This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/F0223A56C8F711EFB2542D5FC4F9AE02.roa
File: F0223A56C8F711EFB2542D5FC4F9AE02.roa (raw, json)
Hash identifier: 56+jMhrwrBRvzV5zRD4LOd1TD+rLYKpQCMVw5apHuys=
Subject key identifier: 44:8F:B5:B6:1B:A0:19:00:AA:E6:A7:EF:6B:06:39:A8:F9:AD:A4:F2
Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Certificate serial: 042B
Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/F0223A56C8F711EFB2542D5FC4F9AE02.roa
Signing time: Mon 17 Nov 2025 09:14:21 +0000
ROA not before: Mon 17 Nov 2025 09:14:21 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 149058
IP address blocks: 103.138.146.0/24 maxlen: 24
103.138.147.0/24 maxlen: 24
2407:3b40::/32 maxlen: 32
2407:3b40::/36 maxlen: 36
2407:3b40:1000::/36 maxlen: 36
2407:3b40:1000::/48 maxlen: 48
2407:3b40:1001::/48 maxlen: 48
2407:3b40:2000::/36 maxlen: 36
2407:3b40:3000::/36 maxlen: 36
2407:3b40:4000::/36 maxlen: 36
2407:3b40:5000::/36 maxlen: 36
2407:3b40:6000::/36 maxlen: 36
2407:3b40:7000::/36 maxlen: 36
2407:3b40:9000::/36 maxlen: 36
2407:3b40:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Validity
Not Before: Nov 17 09:14:21 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=691ae76d-a3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:75:20:81:54:79:01:4a:47:5b:f7:29:59:8f:
ec:55:4c:ae:42:84:d6:1b:91:68:a0:f2:94:b4:47:
1f:62:2c:ba:49:48:cb:c2:77:40:8b:8a:84:5c:d3:
fc:c0:dc:8e:55:44:ac:93:eb:a6:a8:a4:14:b4:b8:
88:8d:25:e5:5d:2b:2e:8a:01:c2:dd:3b:c6:01:04:
39:ec:d6:29:86:10:0e:2c:f0:24:db:ef:e3:83:d0:
2a:f7:c0:10:a4:0b:26:79:d2:fb:c0:44:66:34:26:
c5:4a:74:f1:ff:c4:3b:27:4d:26:69:c9:e6:e5:88:
86:b5:ee:b6:6f:d0:04:6a:26:b3:f3:90:c8:bc:2f:
18:73:da:9e:d1:b0:7b:34:2b:62:fc:fc:07:c5:93:
a1:f1:ea:1a:96:65:72:f1:10:30:49:72:47:92:c6:
80:10:fe:ad:a6:09:f3:b4:70:f3:10:07:02:a3:49:
43:0d:b7:82:bf:48:5a:13:b2:05:bd:e2:e4:33:0f:
bf:42:63:10:22:b2:cb:bf:05:b8:03:82:a9:16:7c:
fc:c8:62:1e:02:fc:64:89:92:a3:7a:34:eb:5f:ed:
a0:8e:93:0b:08:7a:b2:19:83:2c:a2:ec:af:63:57:
0b:75:54:30:51:33:8f:c6:bb:9f:b6:68:ab:6f:5e:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8F:B5:B6:1B:A0:19:00:AA:E6:A7:EF:6B:06:39:A8:F9:AD:A4:F2
X509v3 Authority Key Identifier:
keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/F0223A56C8F711EFB2542D5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.146.0/23
IPv6:
2407:3b40::/32
Signature Algorithm: sha256WithRSAEncryption
53:9e:35:50:49:6d:50:ce:cf:fb:ab:5a:28:30:50:e4:a0:de:
a2:71:d0:6f:ae:77:10:06:4b:30:08:41:21:5c:1d:d5:e6:30:
59:20:cb:52:3b:10:26:bb:7b:00:52:4a:80:41:42:11:16:53:
40:08:de:e1:f8:15:35:22:72:ca:e8:72:65:94:fd:b3:71:51:
45:a3:1b:9a:e4:8a:32:e3:8b:ff:23:a7:b2:4d:c9:83:9f:b6:
58:cb:9d:e3:cd:7c:b5:b5:e5:e0:9a:83:f1:6d:aa:ec:f6:4f:
a7:e0:2c:21:5c:10:d0:b2:41:75:bf:f5:88:19:00:3b:14:72:
e5:78:78:14:cc:0e:1e:67:d2:70:c2:9f:51:d9:ce:38:7b:b6:
63:bd:bb:a6:8d:fa:c1:ee:73:45:81:13:70:9a:f3:e6:5f:e2:
11:9c:ef:a8:63:00:25:8e:49:81:8b:6f:3a:e4:9b:7b:25:a1:
b7:48:f9:80:01:91:1f:f5:c3:27:71:31:99:26:75:e5:6a:0f:
af:95:83:cd:23:64:a0:35:88:b5:1e:37:90:1d:cb:89:7a:fb:
0c:ae:df:5e:48:f1:e5:3a:94:af:94:c1:8e:27:75:bc:ec:a3:
1e:ce:d1:c5:5d:82:05:18:bf:fe:20:57:52:79:22:34:6f:c3:
cd:28:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:04:58 2025 by rpki-client