This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa
File: D9C33050560B11EDA1636E52C4F9AE02.roa (raw, json)
Hash identifier: 9/2XCNctQ1f+o95ZaKqd5kOwv2Isg2/Z/qwhLlbN/dM=
Subject key identifier: E8:E8:52:C1:6C:8E:CE:52:F5:D6:DD:1D:61:86:C3:AC:A3:9C:0A:C5
Certificate issuer: /CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
Certificate serial: 0B48
Authority key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa
Signing time: Sat 08 Nov 2025 18:39:10 +0000
ROA not before: Sat 08 Nov 2025 18:39:10 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 138362
IP address blocks: 103.131.144.0/22 maxlen: 24
2403:cc40::/32 maxlen: 36
2403:cc40::/40 maxlen: 40
2403:cc40:1::/48 maxlen: 48
2403:cc40:2::/48 maxlen: 48
2403:cc40:3::/48 maxlen: 48
2403:cc40:22::/48 maxlen: 48
2403:cc40:100::/40 maxlen: 40
2403:cc40:200::/40 maxlen: 40
2403:cc40:300::/40 maxlen: 40
2403:cc40:400::/40 maxlen: 40
2403:cc40:1000::/40 maxlen: 40
2403:cc40:1100::/40 maxlen: 40
2403:cc40:1200::/40 maxlen: 40
2403:cc40:1300::/40 maxlen: 40
2403:cc40:1400::/40 maxlen: 40
2403:cc40:1500::/40 maxlen: 40
2403:cc40:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl
rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2888 (0xb48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91747E1, serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E
Validity
Not Before: Nov 8 18:39:10 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690f8e4e-98c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:68:cf:8c:21:1f:a1:09:36:42:29:55:66:
8b:98:b4:85:67:f8:0a:e7:ae:2f:ed:f4:ec:c7:61:
dc:94:14:79:34:d7:5e:80:cd:db:cb:34:8c:de:db:
a4:15:fd:b1:2d:e5:d2:b3:d5:78:15:b7:60:80:da:
5f:06:5b:44:50:28:ce:3b:02:b4:3f:68:01:f5:22:
b1:46:8f:01:14:d3:51:84:3a:b0:73:8d:ba:0d:7e:
88:39:3c:22:1c:c3:c2:42:f4:d6:43:bd:c3:09:2f:
4e:2e:0c:73:e7:c6:a1:44:cc:ee:4f:c0:9d:54:e0:
c4:32:a6:ed:11:53:7e:64:57:29:fc:e9:03:5d:63:
0e:04:3c:f0:5f:89:34:9d:47:ab:bb:38:1a:f3:77:
f2:65:3a:6f:51:bb:8c:91:31:6d:fa:68:84:ef:cc:
8b:ea:4f:6f:d9:9d:1f:ed:4c:fc:f7:ad:07:ce:c8:
5b:c8:57:10:16:a3:25:2b:01:08:27:2a:4f:35:bc:
89:44:e3:66:02:66:a0:b7:fd:c8:96:7d:28:99:35:
6b:3f:8e:2c:b7:16:c2:78:b6:04:a5:32:c6:1c:83:
22:21:06:d6:c7:45:24:45:bb:96:04:99:01:22:30:
a6:83:ba:57:b2:e0:4f:80:76:19:3a:6e:35:77:87:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E8:52:C1:6C:8E:CE:52:F5:D6:DD:1D:61:86:C3:AC:A3:9C:0A:C5
X509v3 Authority Key Identifier:
keyid:7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.144.0/22
IPv6:
2403:cc40::/32
Signature Algorithm: sha256WithRSAEncryption
42:82:27:b1:75:11:48:be:66:f7:d7:3b:8b:fe:6f:01:2a:e6:
1b:99:4c:c1:f8:5e:30:86:e4:3a:b9:f1:2d:d1:67:72:66:3a:
55:f7:55:58:c4:d3:14:c5:04:b6:a0:64:70:4b:1d:f2:c2:25:
db:49:77:32:c7:0b:0e:b3:aa:ff:bc:ea:d0:60:0c:c4:77:a3:
c4:ca:de:6e:24:bd:3a:5b:b7:ad:fe:ad:bd:26:5f:9a:2b:61:
ac:3b:a2:a4:df:ea:c9:fb:70:b2:b6:cd:c3:a1:e7:d5:69:e3:
51:6c:61:54:41:63:68:d0:15:e6:74:44:95:31:cf:a8:01:2c:
f2:56:c7:62:a7:36:5f:2c:4b:82:d4:27:cf:5a:41:7e:61:4b:
ab:8f:f1:88:67:4e:28:91:90:5e:cd:0e:7e:7a:0b:89:db:d2:
97:4c:fe:62:f1:bc:26:62:4d:0f:76:79:25:06:6b:39:72:b5:
69:c8:2b:b6:d8:6f:e5:0a:23:ad:e4:88:6f:d9:a1:5d:eb:40:
3c:bd:73:a1:e3:28:4a:81:d8:0a:f0:01:0e:da:fe:f5:77:7f:
1f:08:bf:b7:6b:a1:e8:3b:fa:fd:d7:98:df:4b:64:7e:f2:65:
84:cd:4a:27:b8:b2:e0:aa:c2:c4:e6:f4:9f:35:c2:40:09:09:
fb:40:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:11 2025 by rpki-client