This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/1714A7D489BD11EC9550C184C4F9AE02.roa
File: 1714A7D489BD11EC9550C184C4F9AE02.roa (raw, json)
Hash identifier: xISFxkTIy1/sW6ONq88vOHfhrQ/CIElHTxq+CkeoHlY=
Subject key identifier: 3D:0A:4F:17:E9:35:22:2B:68:66:CD:13:3B:2A:C1:29:05:B5:C0:73
Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Certificate serial: 07E8
Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/1714A7D489BD11EC9550C184C4F9AE02.roa
Signing time: Wed 26 Nov 2025 20:42:01 +0000
ROA not before: Wed 26 Nov 2025 20:42:01 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139088
IP address blocks: 103.157.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2024 (0x7e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B36DC, serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Validity
Not Before: Nov 26 20:42:01 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69276619-5f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:2b:bb:ad:a0:de:8b:a3:3f:b8:16:41:34:
e2:cf:79:62:b1:5b:e4:31:62:82:85:be:c0:ad:2e:
33:d2:ea:ca:79:0c:52:dc:c1:13:24:04:26:b5:3b:
cc:2e:36:59:a2:db:82:61:41:c3:80:22:18:d1:29:
fd:d7:da:24:a3:38:86:bb:31:0e:f9:88:92:3b:37:
ff:67:7d:0f:fe:7f:a7:ff:48:4e:ab:76:e4:77:9d:
ee:c8:f8:d5:70:d0:08:b1:7d:d1:32:b7:32:45:30:
0c:c4:2f:87:42:eb:da:f1:d9:a2:3e:0c:3e:d4:2a:
23:e6:2a:41:a3:ec:cc:c2:38:fb:a5:1e:16:18:8c:
87:f8:39:4e:12:1d:7e:a9:d2:d7:0c:19:0e:8b:92:
ab:89:7d:ae:21:ed:b5:58:d7:2d:a9:50:8e:7c:94:
8d:42:d0:14:af:39:7a:b7:55:04:4f:18:80:53:85:
37:ff:05:8f:cf:e5:dd:a9:d4:65:c4:2e:a6:f9:d0:
a1:84:45:2b:4b:3d:db:a3:fb:87:50:58:35:e4:a2:
c8:59:ba:aa:71:29:be:e2:14:8e:f6:41:f4:51:81:
fa:8f:0b:74:c6:58:34:a0:58:de:52:96:45:e6:bf:
3b:23:aa:54:60:fd:62:9f:2a:6a:1b:d5:d8:e8:12:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0A:4F:17:E9:35:22:2B:68:66:CD:13:3B:2A:C1:29:05:B5:C0:73
X509v3 Authority Key Identifier:
keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/1714A7D489BD11EC9550C184C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bd:34:50:28:ac:77:53:1a:47:6f:ff:a9:45:ef:47:d5:4a:
9b:00:3d:e7:0b:3b:f0:6d:07:14:53:c6:65:57:3d:af:c5:95:
69:93:40:1a:ae:56:63:29:ff:5d:38:fc:fd:ae:c8:85:3d:28:
aa:fe:11:12:1b:b2:4a:05:e9:9f:1d:12:cb:6e:5d:15:89:15:
32:26:61:b4:50:62:6c:2c:02:e2:88:60:83:bb:e8:91:f7:4c:
7e:89:ee:98:c9:6a:49:3b:f4:d7:d9:7f:cd:b9:61:59:36:67:
06:1d:e1:5f:78:ca:99:d5:bb:b7:f3:91:f4:4b:bf:88:8b:0d:
86:89:60:82:2d:fb:a7:15:fa:19:44:d5:d2:6a:79:42:46:dd:
d6:91:f4:b7:4f:db:64:6b:fc:da:9e:b7:12:0e:cc:ae:c8:3a:
88:f5:81:6d:1f:80:fb:b4:34:47:e8:29:1f:3a:d7:14:92:4b:
5a:35:b9:b9:1d:5c:4a:7a:2b:ef:2f:90:e7:f2:2d:f6:bc:85:
d0:87:f8:0d:7c:05:ba:cc:13:4e:cd:bf:7d:da:6c:58:f2:7f:
90:58:98:08:a5:2d:d3:95:e4:e8:0f:21:31:18:e3:d1:3b:f7:
db:48:ba:be:9b:61:a9:64:02:bc:8a:21:e3:17:a5:f9:ce:26:
40:c4:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:35:17 2025 by rpki-client