This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
File: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (raw, json)
Hash identifier: u0SIiLxxmi81N8BSICKYYu8IJ84iSOv3GERY4hpV5jk=
Subject key identifier: 27:D6:88:FC:86:69:4C:DA:9C:C8:81:A9:8D:E6:28:A3:D5:8D:72:81
Certificate issuer: /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial: 34FD
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
Signing time: Thu 08 Jan 2026 15:11:16 +0000
ROA not before: Thu 08 Jan 2026 15:11:16 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 56258
IP address blocks: 103.28.93.0/24 maxlen: 24
103.28.94.0/24 maxlen: 24
103.28.95.0/24 maxlen: 24
103.28.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13565 (0x34fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Validity
Not Before: Jan 8 15:11:16 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=695fc914-690a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:00:e0:cb:08:f5:70:7b:e9:c5:2a:28:7c:b3:
fb:49:c9:8e:70:db:e4:2a:b4:d3:b7:42:14:a0:23:
5d:33:13:5e:c6:4e:ec:30:47:ab:d8:ef:8b:ca:8d:
42:e1:81:9c:a4:d5:de:d0:01:b8:80:55:46:62:80:
9a:18:da:19:ee:fc:3e:30:7d:57:c3:5f:7d:b9:62:
de:2b:e4:54:00:76:b2:e7:39:5d:0f:48:83:c3:2d:
19:f6:dc:b9:04:04:30:3f:7d:7b:be:ca:6a:42:94:
98:df:4f:23:d6:a7:a2:21:f3:05:d4:ce:f3:1c:3d:
ad:a4:ac:1d:35:e8:96:97:b7:d5:96:e6:86:a4:2b:
e8:45:9b:e0:b1:49:22:e9:39:a8:35:3a:88:f0:48:
c1:39:77:d3:6d:38:2d:72:b3:b7:25:2a:77:ff:e6:
dc:01:0a:ef:9d:b8:ef:4a:86:01:09:91:c9:f4:3b:
b0:6d:3f:c2:a3:16:98:b6:81:29:ca:10:09:af:d9:
dd:4b:49:ff:01:55:28:d9:85:93:73:8e:c6:5d:ff:
59:82:64:0f:e1:97:ce:3b:60:5f:9a:26:c0:f7:f2:
1c:80:c7:83:1d:b6:d9:b9:f1:66:57:d1:39:8d:b1:
ad:40:5e:68:5b:b2:49:75:9c:0f:60:fb:fb:9b:ca:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:88:FC:86:69:4C:DA:9C:C8:81:A9:8D:E6:28:A3:D5:8D:72:81
X509v3 Authority Key Identifier:
keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.93.0-103.28.95.255
103.28.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1c:9d:9c:9d:9a:6c:4e:ea:81:7e:31:57:74:c9:62:b4:9f:
88:1d:0c:1f:26:ea:6a:e7:2b:ee:b0:32:8e:47:af:97:4e:48:
05:44:49:96:6f:d3:56:9b:9f:c8:98:7c:31:3e:11:0f:8d:42:
3a:91:c2:c2:ed:d6:ec:0d:cd:bf:14:69:2e:30:74:33:4f:23:
2b:f3:60:7a:e9:72:1a:7b:11:d6:47:62:89:3e:71:17:76:2f:
3c:f3:ce:48:6e:f9:7e:73:f8:05:37:85:46:de:72:14:b6:2e:
2c:ab:78:1e:96:01:2b:16:81:16:e8:8c:08:80:cd:10:18:69:
35:e0:30:a6:60:76:aa:f2:1c:62:a5:e7:d1:bc:25:9d:d9:99:
23:da:17:d6:bb:1a:42:69:87:81:b3:81:4c:eb:56:2f:7c:60:
25:48:13:65:9c:b3:20:fd:2e:b7:ec:56:35:37:5d:2b:09:2e:
67:43:d8:1b:c9:dc:21:e6:e8:c5:f6:da:11:df:18:6f:4b:b7:
57:9e:c3:7f:88:28:8e:19:8f:57:eb:58:a7:79:2e:89:fe:c5:
17:4c:72:68:28:4d:c1:70:4d:53:8d:58:ed:03:49:6d:22:ee:
47:29:32:ea:bf:4d:8d:28:59:23:2a:9f:dd:6d:95:0b:17:1c:
7c:a5:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:59 2026 by rpki-client