This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/8D26DADCB6C411EF99C3B758C4F9AE02.roa
File: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (raw, json)
Hash identifier: nae7I/KEW+0m3zT4me5Qc5I3irrgd5B22dbuBfqdUCs=
Subject key identifier: 45:39:66:FD:D5:7B:77:D6:62:8E:3A:B4:E8:42:86:EE:2C:05:11:94
Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Certificate serial: A3
Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/8D26DADCB6C411EF99C3B758C4F9AE02.roa
Signing time: Fri 17 Oct 2025 09:43:11 +0000
ROA not before: Fri 17 Oct 2025 09:43:11 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134193
IP address blocks: 160.187.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 04:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Validity
Not Before: Oct 17 09:43:11 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f20fae-3285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:12:92:98:72:55:99:00:3c:1e:e1:7d:b5:
81:9a:27:39:0d:d4:ce:2d:3b:a2:39:11:d9:78:5e:
47:35:35:ba:29:59:24:c1:87:0e:fc:eb:97:1d:d2:
6e:84:b5:84:54:fd:9b:3a:64:e2:7a:31:dd:7a:72:
84:69:41:f9:60:40:81:02:e2:55:23:bb:f6:98:2a:
1a:c9:b5:bb:f0:8e:38:a8:59:d9:65:a2:f0:69:75:
0b:58:9e:5a:46:b8:1c:7e:73:10:c8:ea:9d:6a:9e:
79:b6:23:7e:1e:8b:15:8a:d9:d8:d5:07:56:26:0f:
b4:cf:85:af:f5:b8:bc:c8:c0:19:2d:f6:0d:aa:ec:
54:e4:73:1a:b7:72:b1:c6:8c:87:e1:44:1f:30:cd:
88:68:ce:19:88:ac:51:d8:af:97:d0:c0:8b:6d:0d:
e4:2a:dd:6d:f5:4c:25:1e:f8:c4:42:ed:32:b5:d5:
a2:8e:c4:f9:93:4c:33:e6:7f:97:25:f8:98:76:51:
1a:58:ce:67:ce:6e:70:13:a3:94:b8:61:20:68:62:
60:e4:c6:f3:fa:18:be:da:47:9d:91:a4:2c:24:0c:
f6:62:7a:1d:47:38:f9:39:e5:9b:4c:2c:9d:b3:52:
26:9b:b0:c2:c8:38:19:cb:b4:4f:85:47:c1:09:24:
91:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:39:66:FD:D5:7B:77:D6:62:8E:3A:B4:E8:42:86:EE:2C:05:11:94
X509v3 Authority Key Identifier:
keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/8D26DADCB6C411EF99C3B758C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.202.0/23
Signature Algorithm: sha256WithRSAEncryption
53:fe:61:08:c8:7d:84:cf:86:ec:d5:a8:f4:75:b6:22:6e:ff:
b2:fc:eb:65:2a:9f:9c:cd:7a:70:09:33:84:cf:5c:18:30:7b:
4e:13:1d:e2:93:a5:86:07:34:ba:08:af:f9:96:c6:5b:8e:c6:
13:3a:32:28:8a:21:b6:0f:c8:b2:8e:62:61:98:c2:24:37:4d:
90:0f:53:85:22:19:b5:1c:b6:e0:fe:45:4f:66:ac:43:76:df:
13:8c:ec:5d:13:9e:f5:f4:27:49:91:46:b0:27:c2:78:01:b7:
24:01:10:29:bb:44:87:31:0a:14:23:e9:cf:dc:2f:f2:2c:6e:
ca:ff:5c:29:bc:8d:5c:e7:95:3e:e2:dd:ab:7b:25:e0:39:ea:
5e:b9:3e:d0:23:e7:64:fa:0e:ea:69:41:c2:7a:99:8b:69:4b:
90:d2:10:ff:80:7a:08:99:b7:4d:0e:32:e2:b5:1d:df:ad:5a:
82:dc:cd:2f:db:36:b6:30:ed:e4:51:84:33:e0:1d:c0:30:a1:
30:99:c4:e2:61:71:18:b6:33:32:24:f8:f6:c5:f2:3e:2e:49:
96:8a:ed:3e:14:05:be:b7:4d:3c:fa:e6:75:6e:73:2b:cc:84:
5b:bd:af:e0:f9:62:2a:45:cc:a6:6d:ec:e9:65:be:2a:03:7a:
4a:7a:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:49 2025 by rpki-client