This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/A81815BE31B711EF8F3D5F6BC4F9AE02.roa
File: A81815BE31B711EF8F3D5F6BC4F9AE02.roa (raw, json)
Hash identifier: LwVsRjUQzSRI9ydULu5dHXqYOgccHVAUOAaCO30tHhs=
Subject key identifier: C0:44:A5:2F:A4:1A:56:36:1F:21:5B:34:A6:AF:C6:54:63:3D:97:6B
Certificate issuer: /CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Certificate serial: 0108
Authority key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/A81815BE31B711EF8F3D5F6BC4F9AE02.roa
Signing time: Wed 05 Nov 2025 05:20:20 +0000
ROA not before: Wed 05 Nov 2025 05:20:20 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7575
IP address blocks: 103.36.12.0/23 maxlen: 23
103.36.12.0/24 maxlen: 24
2402:ec00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl
rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91504D6, serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Validity
Not Before: Nov 5 05:20:20 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690ade94-0449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:1d:97:d7:8c:66:c6:4b:fe:f6:d5:75:f7:
8c:17:a8:34:fa:c4:05:a8:54:02:41:70:6e:f8:f1:
1f:2f:43:66:14:97:5b:dd:0f:a6:8b:5a:9a:59:6c:
23:fb:8e:58:4c:2d:72:fe:8e:df:e6:38:09:2f:9e:
dd:9a:31:d1:4e:ae:33:a0:2f:05:d5:7e:dc:2f:18:
a2:ea:ef:f8:f1:22:be:06:77:ed:0d:08:c5:44:cd:
54:8f:6a:df:8e:2f:1b:43:78:b4:3d:82:ac:57:27:
b5:f8:32:81:48:86:a8:f3:ca:9f:6b:d0:f3:61:0f:
d4:bb:4b:ee:24:fe:95:19:c1:68:26:36:0e:c0:7d:
0f:b4:d3:5a:8d:58:9d:96:92:14:03:d8:0c:1c:c7:
80:1b:a0:24:9b:b2:5e:b2:9b:69:58:29:a1:2a:98:
24:2e:9e:a6:38:c5:09:55:28:2c:11:70:45:72:b9:
87:56:ea:c3:60:7d:86:c9:ed:a1:d4:fc:3e:a9:3a:
de:6f:3e:2b:97:7e:07:11:11:3a:ec:7b:43:ee:5c:
81:3a:a9:53:0a:99:34:18:19:cf:6f:9c:52:80:b9:
6e:a7:ce:4d:14:10:0e:fe:a1:e7:83:17:8e:9f:19:
ee:0f:78:17:c5:48:4a:e8:2c:da:bd:06:e0:78:0a:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:A5:2F:A4:1A:56:36:1F:21:5B:34:A6:AF:C6:54:63:3D:97:6B
X509v3 Authority Key Identifier:
keyid:FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/A81815BE31B711EF8F3D5F6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.12.0/23
IPv6:
2402:ec00::/32
Signature Algorithm: sha256WithRSAEncryption
6d:3f:4e:13:f0:35:a9:9f:97:e9:04:5b:56:e0:b4:f3:75:aa:
28:e8:3e:a8:56:9b:ea:cb:37:79:68:2a:1d:63:df:d8:9b:eb:
ad:73:41:62:f6:80:53:2a:6b:ad:7a:48:43:3e:7a:2f:16:0f:
25:2b:d2:9b:3d:db:1f:a1:19:fb:23:d1:1e:11:78:71:41:65:
4b:0b:9f:8e:44:ac:a1:fb:e8:e0:ec:d0:aa:b0:65:2e:6e:82:
d2:e5:4f:11:b4:3d:02:28:4d:4d:39:e9:2f:3e:c7:b4:d0:f9:
19:d0:a3:8b:f3:d1:d3:a5:c3:d5:d7:8a:d2:f0:28:d0:0e:18:
ce:52:70:23:db:aa:57:87:9d:55:98:4e:a0:a4:9a:48:c3:8a:
81:6e:1b:5e:d2:49:9c:4f:9b:be:a0:56:12:c9:02:2b:5f:95:
72:e1:26:3f:a3:06:1a:84:b7:24:4c:4a:27:2f:e7:ba:f1:88:
8e:89:ac:48:33:7f:5a:cb:c2:e6:27:8b:e4:3b:52:1e:9d:a1:
72:dc:55:45:5b:12:5d:e0:e9:cc:a0:55:90:2f:9b:d2:3a:08:
96:e6:ee:73:ad:c9:f1:f3:cb:48:a5:f6:84:b5:fa:12:bc:a3:
f5:99:a4:15:92:78:37:8e:7e:cf:4a:3c:35:93:ad:cf:9f:38:
50:ad:42:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:45:42 2025 by rpki-client