This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/3E1ABB8C816E11F0A5992F28C4F9AE02.roa
File: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (raw, json)
Hash identifier: g7/bOtmE/BsmkADeqFIqX5jFZ6I/fVslXINnoO9GFZU=
Subject key identifier: AB:7D:34:6D:C9:7B:1B:3F:6A:7F:F1:C9:87:20:21:11:70:1A:92:11
Certificate issuer: /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Certificate serial: 43
Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/3E1ABB8C816E11F0A5992F28C4F9AE02.roa
Signing time: Sat 27 Dec 2025 06:25:32 +0000
ROA not before: Sat 27 Dec 2025 06:25:32 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149014
IP address blocks: 103.160.44.0/23 maxlen: 23
103.160.44.0/24 maxlen: 24
103.160.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF
Validity
Not Before: Dec 27 06:25:32 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=694f7bdc-eaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:21:a8:4a:a1:ab:bc:24:4d:f1:19:6b:01:
ac:f6:57:2b:01:c1:6c:3c:95:be:62:11:8a:a5:86:
5a:24:13:88:46:d8:2d:90:1b:d5:81:a2:65:7e:f0:
a2:83:61:51:22:ac:68:f4:49:51:6a:53:96:7c:ad:
89:70:85:ed:d2:7e:86:45:07:17:7a:67:b7:46:4f:
30:64:c9:e9:e1:75:d3:fb:cd:0e:c1:0f:5b:10:86:
f4:bb:41:4b:2e:bb:0d:ed:b8:c7:6d:6b:9d:cb:2f:
bd:85:33:da:79:5b:93:9d:77:b7:be:36:d0:dc:e2:
8a:7d:7b:73:6d:06:0d:79:ad:53:e2:8f:c5:bc:6d:
15:3b:b2:0c:ae:28:7f:6b:f4:d5:ad:e2:44:f0:8f:
0b:85:ab:32:d1:2a:fd:ef:c6:b8:e2:d3:16:bd:72:
70:54:a0:e1:cc:dd:4e:fe:f9:bf:9c:c5:92:1f:9d:
66:c5:e6:dd:16:d6:c7:ec:17:75:2d:0f:8e:3e:46:
c0:0e:24:35:2d:c5:95:97:07:18:2d:f3:a3:47:a3:
fd:21:5d:33:f8:fc:c3:d0:25:13:62:4f:46:3e:e3:
ce:dd:43:a8:03:26:5b:14:93:7f:10:27:5f:6f:6d:
03:cf:22:fb:6f:61:b3:a0:9f:81:34:46:04:e7:cc:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7D:34:6D:C9:7B:1B:3F:6A:7F:F1:C9:87:20:21:11:70:1A:92:11
X509v3 Authority Key Identifier:
keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/3E1ABB8C816E11F0A5992F28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.44.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:29:e4:78:fc:e4:c3:99:39:af:88:9f:dd:72:cf:78:84:5a:
1a:36:86:e7:2a:1e:7d:27:81:49:0a:c4:36:c7:05:09:a1:2b:
74:80:84:0d:f8:32:13:92:7e:2c:14:aa:2d:75:d7:c7:0a:41:
1b:ea:cd:e1:77:da:74:51:43:8e:9c:b0:14:47:f4:de:96:dc:
d9:1e:0c:70:ea:0a:87:47:28:28:6c:4b:3d:80:41:8b:56:e6:
2a:1b:49:bf:c3:b8:09:31:63:ce:a3:f2:7d:93:74:01:2c:73:
5c:de:d0:a9:47:bf:f2:f2:6c:f5:d0:9a:40:4a:dc:49:eb:b7:
41:6d:2f:57:6c:34:b9:95:eb:58:b9:e0:02:00:16:35:a0:20:
3e:89:60:1f:88:3b:94:22:46:c9:4a:23:b2:21:07:9b:a1:6a:
8b:43:64:88:e7:c9:fb:eb:51:61:af:f7:4c:31:77:3f:62:28:
50:02:7f:7b:a5:04:0b:5b:5b:38:ee:db:5c:46:8c:e8:b3:89:
8d:65:81:81:51:fc:34:58:1d:e0:93:43:98:52:48:eb:80:54:
3f:a9:49:75:55:92:dc:ea:e6:10:6c:0e:b6:3c:26:f6:c0:66:
ce:2a:86:ef:68:f4:cc:d4:41:4c:55:7c:8b:7a:bf:a0:d2:38:
68:3b:18:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:50 2026 by rpki-client