This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/E098BB864FA311F0B96FBA3DC4F9AE02.roa
File: E098BB864FA311F0B96FBA3DC4F9AE02.roa (raw, json)
Hash identifier: p1NZ9NnirQbZI+pUJKRFnk/LQesx95uqpmbnkuNBqak=
Subject key identifier: 94:04:6F:67:FF:D4:DB:12:61:7D:7D:C0:24:C1:95:9F:2B:59:64:50
Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial: 0106
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/E098BB864FA311F0B96FBA3DC4F9AE02.roa
Signing time: Tue 02 Dec 2025 20:53:50 +0000
ROA not before: Tue 02 Dec 2025 20:53:50 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141413
IP address blocks: 160.25.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 20:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Validity
Not Before: Dec 2 20:53:50 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=692f51de-828b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:7a:1f:7e:6b:8f:a7:69:6f:39:67:9e:b2:
62:d6:4d:ba:36:bc:f4:78:9d:a8:df:13:23:1c:26:
e2:e6:39:46:1c:c7:4c:13:68:6f:51:59:b1:6d:24:
fa:16:20:99:20:56:51:cf:56:08:d7:ad:fb:41:51:
c3:70:01:cd:f9:a0:e0:70:5c:ab:05:27:58:03:96:
da:f9:86:31:2a:65:a7:c6:26:47:f1:10:37:f0:f3:
b5:45:f2:60:40:2a:de:9c:2b:a1:ad:2e:a5:a8:2e:
cd:5e:9a:a4:71:ba:9a:8d:98:b7:59:db:bc:3b:7f:
ac:af:f0:15:5c:4e:a4:12:cd:80:55:73:a4:b0:98:
33:05:fe:28:a1:3e:fc:c2:7f:b3:5e:92:aa:48:f1:
69:f4:ad:54:ae:fe:04:70:0e:4e:96:d6:38:64:1c:
c2:80:a5:5a:b2:20:19:84:49:af:1f:62:2d:ea:c9:
30:af:8e:66:31:9a:79:8e:f9:5d:26:8e:7d:3d:f9:
da:86:94:0d:f7:f9:3b:58:fe:7c:e0:95:5b:ac:dd:
05:62:3e:60:98:e6:bb:e2:12:98:7f:61:e3:63:fa:
72:04:ae:02:01:7a:5a:2d:95:a3:1c:5e:ba:24:f3:
13:ab:e3:f1:3f:0f:e8:3f:39:85:ac:f1:92:6f:86:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:04:6F:67:FF:D4:DB:12:61:7D:7D:C0:24:C1:95:9F:2B:59:64:50
X509v3 Authority Key Identifier:
keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/E098BB864FA311F0B96FBA3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.228.0/24
Signature Algorithm: sha256WithRSAEncryption
97:96:55:d7:ad:9b:08:7f:43:28:0b:83:d0:89:9e:a9:da:ad:
30:4a:b6:8c:04:e9:99:91:cf:f8:72:dd:d6:64:42:af:66:55:
6c:b4:1e:65:6e:ca:e2:89:44:c8:88:4c:4a:e4:b0:fd:f5:c6:
44:cd:04:45:2e:dc:c0:79:14:46:b4:67:86:81:37:2d:10:40:
41:e5:4a:51:cd:3c:83:90:71:73:27:82:71:c0:79:85:24:6a:
f0:e2:38:36:af:47:95:af:5b:b7:e3:4c:92:37:14:44:60:d3:
03:48:1a:3b:40:72:b8:61:7b:e4:f2:5e:ed:75:58:82:84:ca:
53:c6:69:69:87:95:95:ff:d2:2b:3b:89:59:e9:84:e5:db:9f:
9e:bc:65:1e:1f:d8:53:8c:50:a6:1f:ff:70:3b:62:b1:6d:f3:
e6:3c:77:e9:88:d5:09:5a:c6:6e:ec:04:32:17:9d:b2:c7:ed:
df:cd:e6:3b:21:b9:64:c9:78:b6:df:f2:f5:6d:3e:c4:6c:71:
7a:52:79:ab:b7:86:08:16:f1:9d:8d:4e:60:a4:f9:90:1a:66:
6f:14:4c:77:0a:5f:1f:ae:e6:95:07:6e:72:99:f5:d7:e9:d9:
fe:50:36:72:8d:93:4b:23:85:d1:96:b5:b2:11:f6:81:5c:d4:
7d:c9:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:50:54 2025 by rpki-client