This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/78123422B0CD11E58B55FC73C4F9AE02.roa
File: 78123422B0CD11E58B55FC73C4F9AE02.roa (raw, json)
Hash identifier: mNtwPjnCIz/fPyYT4pHp2y4OsV0nrnCLOsALXcX5nBI=
Subject key identifier: 0E:62:D3:F9:69:AF:9B:C9:E9:65:C6:1F:59:A0:25:D5:27:07:DD:6D
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 365E
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/78123422B0CD11E58B55FC73C4F9AE02.roa
Signing time: Tue 02 Dec 2025 14:41:44 +0000
ROA not before: Tue 02 Dec 2025 14:41:44 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132844
IP address blocks: 121.58.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13918 (0x365e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: Dec 2 14:41:44 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692efaa8-3562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:a6:43:db:e5:f9:36:fa:b6:d0:56:59:ca:
2f:2e:87:fd:17:ae:6e:78:aa:db:63:6b:fb:02:9d:
3d:ae:c6:5f:c8:8f:74:af:df:0b:d3:be:8f:b7:6f:
31:7f:2d:a8:a8:98:d6:a1:bd:32:46:40:b0:5d:a8:
54:84:c9:fd:cf:35:29:75:c8:28:c2:05:1f:da:b7:
4e:57:1f:46:95:ea:43:1b:bb:6c:a7:48:5d:5e:ad:
7c:76:5c:12:71:3b:56:20:ee:a3:a4:6d:a4:bb:7a:
8b:31:66:78:16:a9:db:e6:3d:77:6d:5c:5d:9e:36:
57:d7:21:b4:ec:dc:cf:61:ed:59:e6:e6:44:64:c2:
1f:c8:6d:3a:08:4a:50:4f:a0:7e:bf:2f:10:7c:37:
7e:6b:9f:d8:12:f4:0f:0d:a2:b8:22:20:09:c2:29:
b9:38:d7:37:d3:8c:c9:8d:be:f0:9e:f8:22:22:80:
33:88:7a:6f:6b:c1:20:0f:0a:8a:f5:2e:19:2b:66:
b8:41:bd:6e:52:76:27:e3:b2:92:13:bf:a3:01:30:
3d:fa:3c:fd:f4:0d:4a:a1:53:4a:45:7b:e3:99:d6:
a1:b9:38:54:06:60:2f:ae:29:7c:0a:cb:3a:ea:4b:
10:03:ad:6b:69:0c:8d:51:83:cf:24:b0:88:c1:4c:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:62:D3:F9:69:AF:9B:C9:E9:65:C6:1F:59:A0:25:D5:27:07:DD:6D
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/78123422B0CD11E58B55FC73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.58.241.0/24
Signature Algorithm: sha256WithRSAEncryption
54:08:51:e5:bd:02:ff:c3:a7:f7:3a:89:fb:8d:f5:75:a3:9d:
89:a5:8b:0f:92:21:d6:00:67:07:fe:41:bb:d9:20:ca:e3:b0:
02:ec:45:1b:5c:ce:c5:dc:a6:04:97:33:df:e4:9c:1f:cf:42:
84:01:99:25:bf:ee:65:1a:34:1a:e9:32:6d:12:7f:b8:d8:5b:
67:65:c1:08:d3:9a:9e:ee:0f:59:63:8a:54:8c:ea:95:6a:bd:
4d:58:51:3d:95:f8:79:58:50:6f:83:aa:86:27:b9:eb:a2:24:
8b:c9:12:9c:81:75:95:f3:84:54:8b:f1:f1:af:e8:e0:16:ef:
1a:f1:0d:48:a1:6b:5e:5d:88:e5:da:f6:81:81:fb:61:10:c2:
6f:00:a4:2e:9b:48:4f:98:1b:05:47:d2:a0:a2:ea:20:ff:71:
8e:d9:ed:97:41:b1:c6:4a:de:82:ab:08:81:78:e3:ed:cb:bb:
47:89:e4:75:b9:ac:00:ad:97:55:54:d5:8b:e4:e0:4c:a4:5e:
1c:24:44:d2:ad:80:13:2c:54:0a:be:88:54:84:26:db:6e:27:
8b:b4:7f:d2:43:9c:f7:38:a2:b8:41:31:e8:9b:60:23:49:24:
57:12:56:a9:37:f0:6f:00:9f:dc:c1:ec:f3:5a:7f:c2:46:ea:
99:90:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:44:05 2025 by rpki-client