This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/36EA74DAB55C11EF9EF5381AC4F9AE02.roa
File: 36EA74DAB55C11EF9EF5381AC4F9AE02.roa (raw, json)
Hash identifier: 7Z1UnS1z13TS0COGYiKAsYpUFTJRnOno6sfz9B/pZ2k=
Subject key identifier: 46:7C:B6:75:EA:7A:34:6A:42:B4:4C:19:A4:D2:38:76:C0:53:30:A7
Certificate issuer: /CN=A91C1710/serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
Certificate serial: 01E8
Authority key identifier: C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/36EA74DAB55C11EF9EF5381AC4F9AE02.roa
Signing time: Sat 08 Nov 2025 23:15:12 +0000
ROA not before: Sat 08 Nov 2025 23:15:12 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 153038
IP address blocks: 103.20.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl
rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1710, serialNumber=C93753A9AAA2A86E56CA4EA0C3FF857C30E34228
Validity
Not Before: Nov 8 23:15:12 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=690fcf00-52d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3c:6d:af:66:49:3a:75:57:1c:36:65:80:de:
94:f5:47:b6:b4:60:92:0d:20:86:20:c1:20:32:9e:
d2:ef:be:0a:2b:69:6b:3c:ee:52:c7:19:3c:c6:07:
d9:34:f8:a0:87:a8:04:39:77:8b:e0:f1:e3:8a:c9:
3d:e2:eb:64:c0:a9:39:ad:fc:c5:6f:23:08:33:9c:
27:34:20:d0:b2:40:cf:a5:dd:60:5d:be:6c:7a:08:
55:0c:5d:41:a3:3f:7f:a6:23:8e:47:3d:ad:e9:b6:
3a:1f:d3:90:73:a5:b2:23:08:0a:ee:38:13:62:cc:
db:78:52:20:14:9e:49:ea:63:9a:46:0b:48:4a:1c:
d5:0d:92:dd:16:8b:37:fb:72:eb:14:74:6b:39:d4:
26:27:96:10:bf:d5:c8:42:ba:da:50:15:c6:fd:54:
87:57:37:e9:d5:95:bc:72:55:b2:c7:9c:54:17:0c:
5c:16:7a:26:e9:e8:4d:73:9f:13:6b:30:59:c7:83:
f3:9b:8d:64:f8:26:24:5e:71:d7:91:5d:4b:e9:2d:
33:c4:8e:0b:b6:98:1e:2a:dc:00:fb:23:6d:4b:e5:
96:dd:9b:f6:15:46:ae:34:58:9f:66:7c:b8:90:3f:
2c:02:05:50:97:ad:b7:54:f2:65:73:ca:1a:a1:f7:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:B6:75:EA:7A:34:6A:42:B4:4C:19:A4:D2:38:76:C0:53:30:A7
X509v3 Authority Key Identifier:
keyid:C9:37:53:A9:AA:A2:A8:6E:56:CA:4E:A0:C3:FF:85:7C:30:E3:42:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/yTdTqaqiqG5Wyk6gw_-FfDDjQig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTdTqaqiqG5Wyk6gw_-FfDDjQig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/36EA74DAB55C11EF9EF5381AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.89.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:2c:59:95:09:45:65:fb:20:97:6f:f8:6f:6d:7d:6e:58:b5:
c0:65:dc:28:99:2f:eb:ec:b1:61:0a:62:19:93:0f:05:24:c4:
b5:f5:0f:8e:70:f8:f5:e0:5e:3d:1e:4b:da:50:2f:2b:b7:09:
5c:4d:83:f5:8f:6d:a0:c0:55:96:91:a3:26:f0:d8:9f:c0:c9:
eb:c3:a0:a3:cc:2d:c2:30:5f:97:c1:05:64:0a:79:60:54:1f:
01:5b:ef:08:a2:ad:ca:d2:aa:bf:b4:ba:12:16:1a:09:9e:78:
68:36:32:91:81:b1:95:16:a4:75:bb:47:60:87:c6:6d:bc:84:
19:c9:cf:39:67:b2:15:52:52:8b:3f:e2:c3:7a:6c:57:c1:00:
1c:0e:4b:a1:99:2d:6d:d0:fb:17:f7:cf:3c:4f:d3:e8:9f:cf:
45:b9:56:04:fd:94:b0:77:53:3d:e7:f3:fa:82:5e:68:43:ce:
4e:5d:b0:11:05:64:de:1d:34:2f:97:21:8d:33:c6:3e:bf:b6:
14:2e:38:60:1b:14:e2:2a:ae:42:e0:17:4d:0c:d9:6e:33:1e:
88:87:5e:81:71:5f:a6:12:2e:dc:37:c1:d7:de:f1:f5:66:0b:
fb:2f:23:1b:ad:fd:fa:07:55:95:13:be:0b:a2:87:43:ce:70:
96:39:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:52:55 2025 by rpki-client