This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/9FC61D303F7A11F0BC711E7FC4F9AE02.roa
File: 9FC61D303F7A11F0BC711E7FC4F9AE02.roa (raw, json)
Hash identifier: C5rUIoFqqclhdElugA0FvIj8IEg8cL4pnvwgzKHSew8=
Subject key identifier: 12:61:50:4C:DA:0C:9B:34:A9:63:FC:7B:22:E5:BD:4C:5C:08:04:CB
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0C6A
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/9FC61D303F7A11F0BC711E7FC4F9AE02.roa
Signing time: Tue 02 Dec 2025 09:31:30 +0000
ROA not before: Tue 02 Dec 2025 09:31:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150371
IP address blocks: 103.70.86.0/24 maxlen: 24
103.70.87.0/24 maxlen: 24
103.117.162.0/24 maxlen: 24
103.117.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3178 (0xc6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Validity
Not Before: Dec 2 09:31:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=692eb1f1-ca40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:84:54:41:fb:57:2b:52:31:cf:4d:91:8e:
61:37:42:94:99:6a:cd:8b:bf:cb:19:f3:7a:2e:e8:
bd:a8:51:59:75:57:80:f0:7b:22:8a:9e:f6:ca:12:
78:20:bb:9f:3d:26:d9:b7:c3:e9:86:5c:a5:8d:dc:
cc:64:2a:f8:db:fb:ba:b6:fe:dc:df:44:72:8a:2f:
0b:bd:d8:05:54:28:b4:d3:d8:d5:7d:85:a1:22:02:
33:06:bb:b1:ad:42:17:18:5d:ae:b2:93:b8:fd:5f:
85:1a:f3:8f:bf:b0:ce:ce:e7:d6:10:a2:41:e9:1f:
5e:56:1f:c7:16:73:b2:b6:7b:37:0e:97:07:5a:22:
71:8f:41:07:04:ab:1c:50:bc:d8:23:30:45:fb:04:
89:c8:99:6b:03:15:00:f1:d7:39:eb:b6:1e:2b:eb:
b4:ea:a9:b7:e9:56:d2:76:98:ac:82:b7:71:c7:59:
97:09:b5:2e:b1:ab:59:39:5b:ba:0e:9e:25:e2:0d:
0e:39:6c:50:91:cd:3b:b7:74:4a:57:5d:43:e2:f2:
d6:82:80:05:5b:15:7c:34:12:00:76:7b:08:1a:8c:
07:18:c4:81:8a:ce:37:5e:6a:2f:37:27:98:d2:a1:
76:9a:ac:72:0f:fc:7a:01:c5:3a:90:65:7f:2f:28:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:61:50:4C:DA:0C:9B:34:A9:63:FC:7B:22:E5:BD:4C:5C:08:04:CB
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/9FC61D303F7A11F0BC711E7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.70.86.0/23
103.117.162.0/23
Signature Algorithm: sha256WithRSAEncryption
09:7c:52:ce:27:6e:4c:ab:a2:fa:02:3e:b8:3d:d3:03:78:f3:
55:29:28:62:f8:63:fb:db:0b:dc:b9:a8:cb:a7:c5:e7:bc:58:
55:00:59:9a:4e:ca:a0:08:99:a9:54:56:43:8c:4c:83:15:41:
00:c5:21:34:07:88:75:60:1a:11:f8:a5:21:d6:ae:d5:88:01:
7d:d8:43:4e:4d:94:1d:50:fa:46:89:cf:a8:7f:b5:a4:a5:65:
fd:b7:9b:e0:c8:65:68:ce:60:08:9b:c8:91:f7:ea:fd:5d:9d:
04:f4:0a:dd:d4:8d:ac:97:bd:93:8e:54:1d:9b:d7:3c:88:34:
1c:a5:9b:c0:ab:2e:37:17:86:e7:1e:f2:6a:79:d7:04:1d:7b:
d9:a2:0b:7c:2e:3f:55:32:24:84:87:25:6a:bf:52:7f:c6:66:
8a:16:38:58:3a:27:96:3e:c4:a4:a2:02:ad:e3:20:29:97:68:
51:7c:0e:f0:94:b9:0c:ac:5d:99:9f:0c:6d:fb:29:f4:91:b6:
eb:13:62:b7:23:6e:cb:7d:80:b6:00:2a:cc:7f:26:71:0d:b0:
0c:2e:da:4d:03:e6:dd:34:95:aa:36:eb:6a:5c:de:69:20:12:
f5:d4:7a:75:93:59:df:df:2a:d0:94:09:9e:7d:3a:a4:d9:fd:
7d:26:32:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:24:30 2025 by rpki-client