This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/93CBDF448EE111EC9D298C83C4F9AE02.roa
File: 93CBDF448EE111EC9D298C83C4F9AE02.roa (raw, json)
Hash identifier: t4RKrujkT/4i2xBpLkewaVM7tHYA1/rkxo1ttRbmyIU=
Subject key identifier: 81:22:23:5E:C0:0A:B8:2D:0A:F6:0F:63:4C:19:AA:C1:A7:E1:D1:E6
Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Certificate serial: 0428
Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/93CBDF448EE111EC9D298C83C4F9AE02.roa
Signing time: Tue 02 Dec 2025 23:28:36 +0000
ROA not before: Tue 02 Dec 2025 23:28:36 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.78.50.0/24 maxlen: 24
103.151.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064 (0x428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Validity
Not Before: Dec 2 23:28:36 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692f7624-b373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:86:d5:03:d7:6d:69:94:0d:a3:87:2a:07:
72:95:45:24:bf:74:58:23:36:3b:2c:23:10:4e:bc:
2c:c1:fa:98:b0:fb:24:b0:2c:d8:1a:e3:2b:50:d7:
af:1a:b6:4d:18:8b:e6:eb:3c:f2:75:d3:cc:83:c9:
6c:65:fd:d7:63:1b:45:99:a7:98:1f:56:21:ea:c2:
2f:01:2c:52:84:c5:2c:36:b8:df:ce:14:27:5a:54:
d0:2f:5c:d1:dd:2e:26:8a:5d:74:6b:a9:e6:47:2f:
cb:2e:ad:9d:80:00:db:6f:b8:fe:9a:ac:55:bf:9c:
f1:0c:c8:8d:84:2b:c5:d9:69:19:ad:b2:83:9f:f0:
64:0a:b6:a1:57:26:0b:d9:ec:9d:94:07:41:ae:90:
d5:01:65:28:13:d6:bf:f5:bc:b1:1e:f2:22:8c:09:
63:40:e1:e2:98:39:d3:54:2a:6a:a9:89:d5:40:5a:
00:bd:12:55:17:1b:9d:25:83:94:f6:e1:0d:96:4f:
87:b3:da:ec:54:35:5d:11:d7:fe:48:fa:47:0c:20:
e5:d4:db:fb:d2:59:d8:c6:d4:cc:4c:3b:6c:8e:7c:
6c:8d:6c:ae:8d:a5:0b:d6:65:f0:62:19:c4:f8:39:
3f:52:dd:03:9a:d0:ed:66:e1:f4:76:08:9f:df:a1:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:22:23:5E:C0:0A:B8:2D:0A:F6:0F:63:4C:19:AA:C1:A7:E1:D1:E6
X509v3 Authority Key Identifier:
keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/93CBDF448EE111EC9D298C83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.50.0/24
103.151.39.0/24
Signature Algorithm: sha256WithRSAEncryption
42:68:69:fa:a2:c7:8e:30:27:e7:71:1f:c5:09:05:0e:46:d6:
5a:b1:54:fd:5a:58:28:07:6b:5f:c9:01:9d:60:96:4f:09:bd:
0f:46:ee:74:e5:41:b8:58:40:a2:fa:32:62:06:d3:f0:03:44:
e0:8e:db:8f:23:8f:1b:81:1a:2b:c5:98:76:3c:9f:3f:8a:ab:
ab:1c:07:9c:fa:71:22:4a:be:c9:53:91:38:ce:3d:d5:07:94:
d4:30:60:35:a3:e8:f3:0d:3e:9a:ab:9a:3e:05:be:cb:1d:07:
f4:f5:e0:d1:c7:17:fe:0a:2b:1e:7a:6f:ce:0b:ef:68:43:ee:
04:ff:03:c3:9e:da:b6:04:82:97:63:67:38:53:d5:9c:f5:ed:
e3:49:13:a3:70:aa:b5:cf:89:b8:44:d4:a1:1f:17:86:17:24:
84:e4:b5:09:59:80:7c:d7:a1:53:8c:b1:fd:da:0a:e1:4b:0d:
65:ee:68:fd:3e:5c:69:11:6f:8c:03:4d:dd:80:e3:37:15:17:
64:01:2c:d7:bc:0b:a9:a1:a9:4f:61:d8:8c:89:15:e9:4c:ca:
65:39:a9:11:78:34:24:84:ee:54:d9:16:77:ab:1c:00:d7:be:
de:0b:6e:39:e2:49:91:43:ed:bd:5e:81:f1:24:04:53:eb:f4:
4a:1c:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:47:00 2025 by rpki-client