This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/41C97D600EA811EB8E9A770CC4F9AE02.roa
File: 41C97D600EA811EB8E9A770CC4F9AE02.roa (raw, json)
Hash identifier: BTersuR9nT3lEPvuv48IvMBlCU5YGyqezwR+drdWXyU=
Subject key identifier: 88:06:B0:9F:C2:32:B3:AD:76:F7:DF:B6:8C:C4:FE:AF:0C:1C:91:90
Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Certificate serial: 07EC
Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/41C97D600EA811EB8E9A770CC4F9AE02.roa
Signing time: Tue 02 Dec 2025 20:53:03 +0000
ROA not before: Tue 02 Dec 2025 20:53:03 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141345
IP address blocks: 103.157.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Validity
Not Before: Dec 2 20:53:03 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f51ae-e8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:fd:df:0e:b3:62:77:7f:33:51:57:21:95:
4d:16:a2:bb:22:a3:6a:d0:3f:1f:1f:89:28:95:9c:
bf:7f:73:09:2e:08:bf:39:c4:d7:0a:4a:7a:98:29:
7c:28:97:d0:b0:72:e8:6b:48:95:47:ce:89:01:e8:
84:02:76:fe:aa:2b:76:20:a8:5c:f5:14:ab:4c:71:
14:d9:0c:8c:6f:11:08:9a:0e:05:b8:d6:9c:64:ab:
95:51:ea:a7:30:49:92:b4:01:33:fd:ac:91:f1:d4:
f6:15:15:3d:ad:1e:fe:0f:af:27:c4:ee:d3:22:7a:
3c:85:fe:26:2b:18:55:24:0c:e4:0d:11:f1:ec:0b:
5a:11:d7:7a:b6:da:f6:61:46:da:67:0a:22:86:0f:
bd:12:bd:70:37:ea:e1:5b:9a:78:c7:b1:1f:aa:69:
2c:fb:98:ea:c1:ec:63:19:ea:8f:86:28:4c:21:38:
2c:fe:af:6d:24:00:af:50:84:a1:ae:72:e6:cb:95:
cb:01:75:bd:d2:ba:3a:77:ce:22:ec:0b:8a:e2:08:
49:e1:3a:f6:05:3e:a6:ef:49:fb:d0:9b:49:d6:e7:
76:b0:41:6a:47:18:ce:0a:84:2a:b7:c5:96:ff:3a:
0f:dd:3e:33:98:b7:0e:6d:41:26:b8:dc:4f:1c:63:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:06:B0:9F:C2:32:B3:AD:76:F7:DF:B6:8C:C4:FE:AF:0C:1C:91:90
X509v3 Authority Key Identifier:
keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/41C97D600EA811EB8E9A770CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.74.0/24
Signature Algorithm: sha256WithRSAEncryption
98:6b:5f:2b:bf:cb:c2:b8:07:41:aa:ca:dd:6f:e3:85:a5:1d:
34:80:68:89:86:12:c3:94:bb:59:a2:bb:8f:61:19:b9:e2:a4:
9e:2e:45:77:0b:6c:14:d5:76:63:85:c8:83:ab:e1:44:b0:fa:
b6:7a:d3:99:a7:f9:bf:b1:f5:17:26:33:c1:0a:e4:af:1b:c1:
7d:88:0a:48:9b:24:73:e1:71:1c:0f:6d:61:eb:08:fa:18:9e:
cd:67:ad:30:ef:ac:56:64:04:26:72:5b:ff:24:61:a2:05:4a:
6d:a5:b2:01:78:94:3b:ea:7b:96:64:59:4d:99:c7:37:76:de:
6d:73:13:00:28:46:5a:f1:01:ad:86:66:b8:41:29:78:0c:ee:
21:7e:06:0f:bc:44:4a:2a:dd:34:31:77:0b:6b:0e:2e:f3:c6:
4c:4d:23:0f:b9:2e:5d:b3:83:7a:51:ae:1a:a4:41:05:ff:17:
89:c3:28:2b:dc:f0:0e:4b:12:18:6b:29:d2:e6:04:35:f3:32:
8e:a4:3d:74:bb:ea:04:a4:f2:cc:5a:a7:ea:f6:55:70:a0:3d:
43:52:b4:bd:c9:4c:1c:27:4e:bb:85:d6:0b:08:76:89:e8:58:
f6:6e:da:d1:f3:88:a2:72:16:48:e6:2e:d5:62:23:ba:9c:3c:
20:c5:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:12 2025 by rpki-client