This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F3B9AEC4740A11F09DAF2A29C4F9AE02.roa
File: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (raw, json)
Hash identifier: KHyJIG6frQiFoPJvg1lo79fhG8UBhK1qYbLoHf3tBMY=
Subject key identifier: 7E:2E:18:10:59:B3:CB:C3:44:F5:65:8E:83:A1:65:51:04:59:9C:8C
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0C85
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F3B9AEC4740A11F09DAF2A29C4F9AE02.roa
Signing time: Fri 24 Oct 2025 00:51:37 +0000
ROA not before: Fri 24 Oct 2025 00:51:37 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139076
IP address blocks: 43.246.199.0/24 maxlen: 24
103.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3205 (0xc85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Oct 24 00:51:37 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68facd99-c687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:bb:02:22:56:ed:9b:23:b5:e8:09:3f:46:
a2:7d:f0:7f:72:41:9f:76:a3:9d:71:a1:ff:ea:1e:
2f:75:90:45:b6:e6:71:88:4d:ee:41:5a:de:5a:9c:
e6:b4:97:a9:96:3c:32:1d:4a:76:a1:89:f5:2b:72:
32:89:25:f6:95:e3:23:b5:5e:81:f7:3b:8c:1d:2a:
6a:d2:95:fe:c4:c4:20:07:43:cd:d8:a0:f2:91:bc:
bf:1a:9f:6e:c3:8c:f8:d6:5d:25:ec:57:89:1b:0c:
a5:5e:e2:56:74:06:4d:31:06:12:6b:f9:47:4d:3f:
b7:49:70:48:83:bf:94:d0:1d:79:17:80:80:c9:de:
61:85:ea:54:30:08:f7:04:66:e8:29:82:34:94:94:
e4:21:53:40:af:60:bd:52:00:17:89:5d:82:73:1b:
21:98:7e:af:e4:2f:e5:98:8a:ce:76:25:46:9b:59:
23:1c:46:e6:c0:c4:93:e7:38:2c:74:9a:71:02:5c:
de:f2:04:9c:50:fe:0f:8f:6e:1f:c7:0c:6c:4e:af:
74:82:71:84:23:1b:8d:3e:33:68:7e:bf:a7:41:5a:
ef:7c:8d:5c:72:d6:1d:87:ed:24:23:9f:30:b1:37:
3e:44:cc:7e:7f:66:7b:8d:cd:13:2c:ee:da:68:6f:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2E:18:10:59:B3:CB:C3:44:F5:65:8E:83:A1:65:51:04:59:9C:8C
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/F3B9AEC4740A11F09DAF2A29C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.199.0/24
103.244.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e1:f0:dd:a7:9f:58:6c:ed:cf:95:db:c0:a1:ac:46:6e:9c:
16:65:aa:10:74:cf:8b:00:bc:47:7b:e4:02:a5:d8:f3:e1:bc:
db:2e:4c:82:8e:7c:1f:d1:45:1f:53:49:dd:10:0e:68:89:a3:
72:6b:29:7c:b6:da:90:a5:56:34:f7:cd:17:ec:73:1d:0b:56:
2c:d0:a0:d2:e3:6d:ca:87:7b:9f:a5:b0:ee:00:66:8b:41:5f:
5b:69:51:8a:b5:2a:38:a6:de:3f:0b:08:15:12:c8:15:92:12:
32:11:09:a3:a9:6d:ac:63:f9:27:8e:21:70:c9:11:ed:61:02:
31:7a:f4:4f:a9:16:a5:00:18:fe:3e:34:0c:13:9c:ad:58:8b:
74:48:f4:c7:c0:d8:1b:e8:00:94:5e:d2:b2:e6:6f:b3:d4:89:
33:27:c1:8a:52:ab:07:6a:9f:fb:ef:4d:2d:c0:1a:66:be:5d:
06:46:75:77:26:94:12:4d:a6:32:eb:0e:2a:92:65:6e:68:b3:
b3:1a:3a:5c:84:56:b3:b8:7d:1d:1f:21:c9:21:85:fa:58:9d:
3f:d5:cb:22:24:31:90:f2:4b:ad:fd:f8:f8:95:fe:46:16:5e:
76:99:c2:7d:31:57:4f:05:55:e7:52:1a:16:98:c5:69:e6:e4:
16:61:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:13:21 2025 by rpki-client