This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/38FA1FDE135711EAACF3565BC4F9AE02.roa
File: 38FA1FDE135711EAACF3565BC4F9AE02.roa (raw, json)
Hash identifier: A78SwLmooHlq9R4PbdFEsRScNbphyoHMIpVM4a0cZUE=
Subject key identifier: 99:BE:98:C0:0C:58:27:FA:CA:22:2D:34:9F:0C:AC:A2:F9:BE:9E:99
Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial: 0C68
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/38FA1FDE135711EAACF3565BC4F9AE02.roa
Signing time: Mon 17 Nov 2025 17:05:54 +0000
ROA not before: Mon 17 Nov 2025 17:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137554
IP address blocks: 103.113.12.0/22 maxlen: 22
103.113.12.0/23 maxlen: 23
103.113.12.0/24 maxlen: 24
103.113.13.0/24 maxlen: 24
103.113.14.0/23 maxlen: 23
103.113.14.0/24 maxlen: 24
103.113.15.0/24 maxlen: 24
2402:b540::/32 maxlen: 32
2402:b540:1::/48 maxlen: 48
2402:b540:2::/48 maxlen: 48
2402:b540:3::/48 maxlen: 48
2402:b540:4::/48 maxlen: 48
2402:b540:5::/48 maxlen: 48
2402:b540:6::/48 maxlen: 48
2402:b540:7::/48 maxlen: 48
2402:b540:8::/48 maxlen: 48
2402:b540:9::/48 maxlen: 48
2402:b540:a::/48 maxlen: 48
2402:b540:b::/48 maxlen: 48
2402:b540:c::/48 maxlen: 48
2402:b540:d::/48 maxlen: 48
2402:b540:e::/48 maxlen: 48
2402:b540:f::/48 maxlen: 48
2402:b540:2a::/48 maxlen: 48
2402:b540:2b::/48 maxlen: 48
2402:b540:2c::/48 maxlen: 48
2402:b540:2d::/48 maxlen: 48
2402:b540:2e::/48 maxlen: 48
2402:b540:2f::/48 maxlen: 48
2402:b540:200::/48 maxlen: 48
2402:b540:202::/48 maxlen: 48
2402:b540:400::/48 maxlen: 48
2402:b540:410::/48 maxlen: 48
2402:b540:600::/48 maxlen: 48
2402:b540:601::/48 maxlen: 48
2402:b540:602::/48 maxlen: 48
2402:b540:603::/48 maxlen: 48
2402:b540:604::/48 maxlen: 48
2402:b540:605::/48 maxlen: 48
2402:b540:606::/48 maxlen: 48
2402:b540:607::/48 maxlen: 48
2402:b540:608::/48 maxlen: 48
2402:b540:609::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Validity
Not Before: Nov 17 17:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=691b55f2-7ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:32:f9:a0:6f:e1:b2:f8:68:01:a2:67:3f:
99:67:e2:9f:7c:2b:5a:c4:71:dc:39:76:d8:0e:e3:
81:49:75:a1:2f:ab:25:e7:af:d8:49:01:55:11:22:
0a:82:d1:6b:c2:bb:51:be:7a:bc:76:e7:ca:e2:8e:
c2:c1:49:c0:0a:b3:e9:17:5b:11:8b:91:29:f3:13:
b9:f5:7b:26:36:80:b4:40:1d:80:16:29:78:34:43:
39:0b:51:5d:92:6e:18:96:54:75:71:8e:46:d9:28:
c7:07:fa:18:3f:58:ad:c3:57:be:24:dd:c1:34:8c:
a0:23:92:71:0d:0b:ac:f3:8f:99:26:6b:84:54:2a:
e4:ed:79:a1:92:e9:2e:36:4b:94:a0:53:80:f5:c8:
8f:51:22:87:5a:69:e1:52:7f:b9:31:f9:e5:81:6b:
a6:aa:d2:4e:c8:94:60:b9:1c:5e:7e:cb:4f:ce:0e:
ae:d3:f8:fc:44:68:61:24:41:97:6d:93:02:74:25:
5c:7b:67:ae:a6:bf:4d:21:a4:9a:90:01:57:46:c8:
