This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/42DAE250C8C711F08A7B6740C4F9AE02.roa
File: 42DAE250C8C711F08A7B6740C4F9AE02.roa (raw, json)
Hash identifier: LXms9Zrbk+PXqSOcObRZdGiWL7GgK8jI8GvKqfmYMjY=
Subject key identifier: 68:E2:EE:42:89:C4:EC:CC:8D:0C:2E:0B:30:72:89:0E:DE:FF:8B:94
Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Certificate serial: 353E
Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/42DAE250C8C711F08A7B6740C4F9AE02.roa
Signing time: Sun 23 Nov 2025 23:58:02 +0000
ROA not before: Sun 23 Nov 2025 23:58:02 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 1299
IP address blocks: 103.112.36.0/22 maxlen: 24
180.189.160.0/20 maxlen: 24
2405:1f00::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13630 (0x353e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3
Validity
Not Before: Nov 23 23:58:02 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69239f8a-2192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:6c:72:8f:6e:96:09:e1:3f:01:a1:42:7e:
78:f0:87:85:5a:5b:a9:37:e8:b6:5f:4f:11:dd:dc:
86:1e:b9:32:45:45:2d:f6:89:4f:31:28:d1:2d:4e:
c2:d4:98:42:f6:10:99:d4:a3:28:d9:f1:6a:b9:4f:
6e:c9:67:ca:28:2a:c1:ca:ef:42:83:bb:ae:b5:3e:
33:15:23:3f:60:35:d8:24:c2:61:67:48:f0:cb:9c:
42:6e:37:7a:7b:b8:88:50:c6:cc:c2:e0:7a:33:8b:
ed:20:4a:fb:f1:b8:60:29:42:c0:0f:01:ca:e5:bd:
43:2d:e0:2a:e1:8c:32:2c:0e:d6:18:bf:99:59:ea:
6c:e2:75:09:ff:7f:49:70:62:91:b8:47:9f:0f:b7:
7f:eb:7f:78:9a:a2:fb:62:c0:67:48:9e:2e:ce:43:
3b:4e:9b:fd:6e:53:e9:74:4a:d2:d5:42:be:16:0d:
b3:a9:77:8f:22:68:52:58:07:1d:f4:e1:6f:40:6f:
0a:d7:f0:2c:28:a3:6a:7d:59:cb:28:8e:35:e3:69:
10:48:8d:70:05:a2:ac:63:9f:94:32:65:38:59:df:
8f:de:2f:8d:c6:9d:04:74:96:8f:c3:b1:01:23:57:
9c:89:fd:82:b5:ac:dd:aa:1a:a5:6b:1a:0e:a7:43:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E2:EE:42:89:C4:EC:CC:8D:0C:2E:0B:30:72:89:0E:DE:FF:8B:94
X509v3 Authority Key Identifier:
keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/42DAE250C8C711F08A7B6740C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.36.0/22
180.189.160.0/20
IPv6:
2405:1f00::/32
Signature Algorithm: sha256WithRSAEncryption
b4:93:63:67:ef:ce:43:3c:cd:4e:a0:a7:70:92:1e:52:e7:f3:
45:28:2e:e5:b9:20:3d:d7:3a:54:5d:6c:66:dd:37:c3:8e:f9:
5b:f3:35:82:4c:61:03:69:d4:8c:8f:f9:e3:36:03:82:06:61:
67:f0:24:59:9b:e9:27:2f:13:c5:d5:70:3c:0c:90:b4:a5:c1:
07:b2:87:ff:76:12:64:1c:56:d6:6b:48:23:2a:51:91:61:77:
86:19:d8:8c:fc:c8:80:71:4b:e4:98:48:40:40:2c:af:c7:47:
82:b2:d7:e7:be:c2:11:99:a0:b7:c7:31:94:f9:69:72:02:60:
e2:60:ad:db:7e:3f:eb:f6:06:88:1f:6b:09:f4:4b:38:22:ec:
02:ae:6b:e9:56:5b:bc:c9:dd:86:61:98:a4:f3:6b:da:e1:67:
5a:dc:7e:e2:ec:69:82:ed:b6:73:4b:be:d6:f6:2d:42:4c:be:
25:cd:8d:87:e2:02:01:d9:ef:22:bc:35:4d:e2:b6:86:53:ab:
cb:bb:98:5e:17:09:6a:b2:c4:2d:73:16:f5:e2:dc:54:fc:f8:
e8:3e:6d:fc:ba:f0:70:b6:1a:33:56:a7:69:a4:ad:68:57:ef:
d8:ba:b0:c7:63:13:8c:59:20:87:bc:95:00:e2:9f:8f:d0:fd:
ce:1f:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:50:41 2025 by rpki-client