This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5879949ADE9B11EC9AE23269C4F9AE02.roa
File: 5879949ADE9B11EC9AE23269C4F9AE02.roa (raw, json)
Hash identifier: mQb3ZW40ftVwCKapRWYOccQ/zQQYdDw+/ZFkMrPcyXk=
Subject key identifier: D9:77:A9:A1:0B:CA:1E:20:E9:50:E6:5B:6A:74:2C:80:04:C2:98:A3
Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Certificate serial: 0486
Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5879949ADE9B11EC9AE23269C4F9AE02.roa
Signing time: Thu 04 Dec 2025 12:29:50 +0000
ROA not before: Thu 04 Dec 2025 12:29:50 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 137427
IP address blocks: 103.80.132.0/22 maxlen: 22
103.80.132.0/24 maxlen: 24
103.80.133.0/24 maxlen: 24
103.80.134.0/24 maxlen: 24
103.80.135.0/24 maxlen: 24
182.161.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:49:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158 (0x486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A
Validity
Not Before: Dec 4 12:29:50 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=69317ebe-90c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:bd:f7:fa:b8:29:e8:8f:2a:7e:75:c1:85:
c5:77:88:da:6f:38:ad:a6:ad:ed:10:8f:78:33:6f:
60:89:4a:3b:b2:cf:0e:27:1e:47:3e:ac:63:bb:fd:
e6:d2:de:8d:68:a1:8f:73:f7:d1:e9:4b:5e:8b:dc:
2c:43:77:f9:a7:13:ba:58:ee:b5:27:ac:fb:a1:9f:
70:21:d4:a9:9b:a5:ca:92:97:70:92:41:8d:26:cd:
d0:58:47:57:aa:62:4f:83:e2:06:3d:db:b8:8a:6e:
e2:c9:6c:3c:d9:6e:ff:f5:c8:45:d3:96:8a:8b:1f:
b4:a2:df:b9:ff:47:21:14:2b:42:0a:ad:7d:71:44:
a6:6e:8e:96:7f:ad:3a:eb:62:03:a7:26:a0:a8:5b:
a9:0a:89:5d:2c:d9:dd:71:cc:9c:78:73:8d:8e:86:
bf:2f:38:69:f9:f3:2e:8d:dc:04:c4:7d:a4:02:49:
ca:3b:c4:54:ad:82:8e:43:f9:0f:16:06:40:49:7d:
3b:fd:38:15:b6:cf:39:f0:e7:ca:42:1f:46:d7:79:
85:a4:2d:a8:f8:42:32:03:1e:c7:4d:e0:a5:75:fe:
9c:8c:ff:45:6c:2c:56:ed:6d:9f:3c:26:dc:ec:45:
b1:b7:6f:41:10:fa:0e:71:b5:42:fb:4c:77:dc:ae:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:77:A9:A1:0B:CA:1E:20:E9:50:E6:5B:6A:74:2C:80:04:C2:98:A3
X509v3 Authority Key Identifier:
keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/5879949ADE9B11EC9AE23269C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.132.0/22
182.161.66.0/24
Signature Algorithm: sha256WithRSAEncryption
67:95:5e:d4:e8:37:24:d1:89:65:79:ec:a1:37:7b:9d:4d:dc:
cb:4a:05:3f:e1:a9:8b:15:88:78:f6:27:d5:e3:a9:e6:d8:ea:
e6:74:13:15:54:72:8c:8c:78:c5:e7:49:26:b8:ba:48:4e:f8:
d5:c0:30:0a:25:44:a1:9d:33:c2:fb:a9:75:7e:3a:ea:f8:37:
97:cd:24:42:cf:a7:03:bc:ba:85:c8:74:f8:e3:82:7f:43:a2:
fb:90:6b:5b:c5:78:34:f1:47:23:0a:de:43:72:ff:80:e3:32:
f5:0e:ea:40:08:84:dd:bf:8c:1a:60:cc:71:21:a8:42:d7:39:
88:3d:bf:de:5e:30:78:ef:84:2b:5c:02:1d:e9:49:5a:eb:ab:
80:2a:a7:a5:fc:36:79:bc:67:49:fa:d6:a1:61:1b:3e:80:fa:
66:6f:fd:d9:73:64:71:bb:df:94:ab:88:b0:60:02:53:90:6c:
76:b2:35:cb:02:f6:e8:08:d3:e0:a9:08:55:b3:56:c7:37:bf:
bc:f5:f1:a6:af:03:e8:35:01:71:0f:b9:38:54:f1:42:c4:57:
3a:94:dd:a9:09:b7:b8:de:2f:60:ab:18:e6:7f:da:43:61:86:
f6:6d:c7:05:76:14:05:90:55:8f:e1:47:d1:19:1f:65:a1:c1:
27:72:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:16 2025 by rpki-client