This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/31471C24E77311EFA0F80E53C4F9AE02.roa
File: 31471C24E77311EFA0F80E53C4F9AE02.roa (raw, json)
Hash identifier: sgCYmY0u72mPaWk0mHXeXdkyiWZnzFJlzsESmgk41YI=
Subject key identifier: E7:47:FA:18:BA:D6:2C:67:FC:AA:D3:47:0D:99:21:99:81:50:3F:94
Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial: A0
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/31471C24E77311EFA0F80E53C4F9AE02.roa
Signing time: Sat 13 Dec 2025 06:25:23 +0000
ROA not before: Sat 13 Dec 2025 06:25:23 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132894
IP address blocks: 160.191.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Validity
Not Before: Dec 13 06:25:23 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=693d06d2-f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:78:fb:e3:dd:cf:69:2c:bb:b5:1c:c9:e0:
4f:f4:04:ec:1d:de:3f:58:04:06:62:53:91:aa:7c:
47:21:4f:35:49:ca:3b:44:32:d7:c3:5b:02:89:0e:
6e:c9:64:7d:a7:3b:03:ac:7a:fd:6c:55:f8:cd:05:
26:a6:6a:a8:d2:79:f2:dc:81:c1:90:c3:b5:09:5c:
7e:05:14:be:41:3c:4b:34:60:1f:c8:25:7a:40:3d:
4c:f0:fd:a5:ce:9c:73:26:2d:ab:87:25:d0:f0:b0:
d4:ae:d7:5d:38:e7:67:f1:a5:3d:e6:1f:db:b0:92:
81:24:bb:f2:d8:15:41:f7:05:42:ae:da:0f:ec:cb:
d0:10:d8:3e:d1:54:4f:95:a6:bf:67:2c:cb:34:01:
ce:7c:06:1c:17:71:57:94:d1:2f:f4:23:98:83:23:
3e:55:98:12:3c:7a:8a:9b:a8:8b:ed:8d:82:dc:ca:
eb:35:43:b8:ba:ab:25:42:4c:e4:b3:7e:4f:bf:45:
0f:6b:51:30:77:8a:05:7f:b0:cf:1e:4e:96:cc:d9:
62:b0:49:91:13:76:02:89:cc:b2:b6:21:d4:32:2b:
76:90:07:cb:9f:93:d5:02:d2:32:9f:03:19:15:af:
0a:d2:2b:44:c8:f6:54:5f:3d:8d:57:51:77:d3:7f:
b3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:47:FA:18:BA:D6:2C:67:FC:AA:D3:47:0D:99:21:99:81:50:3F:94
X509v3 Authority Key Identifier:
keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/31471C24E77311EFA0F80E53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.60.0/23
Signature Algorithm: sha256WithRSAEncryption
73:4c:ea:89:b0:e6:f3:0a:fa:59:f1:90:c0:10:50:09:92:07:
78:c5:75:26:a0:74:52:c5:53:88:3c:5a:59:2f:07:83:02:57:
d0:4f:37:9f:ad:13:83:f8:76:bb:b2:b1:e7:ce:16:0a:27:18:
74:8d:64:b9:78:e4:5a:dd:a6:15:d9:00:fd:3b:c5:c1:4f:1d:
a8:b3:6f:0e:92:75:27:79:0b:26:93:aa:20:3e:69:7b:11:0a:
ef:29:63:0f:3d:a1:f6:41:12:dd:da:60:76:78:a0:07:e4:28:
0e:0e:6e:b4:a8:a2:1f:7c:6f:88:e9:a1:7d:7e:9a:cf:2c:64:
3d:92:ac:c3:e6:ca:3c:e2:d8:56:5a:f2:85:f0:ad:1b:21:bd:
c5:7b:43:f0:55:46:62:e0:f6:34:75:a0:82:cd:0d:2d:1a:69:
4a:a6:f3:8a:eb:b3:f9:95:4e:39:7c:04:7f:39:63:87:1d:04:
b2:05:e1:b0:78:1f:78:9a:ee:45:1c:55:26:0a:cf:31:a3:1b:
1f:09:57:49:9f:9e:83:25:68:bd:f8:10:dd:aa:38:db:fb:4a:
63:8a:d0:d3:00:79:3c:6c:d4:ba:0a:a4:7e:2a:26:39:6c:d6:
f4:45:d6:e9:0f:2c:86:28:d2:d1:d2:19:ca:54:07:48:dd:b1:
73:a1:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:00:07 2025 by rpki-client