This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/7C58D40872CD11EE81C60650C4F9AE02.roa
File: 7C58D40872CD11EE81C60650C4F9AE02.roa (raw, json)
Hash identifier: ByB0pCDxwls4ymgVFOzdTJ6/67CPnhKw+rJNXjlR5HY=
Subject key identifier: 88:CD:D1:E1:55:9B:81:36:E1:DB:57:ED:D7:BD:7D:61:59:90:95:71
Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Certificate serial: 0190
Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/7C58D40872CD11EE81C60650C4F9AE02.roa
Signing time: Fri 05 Dec 2025 02:11:55 +0000
ROA not before: Fri 05 Dec 2025 02:11:55 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4049
IP address blocks: 103.67.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6
Validity
Not Before: Dec 5 02:11:55 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69323f6b-d06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d8:2a:be:71:b9:26:8d:e1:cb:e4:f8:93:34:
fd:14:6c:3d:cb:d3:22:15:a4:ea:37:96:eb:61:83:
e3:4c:c0:ce:93:87:60:1a:7f:b3:6c:38:1d:08:ad:
18:4a:92:56:cb:8c:dd:6f:2c:05:1b:25:a0:e2:60:
26:be:fe:77:66:aa:78:f9:4e:ba:6b:0c:c9:69:3b:
a3:d4:02:a6:14:89:ea:62:fb:d2:62:f7:45:b5:2d:
4b:4c:1a:b4:c0:a9:55:53:3e:23:62:40:d9:9a:71:
7f:54:3e:0c:42:b8:b1:85:81:2e:88:b6:cb:2d:f4:
1b:b3:b4:0c:69:fb:4f:6e:85:9a:9e:f4:39:15:ab:
d7:90:4c:a7:ff:c6:39:d1:37:f7:a2:4c:1a:f7:4d:
03:ab:02:d2:7c:85:56:96:11:61:78:f5:30:9f:da:
c7:92:b7:1d:52:7f:69:45:dc:d4:ca:ba:e9:45:b0:
3d:26:63:ce:a4:88:65:03:0e:e1:e6:75:92:ec:cc:
f9:68:f6:cc:94:b3:cc:1e:e1:6a:d1:62:5c:3d:e4:
66:37:76:df:35:25:0f:80:fe:df:fe:1a:6c:d1:a1:
41:54:1a:c1:53:de:dc:d1:6e:80:f1:b7:de:3a:37:
bb:c7:2d:44:55:8a:17:52:46:0b:f2:04:c5:e4:22:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CD:D1:E1:55:9B:81:36:E1:DB:57:ED:D7:BD:7D:61:59:90:95:71
X509v3 Authority Key Identifier:
keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/7C58D40872CD11EE81C60650C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.94.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:23:e7:ea:90:99:8e:06:a0:3b:23:f0:8a:ec:f7:94:9f:ef:
10:26:c9:c4:86:b9:bd:61:80:c3:5e:e4:a0:96:41:26:9a:e1:
e4:bd:c1:47:43:79:05:e8:6c:16:4f:1f:d6:cf:a1:60:86:54:
09:57:57:2a:e8:7b:47:b0:b9:7b:6f:41:84:dd:1e:37:09:e2:
ac:f4:69:b9:34:7c:15:03:8d:58:cd:9b:be:d9:57:13:11:78:
98:0c:e4:38:c4:8c:a3:08:95:b4:6f:2b:44:05:f3:98:75:b6:
d7:80:98:27:15:39:31:e5:b9:04:17:aa:23:31:51:5a:b7:5b:
23:b8:61:60:8a:a5:fc:43:88:41:9a:7e:9f:75:83:92:af:1f:
e1:4c:de:8b:19:7b:29:c6:41:5e:5f:f1:20:b6:2e:05:49:09:
1d:5e:ea:f3:4d:94:f4:b2:7e:bd:a8:0d:e9:f4:13:d7:2d:36:
f8:a8:00:00:8d:4c:dd:72:7e:81:04:df:ac:24:85:a9:3f:0c:
b3:2d:92:ed:aa:34:ff:e3:91:2b:44:30:93:01:aa:6c:49:75:
7a:ca:82:6e:d8:d1:e3:76:84:95:e2:d7:9f:df:8f:19:08:01:
46:84:7b:4f:d6:29:fd:07:b8:bc:f4:7a:2c:38:07:fc:64:97:
6b:b8:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 17:06:52 2025 by rpki-client