This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/F85178E05DD111EF83CF1063C4F9AE02.roa
File: F85178E05DD111EF83CF1063C4F9AE02.roa (raw, json)
Hash identifier: JmstrL5CTlNuaQ6A81EGJRNd/DiR/bvS/M8jrUz3m6o=
Subject key identifier: ED:1B:01:16:11:CC:36:3B:AE:57:9A:7A:9D:42:0B:54:36:86:75:70
Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Certificate serial: 0570
Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/F85178E05DD111EF83CF1063C4F9AE02.roa
Signing time: Fri 02 Jan 2026 23:18:59 +0000
ROA not before: Fri 02 Jan 2026 23:18:59 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137239
IP address blocks: 103.105.212.0/22 maxlen: 22
103.105.212.0/24 maxlen: 24
103.105.213.0/24 maxlen: 24
103.105.214.0/24 maxlen: 24
103.105.215.0/24 maxlen: 24
2403:240::/32 maxlen: 32
2403:240::/34 maxlen: 34
2403:240:4000::/34 maxlen: 34
2403:240:8000::/34 maxlen: 34
2403:240:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl
rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75
Validity
Not Before: Jan 2 23:18:59 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69585263-fb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:37:a0:65:85:d7:6a:d6:84:d4:d6:ee:8b:
a2:21:d9:97:91:ba:29:98:0c:bb:50:34:77:8b:5c:
0d:36:67:e5:5d:76:93:52:32:99:7d:a8:ef:11:d2:
2a:2a:4d:26:4a:49:92:26:e8:0d:18:c3:d1:fb:57:
da:14:d6:5d:4f:07:9a:1c:ad:d7:da:03:48:0d:8b:
32:d2:16:7a:a4:ac:16:1b:e7:af:ad:1e:17:0e:4a:
dc:5b:e5:7f:55:f8:63:59:aa:6a:b8:f9:ef:03:9a:
15:d5:72:17:30:9c:bc:e3:23:44:d7:a5:38:ad:cd:
6e:01:46:0a:ff:02:e3:ff:bd:f4:f1:4e:9a:8a:6b:
c2:9e:be:2c:30:24:d7:41:3d:be:82:50:09:da:79:
67:f0:94:fc:6f:ff:b4:77:a4:dc:d7:d1:1a:45:49:
f7:41:1a:08:9d:af:c6:87:9e:ff:b1:3c:76:26:8f:
f1:43:7e:5e:dd:fd:a1:b2:0d:d9:a9:8e:10:a5:45:
09:8f:74:17:85:01:63:5c:f8:67:c7:2d:f8:4f:1f:
54:07:35:fa:21:52:24:cf:8d:5c:12:82:e7:99:95:
55:4b:ef:fa:9a:ef:27:b4:3b:0b:31:14:79:ae:d4:
22:f4:3f:d7:52:58:45:5d:2a:9e:bf:20:9c:26:7e:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:01:16:11:CC:36:3B:AE:57:9A:7A:9D:42:0B:54:36:86:75:70
X509v3 Authority Key Identifier:
keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/F85178E05DD111EF83CF1063C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.212.0/22
IPv6:
2403:240::/32
Signature Algorithm: sha256WithRSAEncryption
c1:85:e3:91:06:9d:28:7c:db:80:1d:45:ea:ea:37:be:c5:4b:
5c:a7:de:8f:ca:86:56:ff:3b:e5:17:86:a3:c2:05:22:09:f7:
95:89:98:da:d0:8b:64:05:a2:b4:46:e9:c5:6d:06:af:29:86:
61:be:b8:1e:3d:1a:41:9e:ea:4f:bd:c6:84:2a:85:0a:bf:09:
f1:5a:54:8b:48:ae:c7:89:b7:f9:77:8b:ac:d6:30:fa:6d:0b:
42:f6:a3:66:fd:46:4a:9a:77:48:98:a9:71:b0:d6:f6:a2:72:
fb:e7:59:48:1b:87:18:d9:89:0f:15:e1:24:a6:1f:48:7d:5c:
a8:df:1d:db:38:0a:db:f8:19:db:59:25:60:16:da:d9:3d:2b:
6d:62:3d:02:68:3b:41:8d:d1:67:f2:b1:40:70:43:e5:71:b5:
95:36:17:60:1e:f8:a8:10:34:a0:46:94:93:f2:b7:26:c2:7c:
b8:95:94:f5:44:45:9a:b1:5c:6f:68:7b:c8:9a:9e:55:5c:2d:
9d:f0:ff:3d:9b:41:3b:3e:97:16:79:49:42:7a:40:b5:5d:ca:
c9:73:b0:a3:24:21:e8:08:1a:3d:95:15:d1:a0:d2:68:e2:ac:
6e:f0:15:b7:d7:81:70:6b:a4:7c:4a:1d:73:96:99:64:9b:7f:
ae:89:21:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:11 2026 by rpki-client