This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/ABF1FAF2860211EF8D8AD011C4F9AE02.roa
File: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (raw, json)
Hash identifier: sBDPY7rsFbT6fhu5rc+2MguV1coxbEaU8Tzb3L7ehlg=
Subject key identifier: 1C:3D:7A:C3:40:C9:AA:F5:40:0A:64:41:71:4E:74:04:44:A4:7A:44
Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial: D1
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/ABF1FAF2860211EF8D8AD011C4F9AE02.roa
Signing time: Thu 13 Nov 2025 03:51:12 +0000
ROA not before: Thu 13 Nov 2025 03:51:12 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 153357
IP address blocks: 160.187.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Validity
Not Before: Nov 13 03:51:12 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=691555b0-273e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:ce:56:1c:96:37:0a:ca:31:d1:99:83:48:
98:2a:e7:17:fc:d4:e7:44:63:df:b4:36:d7:1f:4f:
c7:1a:02:1b:ce:ce:6b:35:ac:e5:e5:d4:0b:02:2d:
7c:10:28:7d:05:e5:bc:57:0c:b3:1b:ca:d2:f1:76:
1a:d7:46:03:44:1e:ef:a8:9f:0e:46:f6:5a:e1:b6:
a8:f7:9c:a4:79:ee:bb:56:dd:25:3b:d7:7e:55:48:
5b:80:c2:c0:6c:4a:21:81:c5:a0:7f:79:c0:07:0b:
ab:fd:ff:f6:ff:b6:61:e9:f9:df:52:f4:1a:2d:12:
ce:f0:05:d3:0f:80:2f:86:f6:05:d2:d6:7d:63:cb:
fd:37:db:d8:9b:c3:17:da:96:10:96:9c:ba:33:2e:
8d:31:7f:c8:14:58:25:ec:5e:18:e0:13:4b:7d:24:
c1:bf:f4:4e:ed:cb:48:db:cd:60:7b:64:0b:90:cd:
84:68:ae:12:c8:43:1e:07:4c:3d:4c:ac:8c:36:01:
4f:da:58:2e:d3:8b:08:e0:d0:c8:4b:a1:8f:13:d4:
62:dd:f5:ac:f6:bc:68:b0:1b:03:4b:bb:f8:7c:3b:
87:c5:cc:a3:69:51:0e:46:19:31:44:e7:35:1f:f1:
83:b6:64:df:91:1e:2d:b6:c2:8d:22:2e:14:ae:3a:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:7A:C3:40:C9:AA:F5:40:0A:64:41:71:4E:74:04:44:A4:7A:44
X509v3 Authority Key Identifier:
keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/ABF1FAF2860211EF8D8AD011C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.192.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:40:c8:cc:af:6f:2d:d2:28:19:74:f2:88:fe:25:53:35:2d:
70:4f:cd:77:76:b4:b8:5d:4c:32:b2:ad:bc:2f:d6:fb:74:2e:
36:d5:3f:d1:c9:79:ac:56:3c:38:4e:b9:f7:8d:51:79:8d:7e:
bb:fc:90:4c:5b:0d:95:61:89:ec:62:42:61:e4:af:c5:d4:93:
5b:1e:72:6a:05:f8:ad:74:d2:75:d2:ed:aa:c2:9a:d2:d3:a7:
06:73:37:b0:4c:bb:28:28:12:e2:ee:c3:83:6d:71:93:28:94:
7c:2d:2f:e9:8e:bd:12:16:35:a0:7f:7e:74:e0:d4:0b:41:c6:
05:d3:48:90:ef:5f:f0:08:75:34:eb:70:71:bf:ec:15:b6:8c:
0f:38:0d:2b:6b:db:d0:c3:63:44:de:20:1f:1d:34:52:02:4b:
42:de:7c:23:38:cc:ff:c4:b9:53:94:73:19:6e:30:cc:2e:6d:
84:d1:99:4a:28:8d:09:dd:23:f5:68:63:28:0c:a9:44:3a:f9:
f2:bd:91:ad:5c:b7:c6:35:a3:c5:6a:4a:60:dc:13:c5:54:87:
29:06:8c:54:1f:e9:90:14:1c:63:d5:82:95:b1:b1:eb:b7:50:
a6:1c:82:8f:bf:2c:93:11:50:25:93:c9:58:3a:c6:a7:08:aa:
8c:ed:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:46:46 2025 by rpki-client