This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/85A82A144C1311ECB5708257C4F9AE02.roa
File: 85A82A144C1311ECB5708257C4F9AE02.roa (raw, json)
Hash identifier: 5T7gEIhWhwouCBx6xyWpjH6ilTbTHBGf2T6GBkg2f4E=
Subject key identifier: 3E:D3:1E:CC:52:DD:5A:E2:08:D4:E5:DF:FF:23:2D:DC:62:44:33:2A
Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Certificate serial: 04E1
Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/85A82A144C1311ECB5708257C4F9AE02.roa
Signing time: Fri 16 Jan 2026 23:19:22 +0000
ROA not before: Fri 16 Jan 2026 23:19:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149026
IP address blocks: 103.176.218.0/23 maxlen: 24
2400:35e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1249 (0x4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F
Validity
Not Before: Jan 16 23:19:22 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=696ac77a-c432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:7a:c2:6b:7f:75:31:5c:c8:ca:b5:d6:fe:
5d:08:ea:d1:dc:0a:39:57:ea:9b:7b:d6:3c:eb:83:
b3:69:93:51:8f:98:0e:4b:fb:03:56:cf:ff:da:f3:
9f:5b:3b:51:b2:cc:22:a8:fa:33:bb:22:d2:12:4b:
3c:74:8f:69:06:fa:5c:29:90:ff:a8:c5:d4:c7:16:
77:37:dc:87:33:74:35:4e:81:39:66:15:08:f2:b9:
37:08:33:9a:f9:c3:80:79:a3:60:3c:32:56:3b:e4:
8e:7b:b3:e2:d8:75:06:40:90:97:2a:63:ef:35:25:
86:4a:79:c5:64:cb:17:ba:3d:e5:61:9d:9d:cd:97:
ce:41:e5:d8:bf:73:b3:7e:8a:8d:27:74:b5:c2:e1:
76:a9:c9:26:dd:7b:c1:cb:86:d5:d3:71:e7:bf:01:
f0:6c:2f:6d:e3:9d:fd:27:2a:7f:2b:2e:b3:b8:63:
43:7a:e1:6a:bd:75:76:b3:d1:3d:f8:37:b5:f2:5b:
c2:58:d7:b2:02:69:25:22:62:ad:57:cd:e9:59:21:
52:f3:f3:15:53:fa:b2:c7:24:ca:5f:77:db:c6:2c:
eb:d5:87:2a:e5:9f:63:99:5f:cb:be:c4:91:67:27:
9d:54:e4:c2:20:8d:aa:77:d0:8c:10:8c:01:13:9c:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:1E:CC:52:DD:5A:E2:08:D4:E5:DF:FF:23:2D:DC:62:44:33:2A
X509v3 Authority Key Identifier:
keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/85A82A144C1311ECB5708257C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.218.0/23
IPv6:
2400:35e0::/32
Signature Algorithm: sha256WithRSAEncryption
2c:6e:ac:3a:e4:fb:29:35:4a:d3:85:2d:51:ab:ac:2e:80:69:
4a:ca:e1:2d:9a:6f:dc:cb:68:ad:ad:43:aa:47:f0:b5:25:42:
f4:a7:09:8b:72:5a:86:c8:6a:c0:56:69:07:8f:c6:d2:36:b6:
31:f8:23:3b:db:6d:b0:6f:36:a5:2a:c6:f9:98:e4:28:1d:57:
3a:e5:b4:18:15:0f:34:cc:08:19:6b:21:f3:e6:c0:8b:3a:f7:
a7:1a:7e:45:2c:45:59:c1:e3:af:b0:e2:25:53:6a:0d:9c:d8:
ae:66:40:ef:f3:ef:29:c9:7e:39:50:cb:cd:1f:b7:d4:5d:17:
e3:84:6e:e2:90:46:6a:99:6b:4d:4a:3d:ab:a0:c0:b9:5a:e1:
0c:ec:83:9e:0f:32:4c:cc:3c:14:61:b5:2c:12:2a:63:01:c1:
3d:8b:1a:cd:51:9c:49:63:7e:8e:3a:82:17:bb:46:d8:3c:02:
35:3b:f7:3a:80:f7:08:b6:02:2c:52:d0:d5:dd:0e:92:a0:41:
93:61:04:6f:3b:10:12:fd:3d:93:b1:f6:19:48:37:66:09:fb:
c4:fa:00:17:e0:f4:cf:11:c3:20:48:ee:24:50:d6:69:4b:7f:
54:1f:27:a2:af:fd:e6:06:8b:12:31:46:17:55:5f:60:66:62:
82:98:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:53:38 2026 by rpki-client