This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/029310329B1911EFA0BD6470C4F9AE02.roa
File: 029310329B1911EFA0BD6470C4F9AE02.roa (raw, json)
Hash identifier: ipUtH6de1n3QDXNmS4idd62IMEQfE9S8Kl6BBzpD9nQ=
Subject key identifier: 5E:03:6A:15:2B:6C:DB:6B:63:91:EB:09:13:5E:D3:1D:5D:EF:65:C2
Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Certificate serial: 60
Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/029310329B1911EFA0BD6470C4F9AE02.roa
Signing time: Tue 01 Apr 2025 07:02:25 +0000
ROA not before: Tue 01 Apr 2025 07:02:25 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9303
IP address blocks: 103.209.224.0/22 maxlen: 22
203.18.59.0/24 maxlen: 24
203.25.187.0/24 maxlen: 24
203.189.24.0/24 maxlen: 24
203.190.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Validity
Not Before: Apr 1 07:02:25 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67eb8f81-55d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:92:b6:7f:47:0a:6a:ca:52:18:09:1b:8c:
ee:9a:ea:4b:48:56:37:a2:3b:53:6c:86:b7:18:49:
82:55:35:ce:ca:f0:49:37:21:a7:d6:7b:62:8d:df:
09:a8:89:e3:8d:14:89:a4:0f:6a:3b:f4:9d:a4:13:
14:a2:98:91:f4:26:6f:0e:d2:f9:4a:af:16:69:f7:
22:b6:bf:fe:ba:2f:f3:f6:21:93:8f:9e:e8:b0:61:
34:92:f3:e8:52:3c:fa:6a:2a:54:58:b2:63:7a:85:
01:96:94:6e:17:49:e3:a1:e7:fd:28:f7:b4:3c:b3:
ba:09:f9:b6:af:ad:e6:ae:5d:9a:3d:c7:2a:92:ed:
d0:56:14:ae:cd:9f:d0:91:40:c4:5d:8a:3f:60:f2:
a6:6a:08:d4:34:94:3a:c2:8b:77:c2:d0:7a:68:5b:
8f:e1:8c:39:39:37:c0:f5:9a:c2:9a:3c:a9:9d:3e:
f3:91:9a:37:9c:70:4c:59:42:9e:69:de:e6:9c:e8:
c2:4d:90:ed:5a:08:48:2a:a8:d5:ae:9f:e7:40:ec:
81:d2:0f:d8:40:f3:b3:30:40:f8:58:18:b8:03:2f:
0c:89:ee:cc:18:23:ad:39:c7:20:16:cc:9f:2b:3f:
be:25:f7:9c:80:67:25:dd:b0:c6:06:e0:e0:0c:59:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:03:6A:15:2B:6C:DB:6B:63:91:EB:09:13:5E:D3:1D:5D:EF:65:C2
X509v3 Authority Key Identifier:
keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/029310329B1911EFA0BD6470C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.224.0/22
203.18.59.0/24
203.25.187.0/24
203.189.24.0/24
203.190.217.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:9f:be:75:98:58:93:2d:6f:8a:44:14:4f:6a:18:9a:fd:ca:
98:4c:c7:a3:4b:f7:89:1f:cb:65:00:e8:73:64:a3:37:57:b8:
d0:65:28:8e:fa:05:2c:b1:bb:e8:82:dc:50:29:5e:de:64:aa:
2b:6f:85:4e:83:d1:39:12:65:5f:a0:b5:36:83:11:db:2f:28:
7c:d8:b5:94:d0:ec:da:76:d3:95:fc:e3:c9:e9:8f:c6:51:30:
fe:1e:b6:d2:7e:46:51:f9:38:9f:03:8c:61:60:bc:e0:02:e6:
62:00:ab:4b:2d:48:29:f3:56:c9:cb:72:a8:e2:9f:24:0a:82:
3a:26:c4:23:20:da:47:bc:59:2a:ce:5c:91:66:2f:ba:78:f1:
47:a4:4f:1a:af:34:e2:ac:af:e5:8e:21:e7:b0:94:88:dc:3d:
74:d6:a4:24:b9:0a:73:17:ad:f2:6c:8a:cf:38:59:f5:b4:a2:
10:ad:ac:ce:44:9f:01:d3:d7:9e:61:4b:02:a9:df:95:a7:35:
4c:62:97:b7:e7:31:1c:3a:f6:3f:18:39:c3:28:f3:67:af:f1:
8e:a3:de:76:1f:01:04:4d:2a:5f:79:1f:97:8f:1e:e8:39:28:
27:e5:a2:0b:91:5d:7f:29:7a:4d:34:48:ce:bb:04:d3:1c:c3:
43:1b:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:52 2025 by rpki-client