This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/9B0C244C73B611EEB18A0385C4F9AE02.roa
File: 9B0C244C73B611EEB18A0385C4F9AE02.roa (raw, json)
Hash identifier: 2Y9sjJKHecukVuvVbaq82FcEcKk1PVtU2APTvtdHmf4=
Subject key identifier: A7:B7:06:5F:A7:99:56:4C:F2:1A:33:5A:C8:ED:4C:CD:78:F8:5B:98
Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial: 0425
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/9B0C244C73B611EEB18A0385C4F9AE02.roa
Signing time: Wed 10 Dec 2025 23:08:30 +0000
ROA not before: Wed 10 Dec 2025 23:08:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9224
IP address blocks: 58.96.128.0/19 maxlen: 19
123.50.144.0/20 maxlen: 20
125.254.64.0/19 maxlen: 19
125.254.96.0/19 maxlen: 19
202.191.8.0/21 maxlen: 21
210.56.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 23:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Validity
Not Before: Dec 10 23:08:30 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6939fd6d-2347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:eb:62:a4:29:8d:e6:4f:07:7f:20:7b:e2:
00:38:6e:77:ee:5a:73:3d:f2:92:df:95:20:da:ef:
6d:61:94:de:15:de:e5:07:aa:39:b3:26:91:9b:aa:
2a:84:da:28:fd:1d:6e:e3:f5:4e:1a:6c:55:e1:d3:
dc:81:c2:2b:2a:33:74:7d:a5:99:f1:2e:97:52:54:
26:35:00:d5:14:82:8c:36:50:40:ba:3c:57:49:bd:
06:a8:5e:0b:4b:99:82:99:9b:79:71:ee:e8:ab:0e:
98:ab:da:d8:ee:09:9c:93:69:94:5c:f8:38:2c:e5:
91:bd:71:14:63:1d:95:5e:85:6a:00:e5:64:06:27:
a7:3c:41:4c:a7:ef:8f:66:d5:2e:18:1c:4f:a6:fa:
39:27:85:2c:2a:56:d8:7d:2c:99:36:d0:c4:59:a7:
84:92:7d:51:05:83:84:91:da:cf:38:b1:19:5f:c8:
ce:b8:04:84:a1:3f:d8:31:61:bc:2b:77:78:a1:5c:
43:09:90:f0:ba:24:52:36:6f:56:4f:cb:e7:e4:0b:
56:a3:f7:3c:6c:07:bb:e6:2d:9d:12:e8:94:d0:af:
ec:76:06:fe:72:af:99:48:29:4d:14:45:8e:1f:cf:
a4:26:ad:97:59:5e:a9:2b:a8:d3:65:f7:ba:8c:e1:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B7:06:5F:A7:99:56:4C:F2:1A:33:5A:C8:ED:4C:CD:78:F8:5B:98
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/9B0C244C73B611EEB18A0385C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.96.128.0/19
123.50.144.0/20
125.254.64.0/18
202.191.8.0/21
210.56.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:4e:b5:a0:dc:24:6b:f4:98:e4:b7:3f:4c:8e:8f:c9:90:88:
64:cb:69:78:d7:c8:45:49:7f:0e:66:34:32:14:71:2b:13:83:
80:d3:b7:35:e4:ad:f5:ec:c9:5d:fd:36:11:d2:8d:b4:db:f9:
10:b1:d9:81:40:c3:26:10:bd:ab:15:21:b7:80:82:f6:42:8a:
89:02:fe:c8:0f:7e:c6:2b:75:7b:62:0d:ea:41:18:ff:44:c5:
d9:b3:f2:45:71:43:c1:cd:af:d5:d0:04:42:62:e6:69:e4:71:
28:ee:19:36:bd:99:8a:e8:70:cd:51:27:e1:8e:db:f2:ee:60:
80:c8:cd:85:a1:c6:c8:a2:74:1f:9a:6d:8e:9e:63:db:e4:45:
36:85:f5:73:76:b9:72:96:e4:48:97:fb:53:3d:f0:cf:aa:e1:
a9:87:4d:0c:05:06:c6:3a:70:18:fd:e3:fa:90:79:bd:23:1a:
2d:86:92:40:f6:54:a9:7e:23:8f:53:83:ca:94:5a:f8:33:4f:
05:ff:b3:1a:cd:82:4b:ac:06:cd:8b:75:ae:33:33:85:02:89:
02:e8:3b:cb:21:31:13:a3:4a:6f:96:3c:95:7f:ad:3e:89:f8:
e6:15:37:28:ae:af:77:9c:77:8a:39:9f:e9:09:33:20:f8:7f:
fb:20:a1:09
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz
MjA5ODYwMDIwHhcNMjUxMjEwMjMwODMwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTM5ZmQ2ZC0yMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2l/rYqQpjeZPB38ge+IAOG537lpzPfKS35Ug2u9tYZTeFd7lB6o5syaRm6oq
hNoo/R1u4/VOGmxV4dPcgcIrKjN0faWZ8S6XUlQmNQDVFIKMNlBAujxXSb0GqF4L
S5mCmZt5ce7oqw6Yq9rY7gmck2mUXPg4LOWRvXEUYx2VXoVqAOVkBienPEFMp++P
ZtUuGBxPpvo5J4UsKlbYfSyZNtDEWaeEkn1RBYOEkdrPOLEZX8jOuASEoT/YMWG8
K3d4oVxDCZDwuiRSNm9WT8vn5AtWo/c8bAe75i2dEuiU0K/sdgb+cq+ZSClNFEWO
H8+kJq2XWV6pK6jTZfe6jOGJVwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKe3Bl+n
mVZM8hozWsjtTM14+FuYMB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5
NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDEyMTYvREM3ODI2OENCOTRCMTFFQzgzMkI3NDE5QzRGOUFFMDIvOUIwQzI0NEM3
M0I2MTFFRUIxOEEwMzg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAU6YIADBAR7MpADBAZ9/kADBAPKvwgDBAXSOOAwDQYJKoZI
hvcNAQELBQADggEBADtOtaDcJGv0mOS3P0yOj8mQiGTLaXjXyEVJfw5mNDIUcSsT
g4DTtzXkrfXsyV39NhHSjbTb+RCx2YFAwyYQvasVIbeAgvZCiokC/sgPfsYrdXti
DepBGP9Exdmz8kVxQ8HNr9XQBEJi5mnkcSjuGTa9mYrocM1RJ+GO2/LuYIDIzYWh
xsiidB+abY6eY9vkRTaF9XN2uXKW5EiX+1M98M+q4amHTQwFBsY6cBj94/qQeb0j
Gi2GkkD2VKl+I49Tg8qUWvgzTwX/sxrNgkusBs2Lda4zM4UCiQLoO8shMROjSm+W
PJV/rT6J+OYVNyiur3ecd4o5n+kJMyD4f/sgoQk=
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:03:48 2025 by rpki-client