2kq5B0RYRKVLeG4B44svd
fOKe7lwH1cZphv1CFkorIJVfr5NAOUICEujjPmVtth2tfVTQL7aAlDUGGXTcOojz
ZwtVY3L0ZBRTtJyeJASDSM7JZhezAhnN/Whh85O47CreCmdL9WO/VBeFtCP61D+J
u1/M0kdE05RHZ+x6tg7AuxNbMT+sVHxE+YS08VMnP0VNVsLyUY0YbStAYg07zgin
0c4CrjDoj9ahg6UH90v2u57pAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqNXV9QeC
Epegom2T6k3ySHYG+tQwHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz
RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzFBMC9ENjk5NERFNkRBM0UxMUYwODFGNUE0NTc4RUQzNjQxRC80QUI2QjczNkRB
M0YxMUYwQTU1MEI0N0Y4RUQzNjQxRC5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEACviFjANBgkqhkiG9w0BAQsFAAOCAQEAHLmlJbLh3uFaLi7l
jDTb1ZOJ78aOBq5NDfFiYLKoLTjQQV8UQ6D3A/2Ytm+uPAzp9xHL6ZkDEzpJyDC+
tfEWjybTA2dW/cOk2069H/8h0lC/Kn5obmazmnn6INohbsmHilQhscZ5ArIjzEVS
j1Ztc/m5TquzOn/ujpc8L20DLhtL1LJJ0jewvPAYm9Jx48MX7epupPdD3gzLCxLI
BVd47oW6YnVFhJv4fLy+FQS86kwLlExJmK4HQubaxKUStZpS5ddp0vkmALd6yuky
dYDqu+3f+qKni8cF4YjFZAPcqMAdODIr0Jo2jGUh0M+AwuHUwPGwwr1f7Qsf/CHj
vDg0VQ==
-----END CERTIFICATE-----
Generated at Thu Dec 18 20:27:21 2025 by rpki-client