This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa
File: 07B85890C29D11EBBAF29939C4F9AE02.roa (raw, json)
Hash identifier: ZbqSCThADHHYWGKzVNAbVRxCH9aXKYjL/LVme0xsR9M=
Subject key identifier: 03:53:8A:21:E6:A1:98:24:C2:02:C4:D7:E5:FA:FC:FC:59:D0:A3:6A
Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Certificate serial: 0D16
Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa
Signing time: Tue 30 Dec 2025 18:15:12 +0000
ROA not before: Tue 30 Dec 2025 18:15:12 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138212
IP address blocks: 103.122.136.0/22 maxlen: 24
2403:9040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl
rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3350 (0xd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E
Validity
Not Before: Dec 30 18:15:12 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=695416b0-667d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:43:38:3f:9a:6d:a5:01:ad:3f:83:62:06:07:
a4:46:6f:c8:d0:f6:69:cd:37:03:29:33:24:c6:14:
ad:92:55:93:4a:6b:5f:43:eb:16:a2:03:4a:f9:fc:
f4:f9:8c:b8:e8:f7:97:43:18:82:62:cf:ac:33:09:
66:1d:c5:51:e6:8b:67:c2:7a:3a:08:c9:c7:2a:04:
ff:e8:cb:a2:26:93:84:18:55:64:0c:a2:7b:d2:a1:
9d:83:89:af:ef:a6:c5:94:19:d9:ed:ac:b9:5f:04:
76:1d:12:98:97:70:68:6b:d7:cb:f8:3e:3a:05:12:
3a:0f:7c:8b:6b:fa:84:17:72:9f:8f:d6:9d:f6:5e:
de:ee:4a:23:27:32:e4:6a:31:24:be:d5:9a:fd:66:
4f:92:ba:a0:0d:07:5a:71:72:62:e6:66:da:00:c3:
0d:0c:49:8b:08:b6:d0:b7:ff:8a:8c:d3:13:e7:7a:
4c:7b:18:bc:8d:ba:2a:63:1d:06:76:34:c4:4a:3f:
17:bb:89:bb:ae:db:bd:d6:86:03:04:42:b8:4f:5f:
41:37:27:e1:b7:2d:26:2f:b8:7b:3a:31:cc:74:50:
2d:fa:e2:8f:6d:22:1b:dd:8d:d0:67:6b:3d:0d:3c:
19:66:d4:7f:20:51:38:6a:a5:8f:ea:7c:55:1a:d8:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:53:8A:21:E6:A1:98:24:C2:02:C4:D7:E5:FA:FC:FC:59:D0:A3:6A
X509v3 Authority Key Identifier:
keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/07B85890C29D11EBBAF29939C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.136.0/22
IPv6:
2403:9040::/32
Signature Algorithm: sha256WithRSAEncryption
2f:85:6f:85:3c:21:e0:6c:3b:e7:a0:72:3a:3d:86:8d:ce:33:
f3:df:20:33:64:33:58:64:05:19:92:3e:51:24:e8:87:e6:fb:
04:09:5b:09:73:08:46:bd:03:62:70:74:ee:e4:ec:18:24:1b:
43:ce:9b:0b:ff:5c:37:d4:c6:94:95:c2:e1:55:60:31:4a:ba:
ba:0e:ee:ed:9a:00:9b:da:57:e1:6c:01:28:4f:6e:6a:42:c8:
a9:f6:34:99:5d:1f:2d:8c:90:11:ee:29:2e:d4:4f:c4:20:17:
cc:29:3a:7f:bc:24:37:6f:3a:3f:2a:1c:e4:dd:36:47:f8:95:
85:ed:17:c5:39:b3:3a:3c:05:4a:e8:de:3d:66:7f:40:3c:e5:
12:36:7a:56:ee:c6:18:99:f1:50:7d:85:12:85:df:93:6b:23:
a6:29:d7:95:7b:fb:b6:d9:63:5c:14:df:3f:2c:92:4e:9b:f4:
cb:57:f5:d3:d0:61:ba:90:e9:6d:79:67:82:75:49:f4:77:bf:
9f:e3:3a:e7:a5:cf:7b:0c:b8:97:b0:04:b8:0b:f9:7c:98:9e:
21:f8:87:8f:b5:39:a9:09:e4:10:a0:ae:99:72:4f:34:92:56:
fe:6c:ae:3f:8f:c8:f2:97:d4:63:6c:13:84:14:47:59:f6:06:
45:c6:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:25:08 2026 by rpki-client