This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/48CB7422E27911ED88B5A641C4F9AE02.roa
File: 48CB7422E27911ED88B5A641C4F9AE02.roa (raw, json)
Hash identifier: wcFyIsoLjsEhxUx1sW89pKU0YpaMTZxR8CimHecPT/g=
Subject key identifier: D9:D8:5B:79:E3:19:3E:9F:C2:34:3E:8B:A5:57:52:A3:C5:B4:C0:AB
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0675
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/48CB7422E27911ED88B5A641C4F9AE02.roa
Signing time: Sat 22 Nov 2025 03:33:35 +0000
ROA not before: Sat 22 Nov 2025 03:33:35 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55644
IP address blocks: 42.104.115.0/24 maxlen: 24
42.104.123.0/24 maxlen: 24
103.9.72.0/22 maxlen: 24
118.185.9.0/24 maxlen: 24
118.185.33.0/24 maxlen: 24
118.185.153.0/24 maxlen: 24
118.185.206.0/24 maxlen: 24
123.63.183.0/24 maxlen: 24
223.196.0.0/24 maxlen: 24
223.196.1.0/24 maxlen: 24
223.196.2.0/24 maxlen: 24
223.196.3.0/24 maxlen: 24
223.196.4.0/24 maxlen: 24
223.196.5.0/24 maxlen: 24
223.196.6.0/24 maxlen: 24
223.196.7.0/24 maxlen: 24
223.196.9.0/24 maxlen: 24
223.196.11.0/24 maxlen: 24
223.196.12.0/24 maxlen: 24
223.196.13.0/24 maxlen: 24
223.196.14.0/24 maxlen: 24
223.196.15.0/24 maxlen: 24
223.196.16.0/24 maxlen: 24
223.196.17.0/24 maxlen: 24
223.196.18.0/24 maxlen: 24
223.196.21.0/24 maxlen: 24
223.196.22.0/24 maxlen: 24
223.196.24.0/23 maxlen: 24
223.196.32.0/24 maxlen: 24
223.196.33.0/24 maxlen: 24
223.196.36.0/24 maxlen: 24
223.196.39.0/24 maxlen: 24
223.196.43.0/24 maxlen: 24
223.196.44.0/24 maxlen: 24
223.196.45.0/24 maxlen: 24
223.196.46.0/24 maxlen: 24
223.196.50.0/24 maxlen: 24
223.196.51.0/24 maxlen: 24
223.196.53.0/24 maxlen: 24
223.196.54.0/24 maxlen: 24
223.196.55.0/24 maxlen: 24
223.196.56.0/23 maxlen: 23
223.196.57.0/24 maxlen: 24
223.196.58.0/24 maxlen: 24
223.196.59.0/24 maxlen: 24
223.196.60.0/24 maxlen: 24
223.196.61.0/24 maxlen: 24
223.196.62.0/24 maxlen: 24
223.196.63.0/24 maxlen: 24
223.196.64.0/24 maxlen: 24
223.196.65.0/24 maxlen: 24
223.196.66.0/24 maxlen: 24
223.196.67.0/24 maxlen: 24
223.196.68.0/24 maxlen: 24
223.196.69.0/24 maxlen: 24
223.196.70.0/24 maxlen: 24
223.196.71.0/24 maxlen: 24
223.196.72.0/24 maxlen: 24
223.196.73.0/24 maxlen: 24
223.196.74.0/24 maxlen: 24
223.196.75.0/24 maxlen: 24
223.196.76.0/24 maxlen: 24
223.196.77.0/24 maxlen: 24
223.196.78.0/24 maxlen: 24
223.196.79.0/24 maxlen: 24
223.196.80.0/24 maxlen: 24
223.196.81.0/24 maxlen: 24
223.196.82.0/24 maxlen: 24
223.196.83.0/24 maxlen: 24
223.196.84.0/24 maxlen: 24
223.196.85.0/24 maxlen: 24
223.196.86.0/24 maxlen: 24
223.196.87.0/24 maxlen: 24
223.196.88.0/24 maxlen: 24
223.196.89.0/24 maxlen: 24
