This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/9A2B0DE4593F11EA9F9FA238C4F9AE02.roa
File: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (raw, json)
Hash identifier: 1KOBUlBTgv8L/Zsa+ioCcjpPdWdcrbUzvA+4g3ZBS+I=
Subject key identifier: 99:77:D6:F1:75:2B:A3:63:08:B8:55:E5:90:09:6A:DA:FD:20:EB:97
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 354F
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/9A2B0DE4593F11EA9F9FA238C4F9AE02.roa
Signing time: Wed 14 Jan 2026 15:10:54 +0000
ROA not before: Wed 14 Jan 2026 15:10:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137996
IP address blocks: 103.247.228.0/24 maxlen: 24
103.247.229.0/24 maxlen: 24
103.247.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13647 (0x354f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Jan 14 15:10:54 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6967b1fe-8b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:81:d8:5f:57:3d:76:d5:d7:ad:46:10:69:
66:86:54:0e:4b:7f:95:59:56:b8:7c:80:83:23:ac:
ef:9a:58:b8:9a:58:18:17:1d:e5:d7:46:42:69:90:
bf:b1:e5:cb:62:fc:c0:0e:c1:7a:de:00:4f:62:a3:
c4:75:d2:5f:03:40:30:36:02:a4:50:a5:ab:0f:31:
d8:c9:23:72:b9:e4:12:92:16:24:a0:88:07:8b:fb:
d3:29:d0:bd:45:79:57:35:7a:81:a6:a5:b1:ac:30:
3e:68:c3:ef:5c:6c:b0:07:bf:ca:52:bd:55:ef:18:
52:ce:23:d5:3d:78:47:94:6c:91:e9:0b:9c:7b:07:
b1:4b:16:0e:48:4c:4e:87:96:bf:d5:4d:e4:d7:da:
7a:e7:2c:db:ab:7d:3a:d1:a5:21:35:02:1d:54:82:
75:8f:05:db:f0:dd:4c:06:33:43:4f:b2:f2:14:da:
8d:99:7f:11:63:29:71:a0:ae:64:c1:54:9e:86:19:
0a:f9:68:86:ea:3b:7b:b9:78:ac:cd:43:60:aa:ee:
10:8f:bd:4e:3d:e7:5f:9a:74:e3:4e:a2:3c:b3:41:
80:07:08:1b:3f:a3:a0:2e:38:cf:2b:6c:9a:0b:67:
c6:6a:22:92:a6:d3:ad:80:2b:26:39:f1:62:13:90:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:77:D6:F1:75:2B:A3:63:08:B8:55:E5:90:09:6A:DA:FD:20:EB:97
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/9A2B0DE4593F11EA9F9FA238C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.228.0-103.247.230.255
Signature Algorithm: sha256WithRSAEncryption
8d:dd:3d:4a:61:56:5a:c6:69:00:58:4f:c8:cb:29:ca:dc:ff:
1b:00:31:1f:e6:ba:61:ef:54:52:bb:c5:ba:e1:bd:4e:e4:37:
3f:5d:1d:ea:56:08:16:73:df:1b:b8:81:fd:01:3e:a5:04:6d:
19:10:4a:8c:83:a2:dc:c4:75:71:7f:df:8c:c7:d1:66:6a:54:
fe:71:91:cf:f5:ca:05:90:21:73:c5:f2:12:3f:7c:33:77:28:
fc:f6:2c:c2:89:74:e2:39:3b:e9:2c:db:0f:53:22:a3:2d:2f:
90:83:40:6d:a2:cf:d1:3a:c6:89:52:ab:8a:b1:bd:1b:3e:a4:
73:37:47:1d:af:f6:75:d7:c6:fd:1b:d6:d7:21:2b:0d:72:ff:
65:4e:d1:15:1b:8f:5a:4e:12:04:8e:e7:81:68:d9:de:16:52:
7c:7e:d4:4d:2c:59:6c:d2:fa:33:cd:b5:5b:99:7d:34:ce:af:
08:a7:cf:08:71:6e:1f:a3:82:28:3b:3d:7c:d0:e6:29:cc:bb:
8a:ee:92:b8:2e:d2:18:26:37:ca:68:f2:db:3f:09:43:15:01:
bb:d6:08:29:4f:93:b0:2b:f5:f2:bb:6d:7e:53:93:67:ae:18:
c1:3d:33:f1:4c:de:f6:5a:55:7f:71:61:33:6c:e6:b9:58:ea:
f8:24:29:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:15:43 2026 by rpki-client