This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F5E1478E822411F088762570C4F9AE02.roa
File: F5E1478E822411F088762570C4F9AE02.roa (raw, json)
Hash identifier: F6x2VR0z28GbB0d9HuM+s2rM3DDRV0jdzlKxDU8o0g0=
Subject key identifier: 9A:B3:6E:CC:17:9C:95:46:B0:62:2A:4E:06:B5:72:21:1F:15:9E:6C
Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial: 0BF1
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F5E1478E822411F088762570C4F9AE02.roa
Signing time: Wed 07 Jan 2026 07:58:49 +0000
ROA not before: Wed 07 Jan 2026 07:58:49 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 197537
IP address blocks: 43.239.104.0/24 maxlen: 24
43.239.105.0/24 maxlen: 24
45.124.204.0/24 maxlen: 24
45.124.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3057 (0xbf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Validity
Not Before: Jan 7 07:58:49 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=695e1239-8653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:07:d3:ce:32:0c:aa:bd:4e:db:06:ab:81:
cd:f5:36:72:45:c6:3d:be:65:39:c7:f6:24:1b:f9:
40:0b:79:3d:25:f7:a3:0f:6a:cb:5f:aa:c2:21:fc:
49:d9:77:e1:d4:4c:c1:e6:26:c5:e7:ee:c7:f9:34:
4d:a2:48:c0:72:b0:73:67:cf:64:b1:32:0f:de:dc:
80:43:38:cf:71:26:6a:47:aa:8a:a9:ba:52:16:ed:
b4:d5:d8:71:88:50:ee:b8:ba:63:ad:a0:6f:6b:8e:
60:0d:44:53:18:ee:03:b4:50:4a:ce:3f:2b:0c:49:
b2:df:0f:ee:39:ec:a4:2e:f0:89:ea:81:61:c5:34:
67:ac:82:90:f8:10:95:14:f6:eb:ff:87:b0:fd:84:
d2:20:e2:77:07:d8:e7:6e:d0:8b:95:66:a3:1e:e7:
b0:91:88:49:db:5b:34:73:e9:82:ea:02:5c:95:d5:
51:2e:e2:0e:1d:02:c5:bc:e8:15:4f:5a:d8:b6:c7:
16:95:b1:b9:ba:95:4c:d4:63:91:70:15:db:02:6b:
92:b1:f0:6c:d4:22:26:43:75:37:87:67:10:c7:a5:
44:80:7c:62:e6:f4:83:f4:3b:6c:15:93:13:fd:65:
d1:74:3b:6c:de:bd:01:24:8f:56:a0:30:63:cb:a2:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:6E:CC:17:9C:95:46:B0:62:2A:4E:06:B5:72:21:1F:15:9E:6C
X509v3 Authority Key Identifier:
keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/F5E1478E822411F088762570C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.104.0/23
45.124.204.0/23
Signature Algorithm: sha256WithRSAEncryption
61:7f:93:c9:8b:99:73:1a:4e:ea:22:7e:4d:0a:5c:cd:ad:c8:
1f:c8:21:6e:dc:f2:97:f2:1b:ca:4e:2c:9b:d5:cb:62:e5:a9:
07:1d:2e:4c:2a:48:65:12:01:7e:25:30:db:62:44:50:fd:04:
22:98:94:ae:53:02:9f:20:3b:56:d0:f3:4f:7a:3d:8a:ac:24:
46:c3:a3:f2:3f:dd:f3:3e:15:23:a9:6b:7c:7b:93:e3:04:b7:
dc:69:93:47:cd:fc:95:2e:a5:50:3e:7d:2e:6a:62:ec:b0:1c:
eb:9b:c2:2b:87:c1:82:04:0c:98:16:d4:e6:f7:f5:15:00:13:
6e:c4:26:4f:9a:4d:5d:04:70:39:29:0c:78:0e:37:14:a6:dd:
0c:5f:6c:74:4d:af:e5:7e:9d:a0:de:05:fb:46:cb:9c:c8:90:
37:4e:2e:3a:57:bc:80:be:b6:81:b6:37:20:47:71:cc:71:37:
0b:93:da:13:13:e9:e3:85:28:83:0f:d5:30:d6:20:20:6f:19:
84:cd:62:08:fd:71:58:64:6e:b8:ad:60:98:4e:1a:a2:65:42:
ac:b3:d0:96:0b:d8:89:6e:9b:9d:39:8c:69:27:52:da:51:4c:
e5:39:4f:55:31:dd:a9:e1:0d:05:f5:65:0b:5b:b3:3c:5a:eb:
03:87:e5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:29 2026 by rpki-client