This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/BA1EA120E6FC11EE96775810C4F9AE02.roa
File: BA1EA120E6FC11EE96775810C4F9AE02.roa (raw, json)
Hash identifier: DsY0F/+bIVvBBuv+9tEFPjsbJ9yrCH6IRJ1ZtuOOeQM=
Subject key identifier: 0E:81:C3:5A:C1:AC:A1:7D:D9:67:4A:BD:EB:A6:DD:1E:1B:09:A3:47
Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Certificate serial: 122E
Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/BA1EA120E6FC11EE96775810C4F9AE02.roa
Signing time: Sun 28 Dec 2025 17:14:33 +0000
ROA not before: Sun 28 Dec 2025 17:14:33 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152479
IP address blocks: 103.126.148.0/24 maxlen: 24
103.126.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4654 (0x122e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Validity
Not Before: Dec 28 17:14:33 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69516579-89d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:7a:df:26:08:bb:2f:01:f4:68:ef:0b:d7:
bb:68:58:cf:cf:6a:cb:f1:9b:39:88:08:bf:96:4a:
8f:ff:90:ec:3b:d2:69:3a:ca:36:25:c8:23:cc:84:
62:eb:01:69:00:db:42:5d:ee:62:81:51:ec:a9:ed:
90:20:b5:3f:ac:08:a7:b2:1e:8c:b1:3c:d3:ac:4c:
76:d2:93:ae:d0:86:fc:e1:11:b5:90:49:4f:c5:cd:
9e:96:fa:95:12:67:2c:b6:39:a9:9d:25:46:2c:a2:
72:1e:b6:d3:5f:e0:ae:63:6b:e8:91:3f:7d:ed:48:
ca:28:b3:fb:46:eb:69:aa:00:ad:3f:14:8f:04:ce:
d6:b7:41:46:76:b9:fe:85:e8:a1:16:7a:5a:b7:8b:
7b:d9:dd:ae:d4:1a:4e:0c:d6:af:42:ea:56:f6:f1:
6c:db:fc:88:ba:2d:c3:79:3b:36:cd:dc:66:2f:aa:
d8:69:ca:de:a7:2d:d4:f0:9a:5b:a9:72:2e:21:a3:
11:21:80:72:a2:5e:48:a0:2e:9b:2f:b0:28:90:c9:
8e:ff:27:f7:8f:6d:41:5b:4c:10:aa:0b:f6:b2:d7:
a7:0d:47:be:c9:57:4a:77:27:2d:d4:64:88:70:c8:
ad:2c:45:cf:88:ef:6d:7c:8c:90:7d:5e:f9:e5:61:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:C3:5A:C1:AC:A1:7D:D9:67:4A:BD:EB:A6:DD:1E:1B:09:A3:47
X509v3 Authority Key Identifier:
keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/BA1EA120E6FC11EE96775810C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.148.0/24
103.126.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ca:ff:cd:f9:fd:da:72:fc:42:fd:cc:60:64:9a:e3:34:7d:
1d:4a:6b:73:6e:05:a3:27:a0:11:f9:91:9c:f3:a3:e5:e3:28:
4e:04:c6:cb:06:56:be:6c:76:57:17:15:98:3f:22:26:88:34:
f4:8d:74:a2:4e:46:7f:8e:10:06:d7:dd:cd:15:1b:b4:dc:d5:
5a:58:af:8c:02:83:0d:41:44:38:a3:79:24:86:e7:40:6c:ff:
05:32:43:69:7d:ad:58:ac:30:d9:5a:72:46:4f:a9:55:99:49:
df:a1:86:61:e6:f5:4c:3b:32:52:64:70:97:3c:64:9d:03:bd:
e2:8d:c6:64:44:12:f1:f1:df:3f:9e:e1:63:ef:11:95:00:57:
22:8b:ca:aa:d2:4e:13:a1:c9:4a:83:31:fa:98:9a:85:c4:a6:
fb:0a:78:72:66:85:32:2a:8e:fb:bf:94:71:31:ce:ed:b3:ad:
ae:c6:6b:e0:48:ab:aa:dd:86:7b:27:45:64:b7:e1:48:19:e6:
93:17:36:58:d3:bd:31:5d:39:eb:cb:e5:1d:82:32:eb:2a:d7:
1f:71:24:d0:e0:08:f4:e9:68:a3:85:a0:b5:16:7c:58:96:90:
ff:81:09:2d:2e:11:9a:3b:84:65:d4:2d:6a:a4:34:45:2f:ed:
f4:67:3d:aa
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICEi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG
MEVDQjIwQTIwHhcNMjUxMjI4MTcxNDMzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTUxNjU3OS04OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bZ63yYIuy8B9GjvC9e7aFjPz2rL8Zs5iAi/lkqP/5DsO9JpOso2JcgjzIRi
6wFpANtCXe5igVHsqe2QILU/rAinsh6MsTzTrEx20pOu0Ib84RG1kElPxc2elvqV
EmcstjmpnSVGLKJyHrbTX+CuY2vokT997UjKKLP7RutpqgCtPxSPBM7Wt0FGdrn+
heihFnpat4t72d2u1BpODNavQupW9vFs2/yIui3DeTs2zdxmL6rYacrepy3U8Jpb
qXIuIaMRIYByol5IoC6bL7AokMmO/yf3j21BW0wQqgv2stenDUe+yVdKdyct1GSI
cMitLEXPiO9tfIyQfV755WHp/QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA6Bw1rB
rKF92WdKveum3R4bCaNHMB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB
QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1RUYvNjA3NzI5RDBGQUMxMTFFOEJDNzZENjcxQzRGOUFFMDIvQkExRUExMjBF
NkZDMTFFRTk2Nzc1ODEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnfpQDBABnfpcwDQYJKoZIhvcNAQELBQADggEBALHK/835
/dpy/EL9zGBkmuM0fR1Ka3NuBaMnoBH5kZzzo+XjKE4ExssGVr5sdlcXFZg/IiaI
NPSNdKJORn+OEAbX3c0VG7Tc1VpYr4wCgw1BRDijeSSG50Bs/wUyQ2l9rVisMNla
ckZPqVWZSd+hhmHm9Uw7MlJkcJc8ZJ0DveKNxmREEvHx3z+e4WPvEZUAVyKLyqrS
ThOhyUqDMfqYmoXEpvsKeHJmhTIqjvu/lHExzu2zra7Ga+BIq6rdhnsnRWS34UgZ
5pMXNljTvTFdOevL5R2CMusq1x9xJNDgCPTpaKOFoLUWfFiWkP+BCS0uEZo7hGXU
LWqkNEUv7fRnPao=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:46 2026 by rpki-client