223.196.90.0/24 maxlen: 24
223.196.91.0/24 maxlen: 24
223.196.92.0/24 maxlen: 24
223.196.93.0/24 maxlen: 24
223.196.94.0/24 maxlen: 24
223.196.95.0/24 maxlen: 24
223.196.96.0/24 maxlen: 24
223.196.97.0/24 maxlen: 24
223.196.98.0/24 maxlen: 24
223.196.99.0/24 maxlen: 24
223.196.100.0/24 maxlen: 24
223.196.101.0/24 maxlen: 24
223.196.102.0/24 maxlen: 24
223.196.112.0/24 maxlen: 24
223.196.113.0/24 maxlen: 24
223.196.114.0/24 maxlen: 24
223.196.115.0/24 maxlen: 24
223.196.116.0/24 maxlen: 24
223.196.144.0/24 maxlen: 24
223.196.145.0/24 maxlen: 24
223.196.146.0/24 maxlen: 24
223.196.147.0/24 maxlen: 24
223.196.148.0/24 maxlen: 24
223.196.149.0/24 maxlen: 24
223.196.150.0/24 maxlen: 24
223.196.151.0/24 maxlen: 24
223.196.152.0/24 maxlen: 24
223.196.153.0/24 maxlen: 24
223.196.154.0/24 maxlen: 24
223.196.155.0/24 maxlen: 24
2400:c700::/32 maxlen: 32
2400:c700::/48 maxlen: 48
2400:c700:3::/48 maxlen: 48
2400:c700:4::/48 maxlen: 48
2400:c700:6::/48 maxlen: 48
2400:c700:7::/48 maxlen: 48
2400:c700:8::/48 maxlen: 48
2400:c700:10::/48 maxlen: 48
2400:c700:80::/48 maxlen: 48
2400:c700:81::/48 maxlen: 48
2400:c700:82::/48 maxlen: 48
2400:c700:83::/48 maxlen: 48
2400:c700:85::/48 maxlen: 48
2400:c700:86::/48 maxlen: 48
2400:c700:87::/48 maxlen: 48
2400:c700:100::/48 maxlen: 48
2400:c700:101::/48 maxlen: 48
2400:c700:102::/48 maxlen: 48
2400:c700:103::/48 maxlen: 48
2400:c700:104::/48 maxlen: 48
2400:c700:105::/48 maxlen: 48
2400:c700:180::/48 maxlen: 48
2400:c700:182::/48 maxlen: 48
2400:c700:183::/48 maxlen: 48
2400:c700:185::/48 maxlen: 48
2400:c700:186::/48 maxlen: 48
2400:c700:187::/48 maxlen: 48
2400:c700:188::/48 maxlen: 48
2400:c700:200::/48 maxlen: 48
2400:c700:201::/48 maxlen: 48
2400:c700:202::/48 maxlen: 48
2400:c700:203::/48 maxlen: 48
2400:c700:204::/48 maxlen: 48
2400:c700:205::/48 maxlen: 48
2400:c700:280::/48 maxlen: 48
2400:c700:281::/48 maxlen: 48
2400:c700:282::/48 maxlen: 48
2400:c700:380::/48 maxlen: 48
2400:c700:1000::/36 maxlen: 36
2400:c700:1080::/48 maxlen: 48
2400:c700:1081::/48 maxlen: 48
2400:c700:1085::/48 maxlen: 48
2400:c700:1100::/48 maxlen: 48
2400:c700:1101::/48 maxlen: 48
2400:c700:1102::/48 maxlen: 48
2400:c700:1103::/48 maxlen: 48
2400:c700:1181::/48 maxlen: 48
2400:c700:1182::/48 maxlen: 48
2400:c700:1183::/48 maxlen: 48
2400:c700:1200::/48 maxlen: 48
2400:c700:1201::/48 maxlen: 48
2400:c700:1202::/48 maxlen: 48
2400:c700:1280::/48 maxlen: 48
2400:c700:1281::/48 maxlen: 48
2400:c700:1301::/48 maxlen: 48
2400:c700:2000::/48 maxlen: 48
2400:c700:3001::/48 maxlen: 48
2400:c700:4000::/48 maxlen: 48
2400:c700:4001::/48 maxlen: 48
2400:c700:5000::/48 maxlen: 48
