This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/5B92665E9ADD11ECA5401423C4F9AE02.roa
File: 5B92665E9ADD11ECA5401423C4F9AE02.roa (raw, json)
Hash identifier: JYEHiOJttrP5WL8sMKrkfMX5WXxXsR+m1Tu030pOdyA=
Subject key identifier: AE:9F:D8:0C:37:04:C6:81:1E:9B:45:B5:51:B8:DA:D3:E0:0A:27:81
Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Certificate serial: 0417
Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/5B92665E9ADD11ECA5401423C4F9AE02.roa
Signing time: Wed 07 Jan 2026 00:19:43 +0000
ROA not before: Wed 07 Jan 2026 00:19:43 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 135885
IP address blocks: 103.229.1.0/24 maxlen: 24
2001:df4:5800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Validity
Not Before: Jan 7 00:19:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=695da69f-5c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:dc:ea:bb:c1:9e:4c:41:6f:c9:47:0a:8c:
f7:f8:52:ad:ea:9c:35:e0:a2:92:87:8b:d1:24:68:
91:e2:75:70:01:b6:c4:2b:2b:d8:b2:66:8b:a5:b8:
fa:b7:1a:85:aa:82:22:6d:64:54:a7:d9:46:41:84:
1e:8e:c1:0a:fc:ba:2c:d5:0f:c3:67:ed:e5:cb:74:
da:fc:a2:c4:3d:54:06:0a:c0:26:a1:6e:f7:71:a7:
d4:42:c7:d9:40:2e:af:b7:8a:23:97:5b:8d:89:d9:
91:3b:7c:1a:f1:3b:1e:6b:d9:04:df:4e:0c:22:d4:
41:f0:b9:31:a9:9e:f4:30:27:ed:12:41:96:1f:1d:
62:5b:f0:d3:16:01:a4:a0:b9:ff:3c:a0:9c:3b:be:
f1:b4:bc:c6:8c:b6:1d:54:62:2a:3b:81:7e:03:d7:
3f:8a:1f:27:1e:1d:5b:ff:52:cb:1b:c4:e7:39:04:
d2:64:21:77:8f:17:f3:ff:33:dd:cf:ed:b0:92:35:
37:ba:ff:d6:c0:d9:1e:5e:73:50:6f:37:d3:71:b3:
a2:ce:33:9b:60:8f:9a:6d:c4:20:a4:8a:55:a6:8a:
9a:31:b5:63:ac:8d:02:d2:f1:a4:2a:61:c6:8c:f8:
6e:8c:1b:b3:a3:8f:0e:d4:4d:ba:fa:2f:c0:73:dd:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9F:D8:0C:37:04:C6:81:1E:9B:45:B5:51:B8:DA:D3:E0:0A:27:81
X509v3 Authority Key Identifier:
keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/5B92665E9ADD11ECA5401423C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.1.0/24
IPv6:
2001:df4:5800::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ef:29:57:ba:2d:79:b9:8d:f3:97:b1:b6:e8:1b:b9:d0:7f:
bb:02:5e:95:7f:5f:d0:e9:75:de:cd:13:cc:1a:3b:6f:b9:58:
7f:51:7b:04:a7:a5:3e:07:0a:bd:e8:17:7e:a3:ee:44:ac:b0:
ec:72:a7:91:c8:6d:d7:9a:25:90:ce:1c:11:e9:07:68:14:cb:
a1:62:af:40:e3:39:28:df:b0:03:18:e7:75:fc:e2:d9:aa:36:
e9:4a:e0:d0:df:f5:0d:2e:3f:9e:eb:2e:25:88:40:a8:ef:cc:
9b:6b:c8:5b:c4:ce:49:ee:d6:37:8a:2d:94:72:f3:21:74:6d:
64:97:62:94:a6:bd:57:9f:4a:0b:f4:94:8d:d0:61:3b:58:b3:
62:13:ef:27:62:e1:3a:e1:b8:f3:c4:a1:30:cf:db:b8:eb:93:
68:66:21:e0:fb:74:8c:ff:0f:43:be:9f:52:3e:ea:8f:d2:4c:
c6:3a:04:c4:6a:d3:f5:cf:f0:af:f1:7e:ee:05:7c:94:26:38:
05:19:d0:91:60:c1:07:f2:0a:73:23:4f:a7:f2:73:84:35:37:
f8:1a:34:af:e1:e9:d5:78:55:fb:62:dc:47:d5:a9:04:87:73:
f6:6d:7f:79:18:d6:f4:28:d1:13:ae:b1:32:14:d2:98:3a:24:
37:7e:75:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:15 2026 by rpki-client