This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/9DF5B38CE0D011ECAF88A30DC4F9AE02.roa
File: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (raw, json)
Hash identifier: OUWEXoLeOinyz/Ug0ayVd+KibDjRwUcscyDUBUxVkug=
Subject key identifier: ED:DB:9E:9D:AF:35:E2:B8:A9:97:F9:6D:E5:E5:10:20:67:CC:AA:DB
Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72
Certificate serial: 06AF
Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/9DF5B38CE0D011ECAF88A30DC4F9AE02.roa
Signing time: Wed 31 Dec 2025 22:18:44 +0000
ROA not before: Wed 31 Dec 2025 22:18:44 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136778
IP address blocks: 103.144.218.0/23 maxlen: 23
103.144.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl
rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1711 (0x6af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C53EC, serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72
Validity
Not Before: Dec 31 22:18:44 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6955a144-68e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:ab:d0:11:5b:20:83:a1:2b:d7:5a:e9:4f:
9f:f1:f8:a4:b9:f0:e3:eb:45:b7:1b:7d:0f:f7:04:
b2:48:12:44:cb:2a:2e:b6:e0:41:40:e8:02:cc:6b:
27:36:28:2c:ee:36:88:dd:94:44:40:e8:e3:f9:14:
3a:c6:86:36:c8:20:b9:04:a8:11:77:3f:ef:fa:97:
ce:59:a9:08:c6:c2:e6:13:0e:c9:12:73:08:72:4d:
f2:2f:cd:88:15:88:ca:af:78:ee:e3:ff:dc:1c:cf:
0f:26:f1:72:cc:cd:ce:4c:02:92:42:2d:e8:86:40:
ea:99:c7:94:2e:d1:67:27:74:57:bc:b9:2c:9e:fe:
ad:d3:3f:fd:5e:00:0b:b8:86:54:44:a7:2a:dd:ba:
4c:d1:95:34:3f:b9:fa:1f:97:fd:20:da:b3:4e:cc:
5e:b9:3b:87:d7:ef:35:f2:e1:50:c4:d6:99:19:f4:
6f:b0:c5:58:17:6f:68:16:01:f4:19:14:fe:d8:18:
85:6d:d3:d8:a4:0b:7a:f8:88:4f:9f:33:8c:02:a3:
e2:e9:98:bf:1f:f5:30:44:21:83:2f:57:ad:50:a5:
a1:19:0d:4c:04:ad:6e:a4:78:66:cf:de:46:db:a6:
71:4c:2f:a3:10:c8:e6:55:47:0b:20:50:64:a5:be:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DB:9E:9D:AF:35:E2:B8:A9:97:F9:6D:E5:E5:10:20:67:CC:AA:DB
X509v3 Authority Key Identifier:
keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/9DF5B38CE0D011ECAF88A30DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.218.0/23
Signature Algorithm: sha256WithRSAEncryption
51:c2:33:ed:84:60:26:4a:a0:5b:c3:87:38:32:3b:e0:99:dd:
77:2f:72:01:5d:f6:62:21:33:aa:b6:7c:de:c3:b4:82:9a:04:
55:6a:dc:c9:b5:d1:26:67:86:74:03:86:ea:78:47:5a:f8:08:
3e:9f:3e:10:0c:66:6d:57:93:73:cd:33:5c:b4:87:80:a1:b8:
94:6a:99:52:c1:94:17:59:71:b9:d5:fa:16:01:a8:a7:91:ba:
1f:a8:3a:78:56:03:0b:53:ac:02:61:9e:7b:e8:22:23:66:26:
4a:f4:57:41:ad:fa:d4:5a:8a:38:37:bc:9d:27:f5:d7:32:0a:
22:06:35:cf:57:31:13:1a:20:d3:ea:70:f0:51:e2:b2:c5:ab:
10:6b:5e:56:fc:3f:70:1e:9a:b6:76:f9:e4:d8:5b:a0:d2:2f:
e0:c0:2c:5d:06:1b:fe:71:7d:39:11:a6:db:d8:be:16:82:30:
64:63:20:8a:05:47:a1:36:ea:e8:b3:9e:89:36:0f:1d:5e:04:
eb:f8:08:50:34:74:24:51:cf:37:18:cf:14:63:c6:1c:e8:6b:
31:68:b0:35:56:1b:e1:e0:eb:f9:9e:8c:30:99:62:42:bc:67:
c9:0e:97:ce:0f:4d:89:dc:db:1f:5d:bd:10:4d:82:a8:3c:30:
75:20:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:18:02 2026 by rpki-client