2400:c700:9000::/48 maxlen: 48
2400:c700:a000::/48 maxlen: 48
2400:c700:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 22 03:33:35 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69212f0f-e3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:aa:0c:ba:52:84:7f:5b:c9:ad:f4:f0:47:b7:
4c:75:2e:f5:7a:be:8d:24:e9:d3:9a:c9:e4:84:04:
5d:36:56:da:55:35:66:94:f7:44:49:25:4e:cb:a6:
c4:04:c5:d5:b4:ae:fd:16:14:90:4b:93:d6:ac:17:
45:26:79:fa:d1:ca:4f:8f:04:2a:46:b9:8f:04:d5:
47:fd:b9:e4:c9:b3:6e:cb:aa:c8:c5:a7:62:85:33:
72:b3:b4:4c:b2:ae:cb:bb:49:86:d3:08:26:3e:27:
c8:68:87:ee:9d:76:09:9f:3f:97:25:e1:98:e6:86:
f0:ce:b6:67:30:58:c5:6c:90:76:87:86:88:f2:02:
a8:d5:25:69:6d:e1:fe:29:37:65:2c:57:dd:e7:14:
e1:d0:84:7e:7c:83:39:45:b9:47:0c:e9:cf:c7:a9:
42:40:99:1d:34:f3:e5:42:36:bd:f8:fc:84:6f:fd:
ac:d8:ee:1b:6a:c0:82:ea:3e:b0:a2:7a:e5:76:d3:
53:ff:19:d9:39:b0:d1:1b:28:2a:e7:27:5e:0a:48:
e0:45:36:06:24:c3:f2:23:64:52:ff:97:93:db:8e:
ec:84:41:bd:1c:7b:ba:d3:30:b0:73:5a:07:b1:9e:
8d:c7:d1:0b:c3:90:2f:e0:aa:f5:72:53:d9:93:27:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D8:5B:79:E3:19:3E:9F:C2:34:3E:8B:A5:57:52:A3:C5:B4:C0:AB
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/48CB7422E27911ED88B5A641C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.104.115.0/24
42.104.123.0/24
103.9.72.0/22
118.185.9.0/24
118.185.33.0/24
118.185.153.0/24
118.185.206.0/24
123.63.183.0/24
223.196.0.0/21
223.196.9.0/24
223.196.11.0-223.196.18.255
223.196.21.0-223.196.22.255
223.196.24.0/23
223.196.32.0/23
223.196.36.0/24
223.196.39.0/24
223.196.43.0-223.196.46.255
223.196.50.0/23
223.196.53.0-223.196.102.255
223.196.112.0-223.196.116.255
223.196.144.0-223.196.155.255
IPv6:
2400:c700::/32
Signature Algorithm: sha256WithRSAEncryption
5c:bf:07:20:62:1b:35:39:20:0c:22:87:b2:36:e5:97:1e:42:
e0:41:6d:1e:d5:ea:85:9b:ee:19:6b:35:bb:67:24:fb:45:ac:
14:9b:97:a8:55:37:4d:ef:e6:33:a9:f5:69:ed:65:e8:a0:0c:
8c:b0:9b:da:b8:92:1d:f9:8e:f2:25:dc:ce:0d:33:e9:6f:ba:
1e:9d:f4:60:1d:2f:28:0e:e6:dd:8c:95:a2:c0:6b:87:cb:c9:
e1:98:07:4e:94:76:e6:79:6b:fc:3a:99:bd:55:33:77:e5:be:
24:b5:6c:69:9a:4f:1c:89:98:06:2a:a9:ee:19:3a:e9:ec:85:
70:46:84:c3:96:d8:9e:32:e4:d3:2f:a0:a1:c5:b9:9c:d8:39:
e9:e5:68:26:f1:85:c2:7a:3a:c9:b6:34:f2:e0:b0:9c:d2:18:
29:03:91:a1:0c:79:ba:49:2d:99:1c:a1:95:08:27:45:48:89:
26:15:3a:74:17:b0:f7:84:94:63:d5:b8:86:64:c6:52:ba:64:
e5:4b:9d:8f:75:9c:19:1c:1e:31:0f:fd:1f:0b:b1:cf:88:a2:
a9:82:bf:4c:74:cc:11:3c:c8:2f:47:7f:af:ee:38:f0:aa:bd:
67:73:8d:2d:e1:2d:a8:9d:6b:0d:c5:94:d9:f1:d1:5c:4a:9d:
c1:9f:a5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:26:12 2025 by rpki-client