This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/80EEB89ADF1611F0ADE7C949616F56BC.roa
File: 80EEB89ADF1611F0ADE7C949616F56BC.roa (raw, json)
Hash identifier: D81DSvORE+T8JlZrt9j4gBVy+u4hLWZ+jPLU48Kviw4=
Subject key identifier: 3D:DB:08:E4:3B:1D:6D:5B:24:F9:5D:B3:76:2D:17:F0:F4:5F:D8:26
Certificate issuer: /CN=A91EBD8F/serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F
Certificate serial: 07
Authority key identifier: 9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/80EEB89ADF1611F0ADE7C949616F56BC.roa
Signing time: Mon 22 Dec 2025 09:13:40 +0000
ROA not before: Mon 22 Dec 2025 09:13:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 16509
IP address blocks: 203.142.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl
rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBD8F, serialNumber=9AD8928EAF25C51CB3B3211D49B6BAB9F0B9F67F
Validity
Not Before: Dec 22 09:13:40 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69490bc3-0118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:27:cc:b0:bc:4e:f0:f2:b6:63:d5:f9:ca:
08:d1:8e:30:c8:5a:6d:41:33:76:12:ad:d0:2b:1f:
8a:e9:ef:81:85:49:81:95:7a:15:8e:c6:93:de:4b:
3c:83:37:03:dc:e3:50:a7:67:89:15:90:be:b5:00:
f8:16:b2:71:50:e4:c6:56:51:e1:ad:79:77:7a:01:
22:c2:8a:15:eb:13:e3:21:b2:c3:29:53:ee:8c:f9:
b7:ea:b0:b3:9f:92:df:30:17:20:e4:b7:26:0e:08:
92:8a:bd:3d:fe:64:9a:5c:93:d5:11:d8:f6:d4:e1:
4f:2f:31:8a:55:95:af:bb:3b:df:21:66:c6:b5:e4:
ab:76:e2:5f:74:3d:3c:be:8a:bb:5b:07:fb:54:5a:
72:66:8a:f4:5c:bd:26:58:3e:c6:f9:05:2b:4a:58:
d5:4b:1e:21:95:3b:59:2f:c9:ec:38:39:96:7e:8a:
45:ad:34:1a:bf:d9:ee:1c:72:5c:d0:b2:22:c8:e4:
10:57:43:ab:ae:3a:89:4c:3b:8f:d7:71:a6:57:96:
68:b9:78:ca:f1:2f:7f:1d:fe:0c:77:f5:db:57:a6:
60:ce:8c:c7:bb:64:90:9e:17:25:1f:d4:f6:20:cb:
63:1e:5f:50:92:1d:b9:f5:10:e4:a0:b9:f8:5f:61:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DB:08:E4:3B:1D:6D:5B:24:F9:5D:B3:76:2D:17:F0:F4:5F:D8:26
X509v3 Authority Key Identifier:
keyid:9A:D8:92:8E:AF:25:C5:1C:B3:B3:21:1D:49:B6:BA:B9:F0:B9:F6:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/mtiSjq8lxRyzsyEdSba6ufC59n8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtiSjq8lxRyzsyEdSba6ufC59n8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/52EBC8C8D99B11F084F436B165D3641D/80EEB89ADF1611F0ADE7C949616F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.142.24.0/23
Signature Algorithm: sha256WithRSAEncryption
98:20:77:74:b0:0e:64:3d:f5:22:80:39:8d:ed:17:f8:88:e4:
2c:84:10:7b:13:21:d5:d1:3e:c8:00:ce:b8:16:48:c4:0e:55:
d3:74:32:f7:b1:05:df:40:85:9a:66:eb:9a:67:90:40:88:a3:
3a:c4:69:ee:bf:55:14:69:28:55:3d:73:b1:17:09:48:d4:e4:
8c:1b:9f:5a:45:59:6f:47:ed:9b:e2:69:8b:f9:b6:14:4c:ef:
02:48:67:8a:08:04:b8:d0:d3:71:cb:40:82:1e:3b:84:c8:dd:
2b:28:03:f4:f4:4b:83:13:e6:39:e7:dc:be:9a:d3:29:b7:20:
57:84:49:dd:de:0f:ad:53:6b:4f:7c:67:08:97:a8:0d:2f:e9:
75:a6:8b:b3:ce:bd:5b:e5:bb:be:90:da:99:d9:b7:93:b2:5b:
05:21:b2:0a:de:4c:17:c4:e9:0d:55:dc:b4:4e:7a:bb:da:fe:
3a:5e:f1:f6:55:57:4b:00:a5:c3:70:78:23:0b:87:19:41:a6:
d8:62:2d:90:08:0f:d1:7e:7f:e3:38:6e:7c:d2:75:13:a4:8c:
63:41:02:1e:1f:fd:bf:eb:6d:a2:61:a9:8d:8b:83:2c:aa:15:
b7:72:8f:cf:e5:c6:76:55:c2:53:e0:36:82:ca:ab:8b:1b:76:
03:b4:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:31:58 2025 by rpki-client