This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/A1D678CACD1D11EEBBCDB72BC4F9AE02.roa
File: A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (raw, json)
Hash identifier: zemkN5BROCdSUhbupRjiSnNtwcSlinI7FQCHVicj5PI=
Subject key identifier: 44:87:1A:12:B1:E3:76:6D:18:EC:70:AB:98:5C:F3:27:E5:DC:08:56
Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial: 0826
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/A1D678CACD1D11EEBBCDB72BC4F9AE02.roa
Signing time: Fri 14 Nov 2025 20:11:07 +0000
ROA not before: Fri 14 Nov 2025 20:11:06 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141226
IP address blocks: 103.5.108.0/22 maxlen: 24
103.156.192.0/23 maxlen: 24
163.47.188.0/22 maxlen: 24
202.36.209.0/24 maxlen: 24
2407:c9c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2086 (0x826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Validity
Not Before: Nov 14 20:11:06 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69178cda-c260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:41:bf:fd:5e:53:c2:20:b6:c8:a1:7e:cd:
d9:d4:2e:6f:8e:9c:ce:d2:5a:20:0a:79:6f:04:d1:
53:df:3a:c8:68:32:ea:68:8e:89:0e:08:42:4c:c4:
48:85:f0:25:3d:52:00:e4:70:52:d8:43:7e:02:8c:
12:4c:59:3f:6a:65:e7:66:e0:1e:42:fa:fa:70:ce:
a7:dd:0e:66:a6:f2:e4:f0:3c:84:36:22:e9:48:9f:
d9:3a:f2:d1:fa:86:63:56:af:6d:6f:39:8a:05:22:
e9:95:76:61:d0:3d:44:0d:fc:4f:25:4e:94:d0:14:
ef:25:77:13:ec:d0:7f:33:fe:08:f8:24:09:f2:93:
f9:75:6e:6f:8d:ed:c5:3e:3a:b9:39:97:2d:6c:a6:
f0:9c:cc:45:38:92:57:c0:e2:4e:a3:11:73:5e:c2:
7f:27:f7:5f:a4:f5:e3:72:79:f2:0c:5b:0c:4b:88:
ca:d5:de:e8:0c:e0:63:5b:4f:0c:23:30:a5:62:e4:
79:c7:24:0c:0e:2e:61:ea:46:1a:0f:28:bc:04:cb:
31:22:cd:12:69:0d:f7:e4:23:2f:e8:85:95:e0:65:
5d:d0:da:f4:e8:cb:06:6e:05:14:69:81:70:75:cd:
63:2b:44:39:4a:6e:60:91:b1:fd:c3:13:77:82:b3:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:87:1A:12:B1:E3:76:6D:18:EC:70:AB:98:5C:F3:27:E5:DC:08:56
X509v3 Authority Key Identifier:
keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/A1D678CACD1D11EEBBCDB72BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.108.0/22
103.156.192.0/23
163.47.188.0/22
202.36.209.0/24
IPv6:
2407:c9c0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:89:9a:e3:bc:58:fc:00:31:49:bb:04:bb:de:2a:5d:d8:d4:
08:de:2d:f9:71:ae:38:10:01:3f:62:89:d0:71:bc:cc:6a:06:
06:62:5c:9e:fa:2e:07:1e:9f:f5:30:b8:a4:9c:89:43:42:78:
8b:15:e2:a2:6d:fb:af:c6:47:be:43:61:3a:da:cc:19:d7:b3:
34:98:fb:f4:48:5f:5e:f6:3d:da:e7:48:28:11:ef:44:cf:5d:
6b:d2:c3:e9:8f:1f:46:30:32:0f:11:91:58:1d:aa:14:df:af:
ba:55:6c:05:58:a4:a6:25:69:96:5b:ed:77:ff:94:64:c0:d7:
b4:ed:d9:ad:51:9e:17:a6:7c:b3:32:6b:68:c2:94:47:e7:6f:
3f:cf:79:12:f1:de:d5:40:07:43:42:d6:92:bb:92:15:85:cc:
c8:c4:f3:cc:ff:8e:48:c4:35:0a:a0:a1:65:28:bf:4b:29:68:
9d:81:92:30:be:3d:5c:13:4d:34:e4:c8:3b:04:f3:aa:7f:df:
48:9f:b3:c7:8e:1a:5d:c7:a6:0c:fe:df:0a:dd:51:57:eb:a1:
b2:93:2a:15:aa:1d:63:86:3e:0f:e0:fa:fa:b4:51:6d:0b:09:
7c:75:2a:59:89:a7:20:11:21:73:21:8c:be:2f:cb:bd:8e:a3:
f3:31:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 15:55:23 2025 by rpki-client