This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A46317803F5211EBB1B1701FC4F9AE02.roa
File: A46317803F5211EBB1B1701FC4F9AE02.roa (raw, json)
Hash identifier: Q4VBl6t7IxgDUfIveQUTPQulCitna2Ej85qnHBLGKO8=
Subject key identifier: 5D:93:56:CA:73:A4:28:BA:2A:CD:07:81:62:DF:03:45:EF:2E:A8:96
Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial: 0797
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A46317803F5211EBB1B1701FC4F9AE02.roa
Signing time: Fri 28 Nov 2025 20:53:46 +0000
ROA not before: Fri 28 Nov 2025 20:53:46 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137525
IP address blocks: 103.111.168.0/22 maxlen: 23
110.238.160.0/20 maxlen: 21
110.238.160.0/22 maxlen: 22
110.238.168.0/22 maxlen: 22
110.238.176.0/21 maxlen: 21
110.238.180.0/22 maxlen: 22
110.238.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1943 (0x797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Validity
Not Before: Nov 28 20:53:46 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=692a0bda-5f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:1e:0e:3a:3b:aa:2b:67:83:65:17:b9:23:
78:20:b7:57:16:03:4f:7f:68:4a:c3:3e:fb:91:72:
d0:d1:30:c5:d7:e8:3e:1e:60:47:1c:d6:b3:09:00:
e8:ec:33:93:3b:b8:41:67:fa:6d:41:b9:33:50:5a:
26:20:2b:9c:80:4c:15:5d:a4:8e:6c:96:3f:81:35:
51:18:01:54:cf:0a:49:91:c1:62:d3:b9:65:8d:e8:
b5:85:98:b5:0d:8a:2d:d5:26:ac:2f:51:89:72:c9:
e5:c3:78:40:1c:d9:bb:47:ac:c5:8a:c9:c6:df:3b:
7d:e1:ef:de:5d:6d:da:97:47:b1:55:eb:0a:28:ac:
f0:b9:e2:23:f2:eb:4d:37:6b:e6:c1:30:3b:20:d0:
dc:a6:f8:0c:5d:81:de:99:7b:bb:73:1a:bf:a8:97:
eb:95:90:90:62:0a:7c:c8:9b:12:3a:33:3f:29:7f:
f1:44:44:2b:c8:20:e8:1c:6e:72:7b:bd:8a:89:2e:
97:e4:82:70:86:38:ad:ce:7c:49:07:73:d1:3e:a6:
a1:91:a0:de:2b:e3:81:8c:ce:64:18:f9:d2:a4:03:
ec:bb:7d:38:ae:dc:24:43:d3:da:c4:4a:bc:f3:e8:
11:ad:91:c2:39:b7:ac:3c:03:9d:61:61:e9:d2:12:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:56:CA:73:A4:28:BA:2A:CD:07:81:62:DF:03:45:EF:2E:A8:96
X509v3 Authority Key Identifier:
keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A46317803F5211EBB1B1701FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.168.0/22
110.238.160.0-110.238.183.255
Signature Algorithm: sha256WithRSAEncryption
21:a3:6e:ab:ff:70:bd:18:6e:4d:42:b7:0a:db:c6:73:7e:49:
90:40:32:cc:4a:51:50:02:6d:28:e5:ed:e7:b4:ed:1c:a1:26:
d4:9d:15:23:df:53:a3:36:f5:85:14:66:6c:79:32:8b:99:5a:
83:4b:de:1a:ac:a9:e3:6d:81:a1:99:66:16:be:cf:1f:13:6a:
d4:ed:6c:fe:3f:55:5c:fd:a1:04:38:35:43:75:18:c6:14:52:
95:ff:c8:64:67:2e:6a:85:02:77:f7:94:6c:d0:df:7f:43:4d:
3c:6e:71:00:ec:21:1b:0f:dd:8c:97:64:3f:b7:b5:18:67:83:
55:d8:7a:64:45:dc:77:f5:a6:89:8d:c1:9b:aa:92:9f:8e:23:
5e:9f:42:dd:c0:86:55:5c:f3:61:a1:ea:6c:67:ea:9e:d2:80:
de:cc:c6:bf:34:c3:2d:48:22:ec:d6:92:89:31:cd:eb:19:01:
54:b7:33:c7:ca:1f:72:19:a5:e4:9f:c2:34:6c:0b:be:13:99:
34:d1:47:f2:ff:14:dd:1e:38:4a:a5:83:94:fc:08:ff:13:c3:
09:1e:2f:52:7c:92:3d:f9:db:2f:9d:77:66:fd:71:0e:cc:9d:
0a:bd:4e:45:82:56:b6:4a:a6:bc:17:87:00:4e:5c:25:f7:cb:
3e:3f:2f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:34:37 2025 by rpki-client