This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
File: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier: 8iSV8D8oD91ieFptEm6yOg+QGlIuWzGhM3xHJS2wfog=
Subject key identifier: C3:CD:11:A8:7A:E9:C7:BC:6C:B6:9E:C8:6E:BB:16:85:03:05:A4:28
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 0485
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
Signing time: Thu 04 Dec 2025 12:29:49 +0000
ROA not before: Thu 04 Dec 2025 12:29:49 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 136526
IP address blocks: 103.80.132.0/22 maxlen: 22
103.80.132.0/24 maxlen: 24
103.80.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1157 (0x485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Dec 4 12:29:49 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=69317ebd-fe81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:0b:13:6d:91:a7:35:13:22:14:d3:58:51:
de:dc:05:ce:30:f5:b4:4f:1c:de:fa:93:c7:20:9f:
ca:f9:c2:55:7e:ce:e7:02:93:4c:27:36:d9:7c:c6:
10:20:ca:fb:0d:70:66:20:4b:4f:27:64:2e:77:bf:
88:3a:74:62:ee:8c:7e:a7:17:d9:34:02:df:f0:21:
ac:56:0d:3e:f6:c3:4c:6f:3b:c7:53:bb:d7:3b:5b:
f4:c0:0a:dd:7f:54:f0:7c:b6:8a:02:10:a6:a4:90:
9f:75:7d:6f:9e:da:1a:b5:65:e0:8c:a8:b2:47:6a:
a5:3f:89:8f:c8:e2:24:9c:54:cf:9a:ba:fb:ff:1a:
21:48:f0:45:15:28:81:5c:a1:01:a3:18:b9:cc:b9:
81:1d:a4:2a:3e:f3:c5:ea:ba:83:c2:e6:b8:0e:74:
53:42:5e:e8:46:6e:52:41:94:e2:b5:6a:24:c4:64:
2f:22:bc:cc:26:47:c3:f9:30:f7:d7:3f:cb:e7:02:
c9:1e:d5:51:36:8a:eb:af:c3:00:a3:4f:e3:14:0e:
bf:37:3f:78:13:6d:ee:7a:62:f1:03:f9:6b:a8:0b:
38:b9:54:8a:1c:c0:96:c2:53:e5:81:ed:77:65:46:
d9:6a:1c:56:46:56:99:ac:3f:de:2a:63:d3:bf:1b:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:11:A8:7A:E9:C7:BC:6C:B6:9E:C8:6E:BB:16:85:03:05:A4:28
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/57B53F64DE9B11EC9AE23269C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.132.0/22
Signature Algorithm: sha256WithRSAEncryption
84:23:c5:64:6b:15:1f:e1:97:25:23:98:e0:31:25:02:c0:e3:
da:1e:a4:6a:b9:cb:64:5b:67:f5:68:3e:9d:97:16:b9:26:38:
a7:2b:e8:2f:84:11:16:91:65:5b:71:8e:ae:ae:6d:a6:63:f9:
99:a5:93:ae:0b:81:70:4c:b3:8b:8d:df:f6:8f:b7:d8:1e:a1:
f5:72:f2:9f:66:7c:0d:3f:72:d5:69:06:5e:6c:da:16:0b:c0:
ff:e9:b5:ff:67:db:70:6b:49:97:43:53:9f:69:c6:b7:f6:b6:
cc:4e:6c:32:55:2c:e5:d5:99:24:eb:d8:72:2b:61:9a:95:6b:
cc:52:53:25:19:eb:26:23:aa:34:c3:7c:28:5b:4d:e3:50:27:
4d:2c:af:00:2c:94:1a:fc:c5:d6:28:a7:12:ed:e7:1d:fd:77:
94:9c:5c:2e:ef:d3:41:7f:7c:6a:ce:ce:db:2e:ea:ed:d0:91:
42:ba:a9:68:a5:78:86:4d:7c:ba:71:eb:17:55:79:72:0b:be:
95:6e:15:4e:85:c6:a5:61:e0:29:88:7a:5e:9a:01:8a:02:cb:
4f:d4:b6:74:f4:96:f6:50:d5:16:3a:15:b1:ab:2e:2c:4f:fd:
90:03:1d:a9:66:ca:16:37:c5:e6:a9:1d:8f:cc:aa:26:42:a3:
8b:cc:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:25 2025 by rpki-client