2b:3f:70:eb:eb:9d:5b:00:bd:2e:f7:9a:a5:38:9f:
e2:c4:a0:bf:22:8e:73:fc:32:4c:b2:1e:5b:4d:c6:
f4:3e:0f:5b:3c:fd:56:46:bd:f8:7f:d8:9a:d0:1c:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BE:98:C0:0C:58:27:FA:CA:22:2D:34:9F:0C:AC:A2:F9:BE:9E:99
X509v3 Authority Key Identifier:
keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/38FA1FDE135711EAACF3565BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.12.0/22
IPv6:
2402:b540::/32
Signature Algorithm: sha256WithRSAEncryption
59:38:b7:db:94:35:21:b6:d9:48:0b:52:43:f0:06:e9:11:6c:
79:4e:24:60:88:73:16:a1:ea:12:99:3f:f9:af:f2:ac:e5:30:
d6:1a:82:aa:48:26:ca:d2:49:ec:32:87:57:68:fa:0c:92:27:
dc:57:1a:43:45:7a:dd:fd:92:3f:8a:9d:ff:d6:ce:a5:ce:de:
70:e7:81:04:22:12:52:a2:2c:69:78:68:e2:91:03:26:3d:17:
9d:4d:78:a1:d2:91:82:f8:c3:61:6b:ad:39:d3:74:32:32:7b:
aa:7d:1b:94:2a:4b:2d:0b:1d:f1:40:97:0d:c6:f3:f6:05:73:
e1:fc:82:01:7e:9b:21:0c:30:85:38:31:1f:27:f4:5a:70:b1:
dd:f4:51:ad:03:2f:39:27:21:70:aa:b1:5e:61:e0:9e:82:b7:
1c:91:11:78:14:c8:5f:dc:48:a0:d5:c6:0c:8a:1c:b9:f2:c9:
51:27:41:00:a5:f5:41:cb:af:aa:b8:2b:34:bf:f4:a7:6c:95:
7f:a4:50:ae:b7:9f:23:1d:86:80:16:b3:8e:0b:c9:5e:d4:1d:
0c:72:7d:8c:7b:90:aa:f0:5b:e4:c0:6a:67:b5:53:e2:cc:6d:
04:14:ed:f7:03:69:3f:46:80:12:b8:e8:7c:d1:0e:25:2d:bd:
b3:70:4c:99
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB
QUZCNzc2Q0MwHhcNMjUxMTE3MTcwNTU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTFiNTVmMi03Y2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmU0y+aBv4bL4aAGiZz+ZZ+KffCtaxHHcOXbYDuOBSXWhL6sl56/YSQFVESIK
gtFrwrtRvnq8dufK4o7CwUnACrPpF1sRi5Ep8xO59XsmNoC0QB2AFil4NEM5C1Fd
km4YllR1cY5G2SjHB/oYP1itw1e+JN3BNIygI5JxDQus84+ZJmuEVCrk7Xmhkuku
NkuUoFOA9ciPUSKHWmnhUn+5MfnlgWumqtJOyJRguRxefstPzg6u0/j8RGhhJEGX
bZMCdCVce2eupr9NIaSakAFXRsgrP3Dr651bAL0u95qlOJ/ixKC/Io5z/DJMsh5b
Tcb0Pg9bPP1WRr34f9ia0BzWvwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJm+mMAM
WCf6yiItNJ8MrKL5vp6ZMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz
NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk
c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkyQTAvNEYxRUFFODQxMzU2MTFFQTk5MkIxMTVBQzRGOUFFMDIvMzhGQTFGREUx
MzU3MTFFQUFDRjM1NjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJncQwwDQQCAAIwBwMFACQCtUAwDQYJKoZIhvcNAQELBQAD
ggEBAFk4t9uUNSG22UgLUkPwBukRbHlOJGCIcxah6hKZP/mv8qzlMNYagqpIJsrS
Sewyh1do+gySJ9xXGkNFet39kj+Knf/WzqXO3nDngQQiElKiLGl4aOKRAyY9F51N
eKHSkYL4w2FrrTnTdDIye6p9G5QqSy0LHfFAlw3G8/YFc+H8ggF+myEMMIU4MR8n
9Fpwsd30Ua0DLzknIXCqsV5h4J6CtxyREXgUyF/cSKDVxgyKHLnyyVEnQQCl9UHL
r6q4KzS/9KdslX+kUK63nyMdhoAWs44LyV7UHQxyfYx7kKrwW+TAame1U+LMbQQU
7fcDaT9GgBK46HzRDiUtvbNwTJk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:22:42 2025 by rpki-client