This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/58D04E30C6D111F0B6027F7AC4F9AE02.roa
File: 58D04E30C6D111F0B6027F7AC4F9AE02.roa (raw, json)
Hash identifier: v9h7iu2CbK6jB1RmAbJfXa5EdVjx/mbIIZwSDx1KrXI=
Subject key identifier: 6B:23:94:C3:4C:C8:58:8D:16:01:86:D1:41:D7:5C:D2:B7:12:50:26
Certificate issuer: /CN=A91D298C/serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Certificate serial: 03
Authority key identifier: 5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/58D04E30C6D111F0B6027F7AC4F9AE02.roa
Signing time: Fri 21 Nov 2025 11:58:09 +0000
ROA not before: Fri 21 Nov 2025 11:58:09 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 54801
IP address blocks: 103.143.14.0/23 maxlen: 23
103.143.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298C, serialNumber=5FC26B928DEDC90C391CC4F529BA7B9E09A5046E
Validity
Not Before: Nov 21 11:58:09 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=692053d1-cd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:b1:06:db:e9:86:ba:b0:3c:c9:11:33:71:
27:16:25:cb:61:6e:77:26:92:ce:fd:2d:e9:df:6e:
a2:32:24:c2:8a:b3:39:ec:6b:5a:36:2e:73:9c:11:
df:ea:6e:62:28:c7:a6:49:7c:3d:6f:af:cd:c1:28:
9d:d3:52:ff:36:31:6d:81:8c:a5:ff:c6:e3:75:db:
51:ed:b7:f0:9c:c3:c8:b3:c8:eb:85:a9:f5:b7:3a:
8f:5e:82:bc:90:ef:d2:f1:2f:d6:e2:c0:78:a9:84:
84:d3:43:17:f5:50:2a:a1:26:6d:7e:37:91:45:40:
ec:78:c8:33:6c:52:78:67:79:46:2c:b7:e2:33:04:
cd:8b:99:6b:e9:92:e7:ec:40:4c:e8:b6:16:11:f4:
c5:09:5e:7e:c1:7a:ae:f1:09:9d:47:fc:7b:6d:1f:
b8:68:00:9b:0b:29:ad:38:3a:b9:5c:ba:8b:93:08:
50:a3:29:a3:3f:7a:31:47:bd:14:63:9b:9c:18:62:
cd:60:2d:c6:2e:05:f0:3e:4a:7c:3f:56:62:46:3c:
66:64:ed:4d:b6:5a:b6:15:2c:c9:54:f7:7b:2c:87:
2e:4b:76:15:1a:cb:a1:a1:5a:a8:ef:fe:b0:24:50:
59:28:f2:b8:3c:65:6d:b5:20:c9:f9:98:47:76:97:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:23:94:C3:4C:C8:58:8D:16:01:86:D1:41:D7:5C:D2:B7:12:50:26
X509v3 Authority Key Identifier:
keyid:5F:C2:6B:92:8D:ED:C9:0C:39:1C:C4:F5:29:BA:7B:9E:09:A5:04:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Jrko3tyQw5HMT1Kbp7ngmlBG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298C/AC5E8AC2C6D011F0BD884A79C4F9AE02/58D04E30C6D111F0B6027F7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.14.0/23
Signature Algorithm: sha256WithRSAEncryption
20:1e:f0:ae:fe:bf:9d:21:39:31:77:46:73:ea:7a:3e:19:87:
ef:68:33:85:16:2c:7c:67:35:c4:96:0b:27:d8:53:81:79:a6:
57:23:c7:5a:35:d4:9a:34:12:3d:0b:ee:fb:41:90:f3:77:99:
31:56:f1:8b:a5:8f:ed:8b:d9:b1:70:9c:08:29:61:21:c6:14:
35:9d:70:2b:ad:eb:09:48:09:82:ec:f9:2a:0d:b9:19:2a:3c:
be:89:63:9e:27:70:91:33:bb:13:95:bf:bd:11:4b:8a:11:bf:
e2:97:25:b2:d9:73:72:6f:e5:8e:1e:fa:68:8a:48:29:67:9e:
2d:d6:e1:15:06:2b:9f:ef:53:d9:92:bc:46:c5:1d:e6:0a:8a:
95:e9:fc:ca:dd:8b:39:79:09:f2:2a:fa:c8:0b:f2:68:bb:38:
69:01:b3:37:17:44:2b:2c:ed:5b:71:29:55:97:17:fc:e0:9d:
0e:bc:59:fd:63:1b:78:44:64:4f:cd:81:0b:e5:c8:4a:37:4b:
1c:4e:c5:a9:50:c3:4c:73:fc:30:22:c0:7d:c9:50:ba:f2:57:
0f:8e:07:14:23:d7:e7:a9:b4:72:4a:3e:3d:24:34:47:ad:24:
87:92:2f:d3:66:82:58:3d:ee:81:e5:ed:8b:d0:82:74:9c:23:
30:b5:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:56:36 2025 by rpki-client