This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/72480DC0D9A111F0989DD75268D3641D.roa
File: 72480DC0D9A111F0989DD75268D3641D.roa (raw, json)
Hash identifier: nxYL3Wuobzg2i8iYKqWQVhQYvBYI0L/O9fatJEnTKyc=
Subject key identifier: 9A:AE:99:E9:FD:7D:E0:39:FB:44:67:96:4D:B3:49:8F:AD:5F:82:7A
Certificate issuer: /CN=A91E7B89/serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566
Certificate serial: 02
Authority key identifier: 5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/72480DC0D9A111F0989DD75268D3641D.roa
Signing time: Mon 15 Dec 2025 10:33:08 +0000
ROA not before: Mon 15 Dec 2025 10:33:08 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 64050
IP address blocks: 103.65.180.0/22 maxlen: 24
111.223.244.0/22 maxlen: 24
2400:b1c0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl
rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7B89, serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566
Validity
Not Before: Dec 15 10:33:08 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=693fe3e4-75da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:13:c9:50:5c:9a:4c:8d:18:dc:d1:ac:aa:
70:9d:f9:21:eb:5b:94:f3:93:85:78:fe:51:2e:e0:
5a:5c:ac:6a:87:62:2c:22:66:3b:32:1c:6a:49:ba:
35:d0:c5:8f:19:b3:e7:e5:0c:97:8b:24:80:1d:62:
03:7b:7c:ed:68:77:bc:5e:aa:4f:05:25:c3:20:78:
4b:05:0c:17:cc:96:fd:5a:85:24:82:ac:27:97:3f:
fe:c7:5c:a9:f2:e6:63:1f:cd:94:20:49:c1:20:7e:
39:7b:c8:78:ca:07:f9:4b:60:c9:5e:1c:96:51:81:
bb:f9:5c:2c:2c:27:6b:4e:64:f3:12:26:16:26:31:
aa:19:35:eb:7e:f6:61:9f:93:59:bf:80:c0:9e:ca:
7a:25:aa:0f:8e:26:27:92:55:df:a1:a1:07:34:ec:
09:13:70:43:98:71:cf:fd:21:ed:69:10:83:d3:c1:
6c:cd:c2:b3:c3:69:58:e3:e1:9c:b4:60:1b:68:5a:
68:e1:96:52:26:eb:98:b3:a6:10:ce:ba:d9:f0:08:
6b:33:f2:0b:fe:d1:05:f9:cf:91:96:f7:ff:86:c9:
d5:24:31:26:90:30:d3:29:31:02:44:7b:a4:28:5d:
c6:da:98:f4:ae:15:17:78:0c:33:6d:e9:34:eb:7f:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AE:99:E9:FD:7D:E0:39:FB:44:67:96:4D:B3:49:8F:AD:5F:82:7A
X509v3 Authority Key Identifier:
keyid:5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/72480DC0D9A111F0989DD75268D3641D.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.65.180.0/22
111.223.244.0/22
IPv6:
2400:b1c0::/32
Signature Algorithm: sha256WithRSAEncryption
bc:83:53:9a:d2:de:95:b1:92:c1:9b:47:53:ec:77:91:a8:5e:
87:6a:2a:c0:8b:8a:1d:c7:4a:7d:53:f8:86:d6:03:02:13:13:
78:1f:8f:9f:a1:8b:26:5d:87:77:72:79:8a:0f:17:fe:80:6c:
0c:b1:a9:18:3c:04:8f:85:c9:91:c5:5e:8c:af:b2:77:e4:20:
f8:92:6a:84:78:6a:b1:98:81:ec:56:0a:47:20:48:e4:04:21:
fd:34:ef:bb:81:fa:37:e6:65:97:33:95:75:af:4c:b3:80:9b:
09:5b:78:fd:80:b8:b0:a9:93:4d:0b:e8:c2:20:7e:ef:ec:bc:
7b:f3:17:24:ee:f6:2b:e3:c4:d3:50:41:f2:ef:6c:b4:99:14:
f5:d0:e4:3f:0b:bf:a5:cc:01:cc:a3:ac:ed:e4:87:95:7c:1d:
9a:8f:c8:d8:f5:40:23:89:a8:0c:f8:d1:07:b2:f9:16:37:f7:
25:30:d6:4a:8e:2b:8a:7c:21:50:11:28:bd:52:ca:57:82:5f:
4c:48:de:6d:c1:a2:bd:e7:0a:9d:ba:88:d7:66:3a:48:d8:7b:
46:62:4f:bb:e7:d1:2b:79:45:b7:8b:3d:a6:09:64:9e:ea:62:
a6:c5:e3:56:3f:36:bb:d1:8c:6b:39:ab:9b:b3:80:bb:0f:e9:
94:16:9d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:15:36 2025 by rpki-client