This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/371059F4B8A311EEBDA30041C4F9AE02.roa
File: 371059F4B8A311EEBDA30041C4F9AE02.roa (raw, json)
Hash identifier: 6V1ULB2afDlEq59NkQuqJB6JSmFq0Z+I0yfXV4LcD7w=
Subject key identifier: 38:8A:E4:D3:02:D4:84:12:46:88:0D:21:AC:DD:0C:F2:F9:E6:30:AD
Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Certificate serial: 017D
Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/371059F4B8A311EEBDA30041C4F9AE02.roa
Signing time: Fri 05 Dec 2025 02:12:38 +0000
ROA not before: Fri 05 Dec 2025 02:12:38 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 148973
IP address blocks: 103.175.26.0/23 maxlen: 23
103.175.26.0/24 maxlen: 24
103.175.27.0/24 maxlen: 24
2001:df0:5a40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9
Validity
Not Before: Dec 5 02:12:38 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69323f96-be79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:ad:10:37:15:48:3d:2b:f1:11:44:47:9c:
e5:be:86:0f:56:35:41:a8:94:2e:d7:28:2d:38:ad:
54:74:ca:a2:f5:a0:bf:9f:06:d8:45:97:41:06:6e:
29:4f:5a:45:07:b0:50:f9:da:73:72:fa:89:17:64:
2d:4f:d3:71:75:34:95:6a:d2:40:53:91:18:14:9b:
c1:9d:c6:70:12:4d:36:05:0b:52:3e:df:7f:57:95:
30:f6:35:4a:92:bb:96:f4:26:9c:ee:e2:49:f0:34:
46:82:38:5a:4b:ee:b6:2f:8b:85:e9:5f:fc:76:06:
11:db:43:02:a8:34:99:25:10:7e:7d:da:53:80:d6:
0a:34:fe:b1:b3:4c:4c:2f:76:3b:ea:c8:05:46:61:
9a:0c:5d:60:25:13:30:6a:6a:f4:08:7c:4c:8c:21:
8a:f2:2f:d4:f0:67:f1:83:2e:f8:b3:51:0b:d2:08:
79:ae:b1:71:0a:c4:c4:b5:1a:84:b5:2e:70:15:d5:
ea:2d:49:0e:b9:6a:84:61:e2:9c:c0:c0:a8:79:c0:
0a:32:07:a6:13:6e:86:2d:fd:b8:7d:ab:ab:c2:d1:
03:84:14:e6:52:36:5b:d8:e2:fa:52:ba:98:d4:5f:
73:36:9b:00:aa:07:6f:35:74:03:46:ae:29:2a:de:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:E4:D3:02:D4:84:12:46:88:0D:21:AC:DD:0C:F2:F9:E6:30:AD
X509v3 Authority Key Identifier:
keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/371059F4B8A311EEBDA30041C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.26.0/23
IPv6:
2001:df0:5a40::/48
Signature Algorithm: sha256WithRSAEncryption
0f:fc:4d:0d:1f:03:0d:db:b4:84:cf:8a:d8:65:d8:99:67:b7:
65:a2:84:54:c9:02:92:d5:0a:69:ce:29:76:dd:50:8c:bb:49:
99:b8:40:54:8a:c0:1d:f1:93:24:42:a8:bc:75:e4:11:98:e0:
bc:09:32:ad:3f:75:36:e3:09:b2:0c:c2:ea:1d:f8:1f:cb:59:
f6:2e:4b:c2:5a:7c:51:b8:e4:ff:b8:a3:e8:85:6d:ce:e6:7a:
fa:57:29:72:13:3a:da:2f:d2:6a:ee:46:1a:39:87:af:c0:1d:
bb:b6:d7:5a:71:dd:8b:fc:41:95:b7:da:c6:a0:d3:6b:ec:65:
33:e1:8a:a8:aa:ed:61:06:dd:f1:af:c2:94:cb:9a:50:08:4d:
97:d6:fb:f2:1b:eb:ea:7d:b5:de:eb:44:b5:79:8a:99:bd:0c:
83:e9:20:bc:b7:4c:41:be:f6:7a:bd:57:d3:c6:58:fa:64:5f:
ea:cf:f5:04:32:3b:41:a1:eb:77:5d:22:d8:de:88:19:66:44:
af:3f:98:aa:95:eb:4d:92:e7:d9:bb:ba:9a:53:95:8b:e5:e7:
43:77:8e:06:74:32:0a:0a:fd:d7:2d:fd:5e:d7:b9:8e:8c:33:
e4:87:44:08:69:b3:dd:6d:b8:09:1d:3e:58:dd:3c:bf:d8:30:
5e:be:26:c1
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkU2RDcxMTAvBgNVBAUTKDcwQ0QwMkI2NjQyNDc5QTg3NDQ2MjcxNTcwNkU2QUE5
QTg5REEyQzkwHhcNMjUxMjA1MDIxMjM4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTMyM2Y5Ni1iZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArx+tEDcVSD0r8RFER5zlvoYPVjVBqJQu1ygtOK1UdMqi9aC/nwbYRZdBBm4p
T1pFB7BQ+dpzcvqJF2QtT9NxdTSVatJAU5EYFJvBncZwEk02BQtSPt9/V5Uw9jVK
kruW9Cac7uJJ8DRGgjhaS+62L4uF6V/8dgYR20MCqDSZJRB+fdpTgNYKNP6xs0xM
L3Y76sgFRmGaDF1gJRMwamr0CHxMjCGK8i/U8Gfxgy74s1EL0gh5rrFxCsTEtRqE
tS5wFdXqLUkOuWqEYeKcwMCoecAKMgemE26GLf24faurwtEDhBTmUjZb2OL6UrqY
1F9zNpsAqgdvNXQDRq4pKt6hIQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDiK5NMC
1IQSRogNIazdDPL55jCtMB8GA1UdIwQYMBaAFHDNArZkJHmodEYnFXBuaqmonaLJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZENy83MUE1MTU3NEFF
RjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2VhaDBSaWNWY0c1cXFhaWRv
c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NNMEN0bVFrZWFoMFJpY1ZjRzVxcWFpZG9zay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkU2RDcvNzFBNTE1NzRBRUYyMTFFRUIyOTNCNDgwQzRGOUFFMDIvMzcxMDU5RjRC
OEEzMTFFRUJEQTMwMDQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnrxowDwQCAAIwCQMHACABDfBaQDANBgkqhkiG9w0BAQsF
AAOCAQEAD/xNDR8DDdu0hM+K2GXYmWe3ZaKEVMkCktUKac4pdt1QjLtJmbhAVIrA
HfGTJEKovHXkEZjgvAkyrT91NuMJsgzC6h34H8tZ9i5Lwlp8Ubjk/7ij6IVtzuZ6
+lcpchM62i/Sau5GGjmHr8Adu7bXWnHdi/xBlbfaxqDTa+xlM+GKqKrtYQbd8a/C
lMuaUAhNl9b78hvr6n213utEtXmKmb0Mg+kgvLdMQb72er1X08ZY+mRf6s/1BDI7
QaHrd10i2N6IGWZErz+YqpXrTZLn2bu6mlOVi+XnQ3eOBnQyCgr91y39Xte5jowz
5IdECGmz3W24CR0+WN08v9gwXr4mwQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:08:38 2025 by rpki-client