This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/4D608CC0800211EF81167A23C4F9AE02.roa
File: 4D608CC0800211EF81167A23C4F9AE02.roa (raw, json)
Hash identifier: LzylPXm23vwSZhDjGZSMxqVNBZhHuc0qqCM5OUudeV8=
Subject key identifier: 68:33:D9:BE:84:8C:F9:6C:70:1A:00:32:44:C8:80:7D:46:28:C3:DB
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 02F7
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/4D608CC0800211EF81167A23C4F9AE02.roa
Signing time: Fri 28 Nov 2025 23:57:01 +0000
ROA not before: Fri 28 Nov 2025 23:57:01 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 214766
IP address blocks: 103.102.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Nov 28 23:57:01 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692a36cd-065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:a9:4c:d1:f8:eb:ea:79:e4:b8:65:cb:bb:
ef:87:b3:5c:a7:93:59:a7:a6:76:b8:a1:05:22:b9:
00:85:36:4c:dc:da:04:6c:ce:84:1c:d8:f1:fb:e2:
73:4b:77:ab:43:1c:25:1e:67:68:de:c9:86:1b:52:
c5:73:5a:d1:b9:6d:4a:6a:33:63:55:06:a7:b3:53:
66:f2:5b:b7:31:9c:98:7d:62:37:b3:90:7b:8b:48:
e4:30:79:a5:6d:4d:65:d5:f6:bb:9a:59:d1:27:f7:
3c:e1:b0:5c:65:d3:82:29:28:73:15:12:11:0e:22:
8f:96:fc:a3:72:b0:4a:39:c8:d0:7d:20:7a:69:1e:
05:7e:a2:6d:2a:e1:83:17:27:97:9b:b6:ea:44:dc:
6e:73:68:b1:35:ce:0a:f5:60:44:5f:22:b9:82:a2:
39:c1:78:ed:fd:c8:74:1e:97:4d:1e:3b:37:64:d9:
80:73:85:82:d2:fd:b7:4c:b6:53:70:f4:87:f3:9c:
9f:a7:0c:40:35:02:f4:ff:67:be:32:76:59:8b:ea:
1e:a3:cc:74:47:ae:de:10:85:81:4d:b8:53:65:d0:
05:fd:80:db:b5:fd:94:75:d0:25:f2:f5:f3:86:a3:
cf:03:b8:f4:d6:d7:dd:aa:ae:f9:64:c9:7b:b3:64:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:33:D9:BE:84:8C:F9:6C:70:1A:00:32:44:C8:80:7D:46:28:C3:DB
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/4D608CC0800211EF81167A23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.126.0/24
Signature Algorithm: sha256WithRSAEncryption
78:24:5d:78:09:21:6f:5f:55:87:46:24:e0:97:5a:89:48:41:
f7:55:36:59:c2:d4:b4:f9:e5:20:fa:36:b3:d5:c2:7f:c7:4b:
f1:2f:81:d4:89:f0:37:b2:ef:47:aa:03:e4:4f:58:3d:a2:ad:
ea:2b:fe:dc:c3:70:a3:06:3a:e4:f9:c9:45:7b:7c:e7:e2:10:
5e:6c:e6:82:9b:50:32:a7:c0:6d:78:4c:72:30:86:84:7d:ed:
19:79:71:ea:2a:73:eb:f2:72:2e:f3:66:a3:f1:ca:20:c9:c3:
5a:6e:8e:d7:a1:4a:02:b5:37:3f:44:7a:63:10:99:cc:52:af:
7f:ca:0d:a9:96:d5:d1:81:85:74:b5:2d:13:c7:58:5b:6b:e0:
e6:1a:32:15:2f:2d:57:72:27:4a:5f:00:62:52:0d:5d:9f:d0:
8f:34:ca:2f:a1:dc:ca:1f:f3:86:83:3b:4f:68:73:aa:f7:3c:
90:46:0f:a8:60:6b:a7:81:54:70:b7:21:06:21:f2:c7:e1:27:
9b:83:7b:b0:98:68:0e:62:7b:15:47:c8:c2:61:f3:e2:39:73:
b0:84:43:9b:68:d8:89:68:29:81:ed:ca:85:48:5d:02:56:c8:
9e:db:3f:d4:00:2c:fb:99:45:74:83:9a:42:c3:0d:df:49:d4:
5a:8f:66:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:25:47 2025 by rpki-client