This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/208F4DA8C6C411F0BEF62B6BC4F9AE02.roa
File: 208F4DA8C6C411F0BEF62B6BC4F9AE02.roa (raw, json)
Hash identifier: JleVMwL9aP898EmaYuIzvHSQHOwb+NFkXuXkHYoagfE=
Subject key identifier: C2:BE:06:33:BB:AA:2A:1E:1F:D2:E2:7F:8A:23:DB:E9:C5:4D:32:B3
Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Certificate serial: 0B73
Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/208F4DA8C6C411F0BEF62B6BC4F9AE02.roa
Signing time: Fri 21 Nov 2025 10:23:31 +0000
ROA not before: Fri 21 Nov 2025 10:23:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9371
IP address blocks: 103.197.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230
Validity
Not Before: Nov 21 10:23:31 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69203da3-fddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:2e:ea:e4:89:41:af:07:96:b2:66:80:bb:
6b:a4:57:b7:61:f2:f5:28:d6:ce:3f:b3:a6:c9:34:
95:76:83:4d:95:5e:6c:6f:1d:be:3c:15:8b:50:32:
21:6f:96:9d:96:45:92:1b:49:93:08:9c:4a:60:e2:
00:3e:07:3d:f1:48:0f:75:0d:11:3a:be:e0:d1:3d:
3e:58:fc:cf:56:92:a3:d3:5e:4f:1c:ba:e0:6e:70:
07:a4:a7:15:79:e0:64:20:bc:8b:22:3c:08:f9:0c:
31:5e:a5:03:dc:83:27:ee:48:2f:3c:6e:03:96:c7:
e7:8c:0a:62:09:9c:83:ea:22:34:52:dc:a8:95:c3:
4a:53:12:0a:c9:16:25:54:58:59:47:e7:ea:57:75:
b0:04:37:11:06:6a:6d:e0:fd:a0:27:b3:3d:5a:e7:
31:d4:0d:c7:16:e0:fc:7d:31:a3:3f:a8:38:c0:ba:
12:6b:14:93:c5:84:a2:c7:fd:34:c5:d5:b9:41:8f:
38:cf:33:b0:8f:40:9f:8b:67:77:77:84:f6:83:65:
6b:49:0d:dd:91:94:70:55:43:c8:50:b7:26:09:fd:
eb:85:19:0d:34:ae:fa:70:1f:02:1a:34:78:7e:f6:
54:38:c1:ef:3a:3e:e0:b4:55:07:4d:0e:96:dc:c3:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BE:06:33:BB:AA:2A:1E:1F:D2:E2:7F:8A:23:DB:E9:C5:4D:32:B3
X509v3 Authority Key Identifier:
keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/208F4DA8C6C411F0BEF62B6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.5.0/24
Signature Algorithm: sha256WithRSAEncryption
79:41:94:61:0a:2f:55:8a:46:7a:83:a2:e3:0e:27:33:ab:d0:
82:d9:87:3a:69:9d:39:1c:06:64:d7:d8:65:36:b7:1b:f9:bf:
9d:58:3d:3f:e8:5a:b6:cf:c6:52:d3:4a:38:f4:e5:d5:7a:31:
a2:dc:5c:db:25:77:a9:5f:28:86:08:f3:96:b1:ea:cc:fd:0e:
39:19:d2:c1:8f:69:3e:06:b3:81:7e:a8:64:d2:4a:9a:0a:c1:
34:4b:8c:4b:00:91:be:70:99:cd:6c:72:e4:26:99:ff:11:b9:
c0:ec:85:0e:e7:b0:ae:61:35:48:20:5f:06:11:b3:9e:5d:4b:
8a:40:56:74:97:d1:0e:bd:a7:07:55:49:31:55:e8:a1:a3:49:
f0:fa:5c:a0:da:76:3d:85:9d:29:51:13:cf:b2:ee:6a:9e:30:
c3:a8:11:58:7d:90:02:6f:eb:03:77:9d:3b:d6:71:d4:1b:28:
11:18:d6:3c:d9:24:90:c1:89:59:d8:08:30:04:ba:77:1c:7f:
f4:af:4e:66:77:10:19:7d:af:0b:bb:04:89:e3:5e:52:75:50:
c5:b8:ef:78:b1:a4:f9:0b:e4:38:ff:c8:f0:84:b1:47:81:71:
42:a0:52:79:07:f3:2e:93:2c:57:29:73:23:3e:32:80:80:a2:
87:d5:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 13:52:19 2025 by rpki-client