This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/ED1ED0E26B7E11F09377264EC4F9AE02.roa
File: ED1ED0E26B7E11F09377264EC4F9AE02.roa (raw, json)
Hash identifier: BxHi7FVyZXn1K92DDVei4jBWtPhNRD7/6bh+F76rIsk=
Subject key identifier: 93:84:B3:8B:9B:B3:51:85:24:04:72:82:12:D2:F4:72:43:F9:E4:DD
Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial: 3C
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/ED1ED0E26B7E11F09377264EC4F9AE02.roa
Signing time: Mon 28 Jul 2025 06:48:54 +0000
ROA not before: Mon 28 Jul 2025 06:48:54 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 135637
IP address blocks: 103.77.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Validity
Not Before: Jul 28 06:48:54 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=68871d55-4657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:ba:22:95:50:bc:ee:02:e1:30:d9:1e:7e:
ad:8a:5b:76:a1:a8:1b:49:75:c7:5e:bb:22:0f:35:
d6:cd:8c:ab:fd:6a:aa:3b:13:e0:ff:d1:98:88:ac:
a8:d8:f5:a8:ee:03:0b:58:c5:4b:d8:2d:a5:16:c2:
9e:de:0a:e2:30:0f:39:b6:11:fa:50:7b:ce:06:b4:
37:36:d7:6a:72:c4:86:da:0a:75:0e:54:80:04:91:
d5:1a:43:3b:eb:cf:74:38:7b:70:d3:f0:d7:c9:5c:
d0:0a:6e:0e:f6:b7:67:58:74:ec:fa:0b:9f:31:0d:
5e:76:a7:fd:9a:b5:b5:07:87:7e:30:36:7d:d7:41:
6a:9c:89:3d:4d:78:f1:2b:98:b3:fd:6c:fe:18:c6:
05:b4:9c:41:fb:2e:97:87:9e:5c:6f:fa:dd:9e:bc:
06:3f:17:ef:1a:7c:1b:26:da:32:cb:0d:ed:80:8c:
fa:5d:ee:7a:48:a6:d8:eb:d7:8b:3f:9d:87:db:83:
54:38:10:f6:e9:a3:54:05:65:8e:f7:40:48:d3:fc:
6d:09:5a:5f:ea:07:18:45:53:e6:05:9c:d8:cd:3e:
78:df:f7:34:48:70:59:c3:3f:1f:94:26:88:1b:f9:
3b:10:df:fa:d4:9b:b8:20:52:e7:40:19:e0:9e:99:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:84:B3:8B:9B:B3:51:85:24:04:72:82:12:D2:F4:72:43:F9:E4:DD
X509v3 Authority Key Identifier:
keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/ED1ED0E26B7E11F09377264EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.100.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6a:07:98:39:cd:50:d9:df:e1:22:d9:77:55:6f:f1:c4:ea:
99:29:84:fa:c7:90:d9:cb:ba:c5:b9:e6:44:80:65:da:56:9b:
9e:17:de:15:8b:93:f2:b4:20:04:8e:ca:31:97:af:0a:ed:8d:
45:db:5c:fa:b6:c1:7b:cf:a9:76:a3:86:b1:3e:38:b5:34:c4:
e0:94:8f:5f:13:5e:4a:ad:5d:be:10:a1:a3:94:76:5c:9e:d1:
cb:ba:9a:d1:a5:6e:49:3e:3b:ab:d6:4a:ef:e0:53:10:58:34:
69:4c:22:99:cf:84:e5:65:47:95:69:c7:55:90:9b:e1:80:5b:
5e:43:74:5f:42:04:5e:2f:cb:59:45:d7:3c:7d:30:e9:38:89:
58:b1:e1:79:a5:1b:04:75:32:a5:dd:94:84:3d:39:e7:ec:c3:
e7:2b:45:e8:81:58:4c:48:c6:b1:ab:01:8d:49:55:27:2f:84:
8d:80:b9:9f:dc:fd:a3:2c:6d:63:eb:b8:3f:e2:be:48:20:2d:
4a:48:df:7c:7e:00:50:f5:53:c1:ed:09:6e:f8:7d:e0:f0:c6:
11:a7:0b:59:40:cc:42:33:64:fb:34:1f:db:ec:1c:b2:3e:33:
47:34:c7:4b:74:8a:7c:fa:4f:09:71:d5:73:00:45:a9:f8:a5:
82:2b:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:03:06 2025 by rpki-client