This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa
File: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (raw, json)
Hash identifier: L7mUR2zA64o666BbzoHM4q5rIrSG5Wt/pe3jL/TyP64=
Subject key identifier: 17:F2:77:32:05:58:6A:77:89:4F:E1:BF:56:4D:77:BD:8E:F4:BD:5B
Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial: 221D
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa
Signing time: Fri 30 Jan 2026 16:13:43 +0000
ROA not before: Fri 30 Jan 2026 16:13:43 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 31898
IP address blocks: 27.111.92.0/22 maxlen: 24
43.245.52.0/22 maxlen: 24
203.17.36.0/24 maxlen: 24
203.170.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 02:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8733 (0x221d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Validity
Not Before: Jan 30 16:13:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697cd8b7-4c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:3c:c3:3a:e5:79:b5:be:80:a2:43:d6:ea:
38:a1:58:a0:e9:6f:fc:0a:73:72:38:7b:42:a9:fb:
b6:ff:d1:e1:e3:e1:07:a7:41:69:57:34:55:90:e9:
74:5f:2d:a0:d6:bb:59:d7:48:f0:90:65:0e:3e:0c:
6b:39:31:41:34:3b:00:02:ec:96:3f:6d:2e:12:2e:
96:13:0b:cc:2a:db:0b:80:40:c5:8e:76:1b:45:92:
8f:ac:ba:e1:33:98:1b:1c:da:57:50:6f:e9:b3:9f:
33:f4:45:04:f9:ab:d9:c8:10:76:23:49:4c:76:7f:
20:57:ab:2f:ab:2b:a3:59:d0:bd:ef:cc:50:85:2c:
3b:a5:fd:9f:bc:5d:f2:ee:e3:fa:d8:6b:4e:93:d2:
cf:c2:e4:09:83:e1:df:95:6d:ce:90:26:fe:07:95:
f9:0a:44:5d:e4:79:39:e8:d1:8b:8d:a9:7d:aa:85:
8b:b4:e8:66:a7:38:a7:46:a0:81:ad:5c:a8:42:28:
66:3d:74:37:e4:1a:58:7d:64:aa:2c:32:57:d1:1a:
cb:ed:c4:71:39:9a:15:71:0b:24:b8:a3:67:6f:ff:
7d:78:50:3a:f5:09:f1:89:53:33:a4:38:a0:89:c7:
51:49:d3:ce:df:b9:62:79:f1:48:85:3d:0e:c2:59:
c7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F2:77:32:05:58:6A:77:89:4F:E1:BF:56:4D:77:BD:8E:F4:BD:5B
X509v3 Authority Key Identifier:
keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/FEDAEBD8932711F0B9305C4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.92.0/22
43.245.52.0/22
203.17.36.0/24
203.170.80.0/21
Signature Algorithm: sha256WithRSAEncryption
07:f9:7e:17:60:23:4a:2c:a0:98:d8:4b:52:fc:23:91:46:8d:
4d:95:0b:6d:ed:04:a9:bd:45:44:db:7c:aa:33:f9:2f:55:a2:
26:c5:36:22:b0:af:36:5f:d4:db:63:c0:aa:17:1b:91:6f:8a:
3e:ae:8d:23:f7:d6:30:5a:c2:8c:c4:39:91:84:57:31:d6:b5:
27:9a:85:38:a9:2f:ab:03:b8:a4:94:f1:a2:e1:05:da:0f:f0:
41:eb:4f:95:03:87:79:6b:ca:01:11:5f:6b:d9:8e:7a:24:b9:
b4:61:84:0f:8b:b8:06:c0:f0:ff:fa:0c:57:48:36:fa:ae:7f:
e5:f5:62:e5:79:12:93:2e:e2:b7:1c:37:f4:b4:73:ff:26:43:
28:84:6f:c6:90:d0:90:bc:b3:98:34:81:cc:83:34:be:ac:2d:
a8:2c:ee:30:b0:a4:fe:9b:8c:5b:85:10:47:c7:51:50:e6:ca:
6c:7f:b5:17:5b:3b:c8:40:e2:a1:ad:ba:12:ce:24:59:bc:f3:
6d:21:5e:5f:8b:0e:0f:eb:dd:76:0f:67:00:7b:e4:b1:e6:b6:
8b:ae:91:d1:40:05:8b:35:07:12:69:dc:8c:20:ca:3a:04:02:
37:d6:d7:30:d7:b9:be:d6:14:cb:e6:ec:72:bd:39:d6:0a:82:
09:9a:7e:ce
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5
NzUzQkRCQ0UwHhcNMjYwMTMwMTYxMzQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdjZDhiNy00YzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAodc8wzrlebW+gKJD1uo4oVig6W/8CnNyOHtCqfu2/9Hh4+EHp0FpVzRVkOl0
Xy2g1rtZ10jwkGUOPgxrOTFBNDsAAuyWP20uEi6WEwvMKtsLgEDFjnYbRZKPrLrh
M5gbHNpXUG/ps58z9EUE+avZyBB2I0lMdn8gV6svqyujWdC978xQhSw7pf2fvF3y
7uP62GtOk9LPwuQJg+HflW3OkCb+B5X5CkRd5Hk56NGLjal9qoWLtOhmpzinRqCB
rVyoQihmPXQ35BpYfWSqLDJX0RrL7cRxOZoVcQskuKNnb/99eFA69QnxiVMzpDig
icdRSdPO37liefFIhT0OwlnHFwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFBfydzIF
WGp3iU/hv1ZNd72O9L1bMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5
OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDM3OTQvMjBGRTU2MTZFOThGMTFFNUEzREREQzY2QzRGOUFFMDIvRkVEQUVCRDg5
MzI3MTFGMEI5MzA1QzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBAIbb1wDBAIr9TQDBADLESQDBAPLqlAwDQYJKoZIhvcNAQEL
BQADggEBAAf5fhdgI0osoJjYS1L8I5FGjU2VC23tBKm9RUTbfKoz+S9VoibFNiKw
rzZf1NtjwKoXG5Fvij6ujSP31jBawozEOZGEVzHWtSeahTipL6sDuKSU8aLhBdoP
8EHrT5UDh3lrygERX2vZjnokubRhhA+LuAbA8P/6DFdINvquf+X1YuV5EpMu4rcc
N/S0c/8mQyiEb8aQ0JC8s5g0gcyDNL6sLags7jCwpP6bjFuFEEfHUVDmymx/tRdb
O8hA4qGtuhLOJFm8820hXl+LDg/r3XYPZwB75LHmtouukdFABYs1BxJp3IwgyjoE
AjfW1zDXub7WFMvm7HK9OdYKggmafs4=
-----END CERTIFICATE-----
Generated at Thu Feb 5 05:58:27 2026 by rpki-client