This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa
File: 0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa (raw, json)
Hash identifier: WtXkOiy3N9c/pecAaEEFIx6uM4xN6m5PmoAbpJv4Elo=
Subject key identifier: 22:04:1C:40:5A:1E:8D:53:59:02:3E:95:B4:D9:D8:4D:C1:24:C4:B2
Certificate issuer: /CN=A91A3BB1/serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
Certificate serial: 3536
Authority key identifier: E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa
Signing time: Tue 30 Dec 2025 15:11:53 +0000
ROA not before: Tue 30 Dec 2025 15:11:53 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38830
IP address blocks: 103.10.8.0/24 maxlen: 24
203.12.235.0/24 maxlen: 24
2001:df0:218::/48 maxlen: 48
2001:df7:e800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl
rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13622 (0x3536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3BB1, serialNumber=E83A59B881CE1E5735D1ADDCD8BAE05E53B853D0
Validity
Not Before: Dec 30 15:11:53 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6953ebb9-015d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:1f:15:cb:d7:b5:2f:6e:b5:bf:b3:c9:8a:
a3:55:8a:bb:13:a7:e1:cf:d6:5d:23:fe:c3:11:71:
30:ef:82:bc:e2:87:c9:ba:52:52:c1:c1:ab:4a:81:
c7:9b:39:4f:3d:a9:03:cf:3d:72:9d:5f:c4:12:5c:
3b:c1:f1:8e:43:2c:d5:72:bf:fb:0e:3a:bf:49:c1:
1f:80:b7:17:9b:7c:12:66:e1:4d:2b:f5:ef:e2:0a:
22:54:04:f7:bd:c5:41:a0:e8:40:4b:53:c4:07:52:
74:5b:07:9f:4b:ef:a2:fd:94:d3:ff:7b:5c:38:79:
79:2d:d2:69:5d:2b:dd:a4:f3:99:24:ba:43:6a:1d:
cc:08:e5:8e:d6:16:d4:80:8d:95:1c:a5:34:6e:b4:
f0:73:b1:1d:3b:a5:0b:e9:c3:b9:fc:6b:51:2a:0e:
d9:5f:e2:bb:69:a8:85:66:1e:a8:04:8f:c5:03:5d:
ed:7c:55:03:e7:14:7b:6f:96:f6:3a:14:19:d8:f6:
ad:59:88:f1:2b:91:a2:62:e6:04:20:4f:57:5a:fc:
f9:c1:76:04:bb:bb:2a:39:2c:57:f8:81:98:36:74:
6d:82:af:a3:42:53:cc:d3:c4:6d:f4:68:28:12:fd:
83:d5:86:ba:df:34:80:cb:be:0b:22:49:d3:7e:44:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:04:1C:40:5A:1E:8D:53:59:02:3E:95:B4:D9:D8:4D:C1:24:C4:B2
X509v3 Authority Key Identifier:
keyid:E8:3A:59:B8:81:CE:1E:57:35:D1:AD:DC:D8:BA:E0:5E:53:B8:53:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/6DpZuIHOHlc10a3c2LrgXlO4U9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6DpZuIHOHlc10a3c2LrgXlO4U9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3BB1/EA1B22E01D9611E29806C57F08B02CD2/0B3FC58CB0DA11E5A8C8BF13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.8.0/24
203.12.235.0/24
IPv6:
2001:df0:218::/48
2001:df7:e800::/48
Signature Algorithm: sha256WithRSAEncryption
2b:30:1a:b7:fe:c9:bf:25:01:2a:22:c5:f9:1d:f5:97:11:74:
6d:23:ea:6b:bf:4d:c9:57:e5:aa:33:9d:40:0f:03:96:c4:09:
1f:38:a6:f2:7e:a3:5e:f9:b1:41:e4:0c:90:32:42:6f:a3:7e:
d9:cf:2d:25:45:67:1b:60:95:b9:91:e7:3d:42:fb:cf:30:75:
d9:f2:3d:8c:b9:11:66:74:b8:3e:99:d1:6a:a0:e1:0a:be:fa:
13:28:df:c2:87:c5:d0:28:61:39:5b:87:67:86:39:4e:8a:06:
61:0c:1b:b3:b2:f6:1d:e7:dc:88:82:08:3e:f7:75:91:24:ee:
68:5f:5f:20:fc:98:1f:c4:5f:7c:d1:da:70:93:83:4c:6d:ac:
46:b2:d2:88:5f:4c:35:01:5e:75:40:d7:83:77:12:e4:ed:fc:
50:2f:61:d6:89:5e:05:b0:7a:cb:46:91:db:8a:bd:ff:83:49:
73:38:2e:89:de:26:6b:0d:a4:77:15:f0:ad:b6:3c:b1:18:2a:
4e:f6:d7:b2:c9:67:b4:4e:13:e2:07:d3:f0:af:8a:9f:4e:a4:
c0:2f:dc:1a:59:65:e6:39:32:3b:c2:86:30:0c:b6:aa:22:bc:
f8:14:0a:b7:62:97:50:76:a0:9d:9e:34:eb:9f:7e:69:65:58:
1a:40:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:18:43 2026 by rpki-client