This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/C56AF018E98B11F0A24D3E834F6F56BC.roa
File: C56AF018E98B11F0A24D3E834F6F56BC.roa (raw, json)
Hash identifier: yZ2jVE40yA33X871A/zydQhRX13sbn7OZAORMUr4j0Y=
Subject key identifier: 9D:2D:2C:3B:BC:96:DD:AB:44:DC:5E:FC:DA:34:D9:B0:4D:E5:B2:95
Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial: 07A5
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/C56AF018E98B11F0A24D3E834F6F56BC.roa
Signing time: Sun 04 Jan 2026 16:38:17 +0000
ROA not before: Sun 04 Jan 2026 16:38:17 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 138023
IP address blocks: 103.137.109.0/24 maxlen: 24
2001:df6:700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Validity
Not Before: Jan 4 16:38:17 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=695a9779-1ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:ce:1e:4d:e2:e5:2d:2e:f5:3d:39:61:c1:
e3:72:fa:71:8b:ff:b7:0e:e6:56:99:41:0f:c9:22:
62:2e:e3:ab:a7:f3:8e:f0:d5:98:64:b6:00:7c:16:
2c:7b:2e:c6:19:11:31:d7:37:da:be:4d:22:44:b5:
8e:89:85:0a:cf:54:50:b9:83:51:53:fa:a6:9e:bd:
19:ba:91:ba:c5:fb:bf:aa:36:6c:c5:67:f0:52:97:
1e:ea:4c:20:28:12:85:46:6c:a2:3e:b2:7a:29:a2:
bf:17:7f:2c:37:c0:2c:e4:61:5f:0e:2d:e7:e8:18:
1f:fe:5b:dd:04:8d:78:83:88:4f:2e:9f:64:14:67:
3b:76:5a:51:94:12:17:88:f5:21:30:a9:be:d0:75:
fd:06:6c:a8:59:fb:5f:7e:ac:c5:5e:1a:99:84:00:
e8:36:b4:f7:9d:a4:6e:bb:35:13:2a:a6:27:f7:9c:
f5:c6:5a:32:c6:e2:3a:5d:67:d9:95:6a:74:11:72:
7a:93:4b:0b:8f:c8:b5:66:e9:35:3c:5c:15:31:ca:
b9:13:45:43:9e:05:7d:3c:37:9a:e0:3e:ba:1b:42:
ea:29:cd:22:db:cf:25:6c:2a:df:d9:43:56:68:f4:
ca:98:cc:66:5b:f9:e6:86:db:a4:74:b4:04:45:41:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2D:2C:3B:BC:96:DD:AB:44:DC:5E:FC:DA:34:D9:B0:4D:E5:B2:95
X509v3 Authority Key Identifier:
keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/C56AF018E98B11F0A24D3E834F6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.109.0/24
IPv6:
2001:df6:700::/48
Signature Algorithm: sha256WithRSAEncryption
86:ba:67:0e:19:77:b8:5b:5f:df:09:29:0b:ed:5e:cb:df:93:
53:47:a6:29:fb:ee:d1:b5:79:42:3d:a9:82:7a:cc:ef:4a:8b:
5a:44:af:dc:41:6b:37:0d:8f:e4:be:5c:a5:3c:31:0a:77:e8:
d9:c6:c5:5f:dd:c4:80:cc:4f:64:34:0a:8a:9a:94:93:e6:d0:
9e:c6:3a:31:8b:2f:5f:69:fd:0a:e5:3f:f5:9a:b6:75:2a:5a:
5f:1b:0c:13:f8:3f:be:21:78:9f:3f:f0:0d:40:3b:f1:32:e3:
51:61:b5:96:93:38:be:91:85:31:a9:cf:13:5c:84:ef:32:bf:
52:9f:5a:d7:b7:de:99:02:63:c1:d4:01:63:23:a8:f2:9e:c8:
80:7a:b9:34:69:9d:b1:6a:dd:64:4b:57:98:d9:35:05:68:6e:
9f:af:2f:4e:2c:ce:90:07:22:f5:64:71:3a:33:24:37:f1:aa:
4b:39:01:73:b4:98:58:47:e7:45:b4:4d:55:f4:1a:6e:24:95:
86:c4:53:2e:60:3d:e9:c8:2f:f3:6d:dc:ba:e5:de:a9:28:ea:
f6:d7:33:78:c1:fb:1a:b2:49:e9:fa:89:83:55:a5:d2:03:89:
35:7c:9d:54:99:a3:74:99:88:97:04:55:21:b2:a7:ce:dc:f4:
ef:a7:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:57:49 2026 by rpki-client