This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/399EDDAA823F11F0895C5843C4F9AE02.roa
File: 399EDDAA823F11F0895C5843C4F9AE02.roa (raw, json)
Hash identifier: /r//PhS93LHdDuYeU1cRwdY/pqIxC89dGfVtSVhWFU8=
Subject key identifier: A0:08:DD:4C:E9:1E:8C:57:5E:1A:14:79:D4:FF:CE:2B:6C:D6:58:CB
Certificate issuer: /CN=A91854B7/serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Certificate serial: 06C2
Authority key identifier: F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/399EDDAA823F11F0895C5843C4F9AE02.roa
Signing time: Sat 08 Nov 2025 21:13:07 +0000
ROA not before: Sat 08 Nov 2025 21:13:07 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 13335
IP address blocks: 103.198.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 21:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1730 (0x6c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91854B7, serialNumber=F88B97404F9DC10F5AAB02F74EC490F98AD0D3B0
Validity
Not Before: Nov 8 21:13:07 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690fb263-180e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:88:8e:6d:4e:34:e8:f5:64:d0:ff:f5:6a:
24:d8:2d:c5:c6:ed:b2:fb:aa:da:b4:49:a9:56:96:
5b:b8:8b:8f:08:4c:b5:cf:00:e8:82:ff:b2:14:cb:
63:be:be:30:ea:b5:51:99:bc:5c:1c:75:a1:7a:1b:
73:d3:62:5d:b5:e2:ab:05:5a:34:f1:f3:9a:ec:d7:
cf:d4:a2:fe:5c:1d:ff:3e:f5:cc:92:ff:9e:38:f3:
9e:66:68:67:1e:ba:82:a1:ed:dc:e0:0a:fe:e1:56:
28:5c:cb:56:2c:ae:5f:41:9d:40:f2:bf:81:e4:a1:
74:1f:d4:60:be:00:23:44:81:0a:5b:2c:72:4b:24:
97:78:47:1f:e4:bd:44:e9:87:7d:38:26:08:eb:ca:
fa:4d:b9:60:d9:fe:0a:b8:6f:6c:2e:3f:a4:4c:93:
13:7b:f7:88:0c:9f:06:d5:42:6e:7b:eb:8f:12:f9:
b3:c7:6f:59:f3:cc:38:d8:7a:bf:67:1d:e6:57:eb:
23:45:a3:84:d3:f3:d6:36:49:dc:a5:94:8a:b2:4e:
3c:15:aa:ea:03:a9:d5:0e:74:2e:29:2b:9a:fd:b6:
5a:c0:19:8d:c7:c0:6f:7e:62:5d:9c:11:ef:b4:09:
87:fb:ac:70:be:dc:49:b7:2b:6d:19:42:6b:42:32:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:DD:4C:E9:1E:8C:57:5E:1A:14:79:D4:FF:CE:2B:6C:D6:58:CB
X509v3 Authority Key Identifier:
keyid:F8:8B:97:40:4F:9D:C1:0F:5A:AB:02:F7:4E:C4:90:F9:8A:D0:D3:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IuXQE-dwQ9aqwL3TsSQ-YrQ07A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91854B7/E180CE7A851E11EB8419B327C4F9AE02/399EDDAA823F11F0895C5843C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:81:0f:91:f5:63:dc:0c:b7:81:a2:a5:a1:b7:75:73:7a:a7:
0d:88:76:66:76:e9:dd:d3:3c:be:4f:8a:9c:59:fb:2d:e7:bc:
0f:2e:4a:46:a1:6c:44:be:03:7a:fa:e6:db:74:01:6b:56:4b:
0d:dd:bc:77:0d:9f:ff:9f:44:43:ff:af:09:fb:14:da:f3:0f:
5e:41:b5:a9:a7:3e:1c:c8:66:fa:2f:87:8c:e8:fc:4c:0e:5f:
81:e2:fb:9c:ea:35:31:50:f2:c9:b6:ed:08:46:9a:64:34:95:
19:7d:4a:4e:2f:53:be:8a:8e:41:36:ab:d3:e1:2b:b8:ca:dd:
77:11:af:9b:7b:f9:95:0a:ae:c1:4c:4f:2e:ed:3e:79:57:49:
b9:0b:8c:3f:52:9f:9f:6a:35:6b:f0:ba:2e:83:56:90:51:1f:
ed:56:a1:f3:a4:e3:3f:82:a6:6f:02:12:db:e9:cd:d6:46:8f:
fa:93:e7:14:4c:66:b5:74:61:6d:23:8b:d7:17:af:5a:5d:b2:
71:f2:b2:31:bd:e8:82:32:f5:c3:d2:c3:f6:bc:8d:df:61:ce:
d0:18:2e:d0:b2:96:c1:cb:03:7f:be:0f:f3:ad:a0:1e:5d:2f:
22:99:67:27:76:80:0a:ca:79:21:bc:88:53:96:57:36:a0:ea:
5a:d9:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 07:33:47 2025 by rpki-client