This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/3E174B92CF8311F0BE74A724C4F9AE02.roa
File: 3E174B92CF8311F0BE74A724C4F9AE02.roa (raw, json)
Hash identifier: zU2ZC9pd1qPndbB6paiKIY91JEp+IoIIOqC7AB8clTE=
Subject key identifier: 55:29:77:0E:B5:CE:BB:77:A5:0D:49:C1:E2:7A:4D:D3:19:2B:83:74
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0DFC
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/3E174B92CF8311F0BE74A724C4F9AE02.roa
Signing time: Tue 02 Dec 2025 13:31:44 +0000
ROA not before: Tue 02 Dec 2025 13:31:44 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137453
IP address blocks: 103.117.110.0/24 maxlen: 24
103.117.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Dec 2 13:31:44 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=692eea40-d916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:25:2d:00:2a:b4:7e:ad:ea:dc:44:01:5b:99:
77:70:62:68:ca:f5:a4:06:99:1a:49:0f:e2:96:19:
c6:91:f6:11:e0:09:77:38:55:83:f9:ef:4e:f2:01:
30:cc:05:33:a2:a6:13:15:92:c6:4d:e1:67:23:c6:
bb:92:5f:dd:3f:6d:18:6a:7b:64:ee:e2:4f:9f:c3:
4f:ff:db:c2:06:c9:5b:9f:3e:dc:0c:f7:3c:79:e1:
b4:ba:11:db:8c:06:f1:f3:c9:bb:6a:6a:3a:3b:8e:
f7:6a:a5:e3:38:a8:11:e1:be:df:14:e5:fc:ad:20:
d4:a3:dc:6f:c8:ae:b1:d5:91:60:bb:9c:aa:7d:f8:
fa:96:c6:f2:5f:84:f3:e4:cc:ac:60:9a:b9:f9:2c:
3f:2c:91:11:cc:59:fd:70:3d:4b:d0:11:30:3e:70:
66:d1:bf:f9:ad:f3:fa:e8:a9:cf:ed:4f:13:f6:6a:
f6:60:4c:9a:ec:95:69:2b:b6:2f:21:88:6d:85:75:
6d:a0:38:55:0f:56:c2:69:7c:2c:30:59:55:f6:b8:
a0:ea:1b:89:9f:ec:36:e9:1d:49:db:a0:5c:da:5f:
12:b2:96:27:20:4a:07:11:95:53:ad:96:ee:cd:44:
0f:a5:57:da:e4:ba:56:ee:56:06:45:b3:a1:43:73:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:29:77:0E:B5:CE:BB:77:A5:0D:49:C1:E2:7A:4D:D3:19:2B:83:74
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/3E174B92CF8311F0BE74A724C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.110.0/23
Signature Algorithm: sha256WithRSAEncryption
95:5d:67:cc:6d:80:79:de:23:f9:d5:b1:19:34:a6:02:db:56:
d3:2e:04:bf:4c:74:a5:ab:cd:03:6d:11:3a:60:9c:f2:a6:53:
6f:d4:2f:22:fd:31:4e:de:f6:7e:4e:50:1e:dd:84:e4:10:c5:
8d:03:92:2f:31:27:a1:4b:fb:76:45:64:61:bd:de:8e:ea:e3:
0f:05:f1:61:c4:8b:9d:5e:11:53:a9:45:65:f6:5e:aa:5e:3f:
16:01:9f:08:2c:49:e2:51:ad:01:96:18:67:59:4d:2a:80:d4:
9f:45:53:c2:30:bb:cd:e2:83:ce:03:9a:38:37:92:c4:3b:91:
2e:10:8b:3a:91:9b:4b:d3:45:68:5b:47:ae:3f:4c:f6:75:ad:
a7:a5:fe:10:74:64:a7:05:f8:1f:78:24:1e:3b:f8:98:d1:f1:
0e:93:6b:1a:8d:fa:de:4b:c1:be:b7:81:ad:a4:aa:7c:d1:8b:
7f:ce:bd:95:9a:34:b1:d1:12:1e:67:0c:75:cd:f9:3c:1d:3d:
d7:87:60:35:5d:ff:c2:7d:93:90:a2:b6:b3:3f:c2:03:f0:e2:
60:de:e6:3d:26:a6:ac:8c:df:fa:85:35:18:83:f2:29:6d:e7:
72:13:e8:e8:26:7c:ef:b3:1f:18:b5:0c:80:6a:ba:14:42:74:
e4:81:41:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:24:01 2025 by rpki-client